Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39332e35322e302f32322d3234203d3e20323033303631.roa
File: 34352e39332e35322e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier: 9lRa+x1vZB3X2ACSm0Ir7OIOIXNUbeKvtsU+bci5v2k=
Subject key identifier: 65:0D:DF:57:D4:6F:B3:0F:21:C5:48:36:00:AC:A3:C5:48:48:81:2A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 65207267E677563BC85C792151A056A1107115A9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39332e35322e302f32322d3234203d3e20323033303631.roa
Signing time: Wed 01 Jul 2026 15:25:58 +0000
ROA not before: Wed 01 Jul 2026 15:20:58 +0000
ROA not after: Wed 30 Jun 2027 15:25:58 +0000
asID: 203061
IP address blocks: 45.93.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:20:72:67:e6:77:56:3b:c8:5c:79:21:51:a0:56:a1:10:71:15:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:20:58 2026 GMT
Not After : Jun 30 15:25:58 2027 GMT
Subject: CN=650DDF57D46FB30F21C5483600ACA3C54848812A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:ae:bd:16:20:ab:46:34:06:b2:4b:ef:12:
bf:f4:a2:3d:14:9f:da:c1:b7:6d:06:24:d4:e6:51:
8d:d1:bf:dc:ec:4c:ee:76:d8:e0:54:f9:14:26:e7:
96:72:38:67:25:02:aa:9c:ef:95:8e:32:b1:e6:ec:
6f:38:4e:31:c3:5f:26:86:ea:fc:fa:44:79:5a:05:
b4:09:02:17:69:38:9d:b1:25:33:0c:81:bf:c2:4c:
5c:00:30:15:03:46:07:5a:27:ed:b9:cb:27:89:8a:
40:05:d1:c0:6a:db:c1:aa:dd:a5:65:08:c0:fd:19:
4d:19:96:3a:be:6c:9f:bb:f9:6b:92:f9:5f:b8:d8:
3a:1f:0b:d7:3b:89:81:ac:36:7e:0d:9f:21:9c:0a:
8e:f8:7a:1f:a8:17:0f:12:3b:1a:3b:a7:d1:ad:f3:
39:7c:f1:89:38:23:6a:ee:fa:27:f0:1b:da:89:fd:
bc:41:76:9e:60:cd:47:12:1c:c1:cf:4e:97:08:92:
0e:4f:24:f8:2d:bb:73:ac:ed:24:73:6c:9c:2b:6e:
2e:63:40:05:31:2e:9a:b1:3b:28:13:46:25:26:e6:
d9:1c:12:8b:2e:fa:c3:62:16:0e:13:12:80:1b:48:
7e:35:72:f8:c3:a5:b9:49:c2:ea:ac:c4:5b:7f:65:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:DF:57:D4:6F:B3:0F:21:C5:48:36:00:AC:A3:C5:48:48:81:2A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39332e35322e302f32322d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.52.0/22
Signature Algorithm: sha256WithRSAEncryption
20:9b:c1:02:c6:a8:bf:db:8f:a4:9b:28:e1:4a:83:0c:15:07:
f8:d6:9d:2e:7a:49:03:ed:0c:47:e5:57:b2:55:42:a6:61:f8:
99:bd:67:c6:82:7c:12:b5:4c:c5:85:6c:41:ed:95:45:de:db:
51:5e:98:77:82:97:3b:c6:6e:02:02:69:14:36:1d:8c:b5:da:
0d:60:b7:41:0e:2c:af:53:8d:cb:39:b4:3f:f4:62:73:13:81:
e7:7b:a8:c6:74:1e:53:fb:06:da:45:d3:cc:56:66:31:99:15:
3b:15:bc:46:6e:65:fa:7a:75:ae:df:b5:85:1f:21:4b:b0:38:
08:f7:6f:ae:57:d7:17:a2:b7:69:32:9d:a2:3a:14:4a:94:1d:
15:71:6b:d0:89:6d:24:b4:ad:9f:42:58:68:a4:85:7c:5a:b1:
57:47:e8:8b:c0:c6:1c:28:6c:60:39:57:67:ab:1d:d5:53:6f:
ed:40:31:aa:3d:46:58:a0:f6:ce:b0:18:7c:ce:12:51:ca:0b:
65:5d:2b:f6:7d:87:57:8c:25:50:79:70:7d:50:04:f5:00:75:
6d:d2:9f:0a:42:08:86:7e:74:8c:e9:0b:8d:9d:3b:ab:e4:41:
59:a4:92:39:f8:35:e9:6a:62:9c:29:b0:28:2d:dd:15:e1:5d:
47:cf:44:00
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUZSByZ+Z3VjvIXHkhUaBWoRBxFakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MDExNTIwNThaFw0yNzA2MzAxNTI1NThaMDMxMTAvBgNV
BAMTKDY1MERERjU3RDQ2RkIzMEYyMUM1NDgzNjAwQUNBM0M1NDg0ODgxMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQsK69FiCrRjQGskvvEr/0oj0U
n9rBt20GJNTmUY3Rv9zsTO522OBU+RQm55ZyOGclAqqc75WOMrHm7G84TjHDXyaG
6vz6RHlaBbQJAhdpOJ2xJTMMgb/CTFwAMBUDRgdaJ+25yyeJikAF0cBq28Gq3aVl
CMD9GU0Zljq+bJ+7+WuS+V+42DofC9c7iYGsNn4NnyGcCo74eh+oFw8SOxo7p9Gt
8zl88Yk4I2ru+ifwG9qJ/bxBdp5gzUcSHMHPTpcIkg5PJPgtu3Os7SRzbJwrbi5j
QAUxLpqxOygTRiUm5tkcEosu+sNiFg4TEoAbSH41cvjDpblJwuqsxFt/ZReXAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUZQ3fV9Rvsw8hxUg2AKyjxUhIgSowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzkzMzJlMzUzMjJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzYzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1d
NDANBgkqhkiG9w0BAQsFAAOCAQEAIJvBAsaov9uPpJso4UqDDBUH+NadLnpJA+0M
R+VXslVCpmH4mb1nxoJ8ErVMxYVsQe2VRd7bUV6Yd4KXO8ZuAgJpFDYdjLXaDWC3
QQ4sr1ONyzm0P/RicxOB53uoxnQeU/sG2kXTzFZmMZkVOxW8Rm5l+np1rt+1hR8h
S7A4CPdvrlfXF6K3aTKdojoUSpQdFXFr0IltJLStn0JYaKSFfFqxV0foi8DGHChs
YDlXZ6sd1VNv7UAxqj1GWKD2zrAYfM4SUcoLZV0r9n2HV4wlUHlwfVAE9QB1bdKf
CkIIhn50jOkLjZ07q+RBWaSSOfg16WpinCmwKC3dFeFdR89EAA==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:11 2026 by rpki-client