Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3130382e302f32342d3234203d3e20313431303339.roa
File: 34362e3138332e3130382e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: cEshVbBXasm8PD1Q3UNHwSUu5GxVzWktG2cwt0VHlZc=
Subject key identifier: 49:35:17:94:C6:EF:CC:09:B0:DB:5D:58:F8:78:D0:6D:42:06:FE:A0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 377673D47A2E16D21DAEBF6AB78FFDE9AD5549D4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3130382e302f32342d3234203d3e20313431303339.roa
Signing time: Wed 12 Aug 2026 09:27:50 +0000
ROA not before: Wed 12 Aug 2026 09:22:50 +0000
ROA not after: Wed 11 Aug 2027 09:27:50 +0000
asID: 141039
IP address blocks: 46.183.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:76:73:d4:7a:2e:16:d2:1d:ae:bf:6a:b7:8f:fd:e9:ad:55:49:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 12 09:22:50 2026 GMT
Not After : Aug 11 09:27:50 2027 GMT
Subject: CN=49351794C6EFCC09B0DB5D58F878D06D4206FEA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:65:f8:6d:c2:65:91:d0:29:a4:3c:7d:35:
39:b5:55:37:42:cc:bc:d1:40:8f:6f:82:f2:e3:5d:
59:a8:5a:4d:e3:e0:e3:ce:7b:d8:7d:f8:db:b2:b8:
1c:0a:23:c6:aa:26:13:91:7b:89:e0:86:35:65:9e:
0f:0a:b5:0c:58:39:6c:b7:1f:6d:5a:77:18:8c:1c:
57:ee:da:6c:f6:47:d3:06:09:55:36:9d:cf:d3:21:
01:19:6b:8a:ae:67:b4:f2:97:5c:95:1a:01:9a:b4:
17:0a:38:9e:53:5b:79:d2:e8:6a:82:3c:cd:4f:b1:
38:8d:9c:99:60:ae:9f:b8:bb:73:15:15:1d:e6:af:
c7:33:c0:ec:04:e7:8d:47:ea:cf:d3:74:38:7a:b1:
7b:87:dd:68:a3:65:94:58:93:ec:f0:dd:2b:da:ce:
1a:40:3d:4f:b1:4b:db:6a:1c:96:37:66:62:f9:45:
ba:8a:8a:e3:2d:a5:f7:1d:0e:6d:46:4a:9b:ce:4e:
cf:ac:3b:2d:84:57:a4:2f:4c:6d:64:76:f9:ed:1e:
eb:b6:67:b3:5a:c7:38:fc:28:69:c6:92:95:59:33:
d1:b6:2f:4d:ab:aa:db:12:c3:a5:24:37:55:89:3f:
30:76:fb:e0:f8:fe:93:cd:7d:50:56:6e:a9:67:5a:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:35:17:94:C6:EF:CC:09:B0:DB:5D:58:F8:78:D0:6D:42:06:FE:A0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3130382e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.108.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ff:7f:b9:d7:18:6d:3c:46:cb:bf:0b:5b:f1:51:2c:32:6a:
7e:7f:12:28:10:63:9a:7c:0c:1c:c5:97:ae:00:d9:6b:d4:d7:
20:a7:9f:b1:42:c7:d2:6d:54:df:3b:db:b1:39:a2:93:4a:42:
0c:e4:ba:2a:27:7b:9b:5d:8c:6c:ba:5b:83:5b:ac:7a:90:72:
3c:6e:90:42:a1:97:f7:24:63:3a:29:71:73:e6:9e:db:75:41:
03:e2:20:73:1e:fe:fc:ac:6d:3c:eb:38:df:26:a1:83:69:e9:
72:63:5b:d1:2c:38:61:d6:59:51:8d:fc:b0:41:56:ed:e6:3a:
05:85:6d:a7:2d:8e:8e:9b:8a:45:c4:07:08:85:77:f4:6a:b4:
3d:90:5b:ed:56:e8:04:cb:bd:a8:dc:18:de:5d:16:40:97:c9:
e8:76:9d:6a:f5:a3:32:be:8e:c7:21:c3:63:a6:01:2b:21:f0:
0c:4b:5a:84:8d:6a:3c:38:8a:18:c4:19:eb:62:b9:eb:55:20:
d9:e2:8f:5f:08:db:23:3f:bf:24:90:bc:8d:60:03:a5:37:f4:
31:34:c1:51:cb:e4:37:e4:42:28:7a:64:30:a0:fc:07:b3:25:
ea:c2:88:3d:31:ff:09:27:21:d4:e5:e3:7a:d4:69:39:a1:c2:
8c:c7:d2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:54:43 2026 by rpki-client