Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3130392e302f32342d3234203d3e20313336373837.roa
File: 34362e3138332e3130392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 0oTDNYHu7o7wD0DtE4EdGt8Wjju7W9GewqsG9nX+x6c=
Subject key identifier: D7:AA:5A:C5:A3:60:42:F5:1F:C5:75:2A:27:2C:8C:B7:A3:F1:50:D6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0152B7A59F011E10AEF34528A120EDF7E795B75A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3130392e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 15 Aug 2026 13:28:03 +0000
ROA not before: Sat 15 Aug 2026 13:23:03 +0000
ROA not after: Sat 14 Aug 2027 13:28:03 +0000
asID: 136787
IP address blocks: 46.183.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:52:b7:a5:9f:01:1e:10:ae:f3:45:28:a1:20:ed:f7:e7:95:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 15 13:23:03 2026 GMT
Not After : Aug 14 13:28:03 2027 GMT
Subject: CN=D7AA5AC5A36042F51FC5752A272C8CB7A3F150D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:46:e1:2f:ea:2d:bf:86:dc:44:2c:56:0b:
8c:9a:26:56:2d:35:33:74:86:1c:65:e2:11:16:4e:
63:8a:93:22:f7:85:e1:bb:83:21:ac:d6:ae:26:fe:
8c:76:cc:3a:a0:6f:43:3c:32:ad:fd:07:9b:9e:74:
00:e8:18:47:d6:21:8b:94:3f:f7:08:03:3a:6f:56:
ab:56:1f:ac:f3:da:a9:bf:a6:75:f2:be:0b:ef:21:
0a:d2:1e:0d:45:11:a1:f5:80:86:30:0e:5c:7f:05:
71:dc:ba:23:74:08:0f:68:01:12:23:fa:f6:6a:78:
78:47:01:40:38:f7:a2:80:de:e1:e7:d8:dd:fc:2d:
ae:86:bc:e1:0f:b2:96:f2:cf:00:ef:dd:b0:98:98:
86:4f:89:ed:be:fd:a2:15:9b:3f:cc:57:29:1f:e4:
f0:c0:5e:4c:94:cc:a3:35:59:70:d7:88:cb:e1:d8:
fd:18:36:0f:d4:c0:47:e4:0e:e3:85:fe:ed:d7:cd:
46:5f:1e:8e:5d:4a:bd:8a:10:53:fa:5d:6b:1f:1a:
d1:58:17:c1:b9:92:f4:17:e1:2b:0b:05:94:b1:7f:
14:90:f0:fa:87:c9:3d:0a:95:c0:ed:83:c6:b2:9b:
b1:de:d7:4a:12:98:31:9d:bb:4f:de:0a:08:c1:f3:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AA:5A:C5:A3:60:42:F5:1F:C5:75:2A:27:2C:8C:B7:A3:F1:50:D6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3130392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b3:02:51:e1:bd:44:eb:4f:3e:56:29:57:4b:27:8b:83:11:
07:1d:42:ee:57:66:3c:46:34:e0:a4:31:e0:1c:5d:42:ff:f4:
25:0b:88:65:43:73:42:d6:6f:a5:88:4d:db:01:b1:4f:9c:68:
60:c4:82:11:69:dd:1c:2e:a5:a8:a8:b2:dd:ed:f1:f0:b2:2c:
bd:20:54:7d:d8:e2:73:56:26:ec:24:f7:e0:9e:9d:9b:f3:2f:
ed:39:df:6d:58:34:18:37:08:ad:55:d4:14:f5:e9:51:81:51:
92:df:8d:5f:fc:29:9c:e1:a0:9f:ad:38:08:78:08:2c:43:9c:
52:d1:92:92:ae:3e:52:48:bb:c1:da:00:da:78:7b:1b:90:e5:
30:64:e6:3f:ab:3d:44:33:e4:9e:f0:e6:bc:2e:bf:68:63:11:
86:ee:7a:1a:9b:88:cb:73:32:19:49:01:66:5c:3a:a1:cf:50:
13:53:a2:44:b1:78:a6:48:cd:55:88:5e:80:95:98:98:3d:8b:
66:47:15:60:5f:a8:0a:1f:db:3d:79:ae:56:58:94:c4:09:96:
bf:04:58:6e:1f:3f:89:3f:a4:68:98:9d:97:b9:2d:ee:21:a0:
6f:24:0a:e3:3f:ff:c1:d8:7a:fd:ab:8d:43:58:6f:e5:be:21:
3b:25:cb:2e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUAVK3pZ8BHhCu80UooSDt9+eVt1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MTUxMzIzMDNaFw0yNzA4MTQxMzI4MDNaMDMxMTAvBgNV
BAMTKEQ3QUE1QUM1QTM2MDQyRjUxRkM1NzUyQTI3MkM4Q0I3QTNGMTUwRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kUbhL+otv4bcRCxWC4yaJlYt
NTN0hhxl4hEWTmOKkyL3heG7gyGs1q4m/ox2zDqgb0M8Mq39B5uedADoGEfWIYuU
P/cIAzpvVqtWH6zz2qm/pnXyvgvvIQrSHg1FEaH1gIYwDlx/BXHcuiN0CA9oARIj
+vZqeHhHAUA496KA3uHn2N38La6GvOEPspbyzwDv3bCYmIZPie2+/aIVmz/MVykf
5PDAXkyUzKM1WXDXiMvh2P0YNg/UwEfkDuOF/u3XzUZfHo5dSr2KEFP6XWsfGtFY
F8G5kvQX4SsLBZSxfxSQ8PqHyT0KlcDtg8aym7He10oSmDGdu0/eCgjB8/wtAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU16paxaNgQvUfxXUqJyyMt6PxUNYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNjJlMzEzODMzMmUzMTMw
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAut20wDQYJKoZIhvcNAQELBQADggEBAKGzAlHhvUTrTz5WKVdLJ4uDEQcdQu5X
ZjxGNOCkMeAcXUL/9CULiGVDc0LWb6WITdsBsU+caGDEghFp3Rwupaiost3t8fCy
LL0gVH3Y4nNWJuwk9+CenZvzL+05321YNBg3CK1V1BT16VGBUZLfjV/8KZzhoJ+t
OAh4CCxDnFLRkpKuPlJIu8HaANp4exuQ5TBk5j+rPUQz5J7w5rwuv2hjEYbuehqb
iMtzMhlJAWZcOqHPUBNTokSxeKZIzVWIXoCVmJg9i2ZHFWBfqAof2z15rlZYlMQJ
lr8EWG4fP4k/pGiYnZe5Le4hoG8kCuM//8HYev2rjUNYb+W+ITslyy4=
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:59:00 2026 by rpki-client