Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3131302e302f32342d3234203d3e20313336373837.roa
File: 34362e3138332e3131302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: knq4cc0sw+BTpKT56vD5bclnyQBAx0Rr2hr5Lq6WszU=
Subject key identifier: 65:06:8E:15:77:B0:A5:AE:E0:41:02:11:84:72:F4:96:31:50:37:F9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2E04B6BAB19691E5999C7094E575ACBFB351B1FA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3131302e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 15 Aug 2026 13:28:02 +0000
ROA not before: Sat 15 Aug 2026 13:23:02 +0000
ROA not after: Sat 14 Aug 2027 13:28:02 +0000
asID: 136787
IP address blocks: 46.183.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:04:b6:ba:b1:96:91:e5:99:9c:70:94:e5:75:ac:bf:b3:51:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 15 13:23:02 2026 GMT
Not After : Aug 14 13:28:02 2027 GMT
Subject: CN=65068E1577B0A5AEE04102118472F496315037F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:46:99:0a:aa:76:0d:7a:53:2d:81:ae:77:
bf:8a:14:7d:08:2a:0a:cf:dc:3a:7d:5f:d0:e2:fb:
1b:c6:ed:dd:0c:80:45:b1:12:eb:3d:1a:e3:5f:e1:
e2:97:63:62:9a:4a:e0:be:d4:b1:8f:e8:2a:5b:28:
cb:02:f5:ee:59:a1:f0:47:08:79:bd:0b:37:78:1a:
3e:ac:2f:b1:d1:77:11:c4:8b:33:7a:c1:da:e4:cb:
ed:ea:e1:cc:93:82:f8:c8:e7:98:77:d9:a2:1e:6f:
15:c5:95:c9:93:3f:61:45:05:a6:2a:83:3a:39:79:
24:d0:7a:d6:d2:ae:fa:91:1a:c7:49:f8:3f:f5:fa:
b2:be:e5:03:7d:82:26:30:a0:ed:b7:a4:40:8b:a9:
24:8f:c6:b9:34:62:0c:77:d2:3d:6d:24:cb:92:e2:
38:cd:6b:e0:9f:4e:82:4f:1c:68:db:fb:da:7f:1a:
62:f8:80:08:59:d0:6e:5a:c2:f2:9a:93:95:1c:39:
f4:50:2f:c2:d5:cf:83:8e:8f:0d:77:a1:fe:03:56:
85:35:66:ce:cf:1d:45:7e:8d:28:d0:89:d4:f2:38:
59:e2:25:fe:61:7a:a2:e8:a6:59:98:ad:56:a5:50:
a4:fb:fa:3c:50:b5:fc:69:d1:b9:2e:04:54:63:27:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:06:8E:15:77:B0:A5:AE:E0:41:02:11:84:72:F4:96:31:50:37:F9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3131302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.110.0/24
Signature Algorithm: sha256WithRSAEncryption
10:99:3b:c0:32:87:9f:58:08:26:5e:4d:3f:8b:2d:14:42:3b:
31:80:42:b1:8e:3e:b6:65:27:a8:73:a9:9e:f9:2f:a5:23:c6:
42:4a:d3:76:97:88:83:fc:9d:ff:5a:d0:fd:d2:25:2d:d0:8b:
2e:dc:7b:d9:c2:6a:9f:62:72:5f:16:52:2f:f8:2d:f6:eb:5d:
d1:f1:46:d3:43:6e:fa:01:bd:03:b1:2a:e2:c8:5a:a6:2a:f6:
f5:ed:65:73:c2:d0:c0:e0:17:62:57:63:e7:0c:ec:15:a1:be:
31:16:10:43:97:d2:e6:a7:99:d6:d5:4c:d4:d9:a1:50:a6:62:
75:6c:7a:97:82:5d:64:4b:f0:01:32:85:5d:61:c0:57:38:7b:
50:f4:7b:3c:58:69:58:3a:e9:9c:3e:bb:aa:a7:59:eb:20:c5:
38:5d:9f:dc:31:9d:20:9c:55:3b:97:6e:2c:a2:81:49:d2:76:
10:fd:b2:32:d5:5b:85:ea:90:d7:bc:cf:09:9a:c8:63:29:29:
7c:8d:98:15:9d:5e:0c:05:78:b6:5c:9d:fa:54:a7:89:31:8b:
8b:50:af:3f:1d:af:f6:69:da:e7:f0:52:1e:b8:4a:8a:73:be:
14:09:02:24:a0:05:f9:7e:46:be:ef:5a:c0:48:2a:bf:29:e1:
a4:8d:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:52:56 2026 by rpki-client