Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136332e302f32342d3234203d3e20323132323338.roa
File: 34352e39352e3136332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: T70pjPNgY4047qSrtyxDX/cxkRLDkU3x4VzL3PLpC+4=
Subject key identifier: A5:D0:A8:7C:2F:FD:3E:8C:E2:C8:71:93:A5:36:40:AB:92:C9:ED:E6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 19DB07830A46AF056C6C8356AA4D3A42584523D8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136332e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Oct 2025 09:07:18 +0000
ROA not before: Thu 09 Oct 2025 09:02:18 +0000
ROA not after: Thu 08 Oct 2026 09:07:18 +0000
asID: 212238
IP address blocks: 45.95.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:db:07:83:0a:46:af:05:6c:6c:83:56:aa:4d:3a:42:58:45:23:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 09:02:18 2025 GMT
Not After : Oct 8 09:07:18 2026 GMT
Subject: CN=A5D0A87C2FFD3E8CE2C87193A53640AB92C9EDE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:61:1d:3e:29:61:46:87:4f:d7:e9:6a:c9:
39:83:55:d9:66:3d:7a:21:c8:33:73:78:4a:aa:f9:
b4:2c:2e:0b:3d:da:51:ca:d1:43:86:f2:e1:ee:0e:
21:dd:24:ca:fe:cf:88:7c:97:c3:64:a5:7e:37:50:
9c:e8:b8:58:41:23:3d:c1:01:1a:c7:ea:87:45:fe:
40:9d:0a:24:69:a0:23:49:9b:25:7b:04:6f:cd:2e:
62:a8:27:bb:87:3b:d6:44:cd:f1:ad:7f:91:01:b9:
89:f2:f4:48:dd:31:f8:fa:be:a2:0c:28:8c:43:d1:
ee:87:58:63:f2:91:ad:d5:15:d6:66:b4:34:30:5c:
bf:8c:3e:d9:62:0f:24:ac:cc:2b:4a:4e:1f:95:bb:
e8:10:52:91:7e:fb:39:8f:86:6f:b5:42:5b:23:60:
52:8a:16:77:7e:ab:46:21:6b:89:19:a4:7d:e2:51:
9f:27:d8:81:27:aa:b5:26:17:3c:35:1a:f8:1a:3e:
d3:a1:c2:8e:65:1c:4d:81:c8:a4:a9:27:73:ed:19:
77:b8:77:60:e6:f2:a1:ef:84:60:72:46:19:a4:54:
95:59:a0:3a:03:b2:ff:51:20:b0:ed:1e:3a:d0:d4:
be:0e:97:49:d4:33:b5:6b:0c:ba:4a:81:64:b3:fa:
d0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D0:A8:7C:2F:FD:3E:8C:E2:C8:71:93:A5:36:40:AB:92:C9:ED:E6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.163.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a2:43:f9:91:b6:49:f3:8f:4a:e0:b8:2d:05:e6:a3:82:93:
4d:4a:db:08:c7:cc:33:20:04:dc:bc:77:01:eb:0a:27:62:3c:
3b:0d:93:27:40:5a:16:b8:13:00:66:5b:9d:10:96:6c:90:de:
3b:3f:90:7f:c9:9e:31:44:18:04:9c:7e:7a:ac:30:5f:aa:2d:
7e:22:e4:d0:d7:3c:20:cd:81:3b:b9:ec:71:33:4a:19:66:43:
52:b1:fa:6b:36:ba:6c:74:7b:ae:a0:b8:83:6c:c8:16:80:1a:
5f:2c:d0:f5:32:f9:b2:be:b7:91:e0:57:e5:23:1d:25:07:8e:
45:56:a8:55:93:25:68:0d:ec:b6:0b:e1:44:4e:89:97:ba:68:
33:7b:32:99:33:28:48:a6:48:d3:c4:aa:de:d6:dc:f0:54:68:
bd:45:d2:45:14:dc:d0:37:98:1d:69:25:34:c2:2f:ec:ee:5e:
67:07:89:9d:92:38:29:f5:22:32:13:1f:ad:45:8b:70:da:eb:
06:ae:be:22:86:9f:23:8d:9b:02:89:83:14:b2:3a:51:1f:00:
a4:38:4d:7a:64:f8:02:a1:d5:4e:9a:1c:48:33:70:4a:a5:33:
de:a2:fe:e2:30:7b:0c:4d:12:97:c7:ec:0f:12:09:ad:51:37:
6c:9f:f0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:19:49 2025 by rpki-client