Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232312e302f32342d3234203d3e20313336373837.roa
File: 34352e38382e3232312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 2dCvLk5PgNSSz6UHmQTyP5+mk/tdh8nh1LxB1X3aQ6k=
Subject key identifier: D9:04:62:D6:54:79:E5:F3:C2:62:65:2A:FF:AE:80:09:68:B9:CC:65
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 715E865BCCCEE677DEF635AB45B9B3E6B7DACA77
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232312e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 01 Jul 2026 15:25:59 +0000
ROA not before: Wed 01 Jul 2026 15:20:59 +0000
ROA not after: Wed 30 Jun 2027 15:25:59 +0000
asID: 136787
IP address blocks: 45.88.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:5e:86:5b:cc:ce:e6:77:de:f6:35:ab:45:b9:b3:e6:b7:da:ca:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:20:59 2026 GMT
Not After : Jun 30 15:25:59 2027 GMT
Subject: CN=D90462D65479E5F3C262652AFFAE800968B9CC65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:eb:07:08:5f:6f:1f:78:28:cd:ac:c2:62:
c7:7b:e3:9b:be:b9:18:ae:0a:8a:66:6d:fd:26:e9:
42:ba:b4:15:18:e3:69:45:0e:99:62:50:20:55:ec:
17:52:a1:8e:58:5a:ba:8e:87:3e:06:68:e4:bb:3d:
1c:f1:84:24:b5:8f:10:c9:33:0b:a4:09:9d:8c:b5:
5c:97:e0:bf:96:b9:b2:db:9e:ab:d7:ac:dd:5f:18:
d0:08:3b:15:20:45:2b:27:01:8d:1d:2e:4e:cc:1a:
e1:47:3b:01:fc:87:26:ec:d6:9a:08:59:a3:e2:7f:
d6:84:a1:1b:64:12:d6:f0:44:75:78:a6:29:d2:8d:
eb:99:67:6f:c9:76:e7:b6:0e:b6:23:7e:cc:c4:fe:
07:24:13:8f:b4:82:52:35:44:ae:68:20:32:16:a8:
b0:7d:d0:fd:37:dc:3f:20:06:ce:bc:48:3d:70:ea:
5f:0a:aa:54:cc:0d:e5:5a:ad:4a:8d:ad:d4:d2:62:
90:71:95:e8:16:9c:9f:94:d2:47:d9:d8:d3:9d:ee:
61:2f:53:b3:3c:05:43:fd:ca:6a:01:33:90:76:e7:
eb:16:73:37:a1:b5:6b:44:b9:e8:0f:03:8c:62:cc:
b5:30:6b:cc:db:82:96:5e:c7:5d:10:3f:86:d5:40:
85:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:04:62:D6:54:79:E5:F3:C2:62:65:2A:FF:AE:80:09:68:B9:CC:65
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.221.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e3:64:21:bc:40:c7:ab:c3:f6:42:17:d0:3e:07:e4:b9:2f:
af:49:61:de:5a:7d:21:4d:55:45:a5:a1:3c:6a:a4:f4:c6:7c:
f4:42:9a:e0:1a:3a:c1:32:12:01:22:5d:6e:81:46:35:5a:1e:
8c:18:88:ed:be:38:16:30:a2:64:48:6f:5e:7d:2b:e5:60:24:
9c:74:c2:17:0e:17:3f:10:51:65:62:ef:36:5c:85:16:2f:7e:
8a:1a:fb:a1:22:b6:cc:a8:39:6d:c0:a9:89:81:28:94:18:92:
5b:0f:c4:df:2b:e5:78:56:7d:73:75:eb:a7:35:a0:0e:f7:6a:
45:b8:fb:77:a4:2d:d5:15:67:08:b6:aa:02:15:be:1c:ab:92:
63:8c:2b:1c:23:1e:27:f2:bc:d4:cd:56:65:6d:8b:10:ee:18:
53:55:73:10:9c:52:3b:58:2e:5a:43:c1:d7:b0:7f:fa:b4:53:
af:b1:a7:f5:69:40:d6:db:f7:5f:5d:2d:d9:e9:e4:f7:a6:b8:
06:ad:80:f7:bb:e2:b5:11:d9:22:ec:2e:72:d8:bf:27:3a:22:
9e:ca:ea:30:03:03:b8:98:0d:b3:29:df:d2:cb:95:5a:c8:b3:
0d:21:61:ea:db:65:1b:83:d8:07:f8:16:72:6c:07:0e:20:0d:
f7:1d:c2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:41 2026 by rpki-client