Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232322e302f32342d3234203d3e20313431303339.roa
File: 34352e38382e3232322e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: GMeU5O2n6IGLRYO28HQ1g6txW5e/9MgA7CsoYeKg9L8=
Subject key identifier: 34:AC:0F:26:72:F8:2F:40:69:67:81:75:BD:51:0B:E0:6B:0E:65:BE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7826305B102BE8C13D88DD5F6A3B23050DAFCCD5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232322e302f32342d3234203d3e20313431303339.roa
Signing time: Wed 01 Jul 2026 15:26:00 +0000
ROA not before: Wed 01 Jul 2026 15:21:00 +0000
ROA not after: Wed 30 Jun 2027 15:26:00 +0000
asID: 141039
IP address blocks: 45.88.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:26:30:5b:10:2b:e8:c1:3d:88:dd:5f:6a:3b:23:05:0d:af:cc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:21:00 2026 GMT
Not After : Jun 30 15:26:00 2027 GMT
Subject: CN=34AC0F2672F82F4069678175BD510BE06B0E65BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c0:d5:56:2c:28:7b:4e:74:3f:aa:03:9a:e2:
07:df:f7:c5:f4:16:39:b0:7d:e3:a3:e3:e3:50:06:
d8:92:16:fc:1f:6f:ed:db:c1:a0:92:b7:43:c0:cc:
95:fa:97:cc:50:8f:7a:79:16:7f:71:41:d6:06:93:
05:11:2f:9f:fc:ee:c2:ad:66:78:e4:07:38:89:1c:
20:60:96:51:78:16:55:f0:6f:b6:bb:d1:ba:05:83:
49:0e:a7:5c:a6:05:a8:cd:f1:ca:0c:a1:6d:72:8a:
6e:20:ea:c6:58:28:b2:97:94:3d:e9:0b:e3:f5:fd:
81:cb:da:e7:61:4b:0f:a2:08:b1:0c:07:9d:3e:6d:
ad:48:35:fd:f7:f7:f3:06:89:54:6c:b0:a9:63:a8:
e3:f3:36:85:7b:d0:31:7c:8e:0c:49:72:28:4f:b4:
3b:27:b5:f7:58:49:c1:7b:c8:2a:19:a0:5a:17:66:
c3:43:d9:27:c5:64:1c:0b:1a:b8:0f:35:f8:16:82:
14:ec:a8:0d:2f:48:4b:1e:e2:06:4e:e1:b9:74:54:
5f:a6:b0:99:d1:5f:96:7d:72:41:a9:33:1c:e6:a0:
76:7f:8b:31:36:1f:1c:f4:e4:12:95:bc:e2:b5:b3:
f8:02:02:76:62:5a:84:dd:ad:9f:2b:2c:12:6c:bb:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AC:0F:26:72:F8:2F:40:69:67:81:75:BD:51:0B:E0:6B:0E:65:BE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232322e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.222.0/24
Signature Algorithm: sha256WithRSAEncryption
00:66:c4:ab:0b:34:0d:cb:6b:fc:b7:6f:1e:b1:d1:c3:2e:8b:
0e:93:b2:60:0a:30:93:a6:7c:c9:d2:1a:0e:b8:2f:e3:0d:cd:
31:d4:44:7c:83:2b:2f:1e:52:0b:76:eb:f9:f7:88:4e:be:91:
8b:cb:84:e7:26:ef:b6:8d:25:f1:83:81:38:ff:60:31:69:a3:
61:3a:81:07:3b:9c:04:85:e6:38:fa:09:c1:d6:b6:18:d7:7c:
22:d7:f2:b6:78:d1:05:26:89:84:21:df:97:3a:34:9d:4b:60:
61:c7:1e:fc:03:a9:a9:97:0e:c1:21:3e:f2:66:f6:ed:f2:d1:
3c:bd:8b:76:41:cc:1a:5c:a6:dd:11:32:3b:de:d7:1f:3d:27:
c9:6b:b5:4a:a1:97:de:c6:ec:62:47:2c:89:a2:69:9f:7e:20:
aa:e7:ed:59:21:ac:78:b8:11:68:d3:91:f9:ac:78:68:52:45:
10:52:f9:c9:60:a9:28:91:b6:12:7b:71:c7:01:46:f5:9f:f4:
e4:ae:32:2a:44:9f:9f:67:20:b2:26:a0:35:45:e6:a1:52:55:
25:90:17:29:b2:4f:2a:24:53:93:ed:e1:0a:ab:94:10:b8:4e:
59:85:58:6c:f2:d0:fb:91:67:b8:e9:8a:be:e5:fa:18:35:92:
21:c7:55:04
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUeCYwWxAr6ME9iN1fajsjBQ2vzNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MDExNTIxMDBaFw0yNzA2MzAxNTI2MDBaMDMxMTAvBgNV
BAMTKDM0QUMwRjI2NzJGODJGNDA2OTY3ODE3NUJENTEwQkUwNkIwRTY1QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnwNVWLCh7TnQ/qgOa4gff98X0
FjmwfeOj4+NQBtiSFvwfb+3bwaCSt0PAzJX6l8xQj3p5Fn9xQdYGkwURL5/87sKt
ZnjkBziJHCBgllF4FlXwb7a70boFg0kOp1ymBajN8coMoW1yim4g6sZYKLKXlD3p
C+P1/YHL2udhSw+iCLEMB50+ba1INf339/MGiVRssKljqOPzNoV70DF8jgxJcihP
tDsntfdYScF7yCoZoFoXZsND2SfFZBwLGrgPNfgWghTsqA0vSEse4gZO4bl0VF+m
sJnRX5Z9ckGpMxzmoHZ/izE2Hxz05BKVvOK1s/gCAnZiWoTdrZ8rLBJsu4U/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUNKwPJnL4L0BpZ4F1vVEL4GsOZb4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzgzODJlMzIzMjMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzMzM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LVjeMA0GCSqGSIb3DQEBCwUAA4IBAQAAZsSrCzQNy2v8t28esdHDLosOk7JgCjCT
pnzJ0hoOuC/jDc0x1ER8gysvHlILduv594hOvpGLy4TnJu+2jSXxg4E4/2AxaaNh
OoEHO5wEheY4+gnB1rYY13wi1/K2eNEFJomEId+XOjSdS2Bhxx78A6mplw7BIT7y
Zvbt8tE8vYt2QcwaXKbdETI73tcfPSfJa7VKoZfexuxiRyyJommffiCq5+1ZIax4
uBFo05H5rHhoUkUQUvnJYKkokbYSe3HHAUb1n/TkrjIqRJ+fZyCyJqA1ReahUlUl
kBcpsk8qJFOT7eEKq5QQuE5ZhVhs8tD7kWe46Yq+5foYNZIhx1UE
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:37 2026 by rpki-client