Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136332e302f32342d3234203d3e20323132323338.roa
File: 34352e39352e3136332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: UAcnGtgCI00xZ7PBMvz4vOVrK+CBnP/XqRaaQlvgrIQ=
Subject key identifier: 9A:C6:EA:57:B0:38:D1:1D:22:DB:C3:C6:D4:FB:E0:52:09:FB:6C:E7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4BF50B6E4D2A05EE1C8A0BE320779CD44541D71E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136332e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:43 +0000
ROA not before: Thu 10 Sep 2026 09:23:43 +0000
ROA not after: Thu 09 Sep 2027 09:28:43 +0000
asID: 212238
IP address blocks: 45.95.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f5:0b:6e:4d:2a:05:ee:1c:8a:0b:e3:20:77:9c:d4:45:41:d7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:43 2026 GMT
Not After : Sep 9 09:28:43 2027 GMT
Subject: CN=9AC6EA57B038D11D22DBC3C6D4FBE05209FB6CE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:28:6b:c5:2e:cc:93:0b:e2:f6:2e:f1:a3:
2f:df:e4:89:46:76:6c:09:ab:2b:c8:85:8b:ce:7a:
35:d9:9e:34:39:03:48:78:8a:85:83:39:22:ab:3d:
2f:d8:ec:65:73:21:d4:c6:3a:21:7d:d1:95:4e:7c:
36:57:7b:a1:d1:a7:14:e2:8a:09:26:8c:26:6e:bf:
a7:ea:b0:21:bc:f2:f2:8b:24:15:68:87:7f:34:3e:
93:9b:f6:b8:46:fa:de:f3:c8:0b:5d:d2:e3:87:ca:
8f:c6:f4:f8:24:7e:95:7f:9a:66:67:f7:31:7d:50:
f1:77:13:50:2c:12:4b:cf:50:8e:5d:ed:df:bb:c2:
fb:91:84:fc:f3:6d:a3:75:33:d1:32:fe:0c:0c:3a:
e8:d4:ea:64:c1:94:12:97:75:31:25:4a:0a:5d:79:
dd:71:e5:da:7b:ad:38:1a:a6:e1:cd:52:35:8b:f0:
9c:20:7a:96:fd:3b:29:18:59:f2:33:bd:91:fc:1b:
33:cb:de:1f:03:c5:3b:58:d0:42:70:4e:e6:b4:02:
4c:d7:8f:66:f4:f7:d6:50:8f:ab:da:ba:3f:15:6d:
45:86:3f:33:c7:2b:d0:76:13:44:63:d5:ac:cc:24:
c3:d5:00:f1:71:19:9a:7a:5a:b1:0e:9a:89:3e:ef:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C6:EA:57:B0:38:D1:1D:22:DB:C3:C6:D4:FB:E0:52:09:FB:6C:E7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cb:86:e3:1e:00:d6:2b:98:4c:01:28:c6:74:8d:62:ee:86:
d9:36:d1:89:62:40:c0:a8:17:44:4a:b4:5f:ae:fd:c4:a4:71:
96:f8:cd:cb:2d:8f:78:cb:14:ae:90:12:f7:27:e2:79:97:fd:
ff:8d:25:38:9b:ff:54:3f:e7:38:a1:2e:7a:8f:98:8d:71:15:
3e:28:ee:7f:b3:a8:c8:1a:3b:40:3d:52:02:2e:12:6a:64:d6:
e3:fa:03:41:39:fe:f3:ed:8b:51:e9:e1:e2:d2:91:cd:a0:7b:
31:68:bc:09:1e:9d:e4:80:82:d3:3d:6a:31:1a:c9:d6:cd:ca:
a7:82:02:a9:cf:df:5f:fc:5c:66:47:a1:7c:3a:2c:59:a7:fd:
15:80:ea:b5:fb:7b:6f:25:dd:84:d6:1f:1a:3c:d4:50:ea:1c:
0b:3d:46:66:1b:e3:35:e4:55:df:40:df:c3:25:93:a0:5e:5f:
51:75:8b:0d:9a:0f:80:68:9f:68:06:21:ac:5d:a6:81:df:6c:
ec:34:cf:5b:e9:c6:96:6f:0e:1e:4b:a3:98:03:6b:bf:85:d6:
6d:e7:e1:e9:d7:a4:ed:b8:6b:72:e5:b0:7e:ef:9a:2a:b6:f2:
59:ad:0f:a1:1b:ff:54:63:0e:ea:0e:26:ea:8c:e6:93:6a:c7:
84:23:9e:c2
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUS/ULbk0qBe4cigvjIHec1EVB1x4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTAwOTIzNDNaFw0yNzA5MDkwOTI4NDNaMDMxMTAvBgNV
BAMTKDlBQzZFQTU3QjAzOEQxMUQyMkRCQzNDNkQ0RkJFMDUyMDlGQjZDRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+sihrxS7Mkwvi9i7xoy/f5IlG
dmwJqyvIhYvOejXZnjQ5A0h4ioWDOSKrPS/Y7GVzIdTGOiF90ZVOfDZXe6HRpxTi
igkmjCZuv6fqsCG88vKLJBVoh380PpOb9rhG+t7zyAtd0uOHyo/G9PgkfpV/mmZn
9zF9UPF3E1AsEkvPUI5d7d+7wvuRhPzzbaN1M9Ey/gwMOujU6mTBlBKXdTElSgpd
ed1x5dp7rTgapuHNUjWL8Jwgepb9OykYWfIzvZH8GzPL3h8DxTtY0EJwTua0AkzX
j2b099ZQj6vauj8VbUWGPzPHK9B2E0Rj1azMJMPVAPFxGZp6WrEOmok+7w3VAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUmsbqV7A40R0i28PG1PvgUgn7bOcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzkzNTJlMzEzNjMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LV+jMA0GCSqGSIb3DQEBCwUAA4IBAQANy4bjHgDWK5hMASjGdI1i7obZNtGJYkDA
qBdESrRfrv3EpHGW+M3LLY94yxSukBL3J+J5l/3/jSU4m/9UP+c4oS56j5iNcRU+
KO5/s6jIGjtAPVICLhJqZNbj+gNBOf7z7YtR6eHi0pHNoHsxaLwJHp3kgILTPWox
GsnWzcqnggKpz99f/FxmR6F8OixZp/0VgOq1+3tvJd2E1h8aPNRQ6hwLPUZmG+M1
5FXfQN/DJZOgXl9RdYsNmg+AaJ9oBiGsXaaB32zsNM9b6caWbw4eS6OYA2u/hdZt
5+Hp16TtuGty5bB+75oqtvJZrQ+hG/9UYw7qDibqjOaTaseEI57C
-----END CERTIFICATE-----
Generated at Fri Sep 18 19:00:55 2026 by rpki-client