Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130362e302f32342d3234203d3e203235313938.roa
File: 34352e3133312e3130362e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: efDPrhXp1nUl5+SCdN7CcZc7tPFbkI/65SDr94V4R8U=
Subject key identifier: 45:FC:B1:34:22:EE:D2:FB:54:CB:BA:0C:63:58:D3:D5:34:F0:1A:02
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 5BD898EB00EC421390D408877C3FBE8D307D21B9
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130362e302f32342d3234203d3e203235313938.roa
Signing time: Thu 18 Jun 2026 13:33:07 +0000
ROA not before: Thu 18 Jun 2026 13:28:07 +0000
ROA not after: Thu 17 Jun 2027 13:33:07 +0000
asID: 25198
IP address blocks: 45.131.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 06:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d8:98:eb:00:ec:42:13:90:d4:08:87:7c:3f:be:8d:30:7d:21:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Jun 18 13:28:07 2026 GMT
Not After : Jun 17 13:33:07 2027 GMT
Subject: CN=45FCB13422EED2FB54CBBA0C6358D3D534F01A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:be:96:67:e1:31:27:36:25:de:29:62:f2:
05:4e:aa:68:4c:f4:e0:c9:ee:59:ad:f0:b8:df:c5:
78:cb:21:97:b0:99:d8:6d:09:3f:6f:3c:40:30:d8:
5a:8c:d7:70:56:8b:fc:e0:3e:5e:2b:6e:c4:dc:43:
3d:96:42:d5:df:69:80:95:de:37:b2:53:76:66:a8:
66:84:02:91:f9:af:4f:18:58:ad:66:3e:df:6b:a8:
12:d0:65:e0:bb:4b:1f:97:64:bd:7e:9d:aa:46:63:
23:30:c9:70:57:97:38:b4:c4:e8:4d:19:fb:11:4b:
55:4e:fa:0a:df:18:96:64:e1:94:b6:a6:62:7a:cf:
a6:4c:37:15:76:f7:8c:c4:52:da:c7:68:46:55:97:
ab:bc:b3:2f:f0:bb:b8:aa:0b:0f:50:0a:60:f5:1d:
e0:b3:c3:df:a4:6c:73:ce:da:9e:1c:04:e1:f3:b2:
d3:21:9f:34:d1:b8:74:c1:43:a4:37:13:c3:5c:21:
c6:f6:41:7b:39:40:21:78:c0:aa:16:e3:ec:ac:09:
b7:06:74:b9:95:4d:a8:54:e2:23:c4:74:78:7a:b7:
eb:41:67:25:5c:ed:d5:56:19:19:c7:83:4e:ff:a6:
91:ba:2e:ad:86:41:5b:62:14:c5:79:87:83:0d:21:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FC:B1:34:22:EE:D2:FB:54:CB:BA:0C:63:58:D3:D5:34:F0:1A:02
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130362e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.106.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b7:57:2e:81:24:c0:3d:8e:e2:bf:a4:69:ac:2b:fe:7c:6c:
3c:17:52:f2:cd:2b:ce:bd:54:bc:24:d9:75:95:0e:d6:da:36:
63:87:2a:1c:de:f2:24:d3:e4:ea:31:3c:af:05:6b:16:aa:83:
87:d9:8c:b6:3f:44:68:ad:95:5b:73:62:ed:d3:67:60:09:30:
61:55:73:b5:e4:e3:88:6b:15:a0:0f:a2:83:92:8e:e4:3b:08:
cf:ab:7c:1a:91:c8:a4:2e:71:2e:85:57:6b:e8:ae:9b:48:36:
05:94:a5:18:51:a1:fc:3c:ae:3b:14:74:e2:4c:48:0b:d3:0f:
16:86:31:2c:78:7c:7c:0e:07:9e:c9:d7:80:34:ee:4c:c0:a0:
a3:6e:52:73:f6:e4:cd:02:6c:2b:1e:21:3c:5e:17:66:39:fb:
fb:9d:9a:00:a5:4b:6d:96:08:ba:78:01:10:fe:45:1f:c5:9d:
df:48:e0:40:80:0c:a3:81:58:d6:4a:23:84:76:ef:af:f8:cb:
ef:b3:3f:25:c5:16:c6:05:77:47:2e:ba:00:70:9f:71:2d:2b:
64:15:65:b5:78:12:56:ab:23:6c:9c:68:af:15:b2:57:2a:a6:
ca:74:d6:64:50:bc:80:ac:99:29:68:5e:87:ce:0d:9c:c0:17:
5c:17:e2:e1
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUW9iY6wDsQhOQ1AiHfD++jTB9IbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0
MWFjZWJiODAeFw0yNjA2MTgxMzI4MDdaFw0yNzA2MTcxMzMzMDdaMDMxMTAvBgNV
BAMTKDQ1RkNCMTM0MjJFRUQyRkI1NENCQkEwQzYzNThEM0Q1MzRGMDFBMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/76WZ+ExJzYl3ili8gVOqmhM
9ODJ7lmt8LjfxXjLIZewmdhtCT9vPEAw2FqM13BWi/zgPl4rbsTcQz2WQtXfaYCV
3jeyU3ZmqGaEApH5r08YWK1mPt9rqBLQZeC7Sx+XZL1+napGYyMwyXBXlzi0xOhN
GfsRS1VO+grfGJZk4ZS2pmJ6z6ZMNxV294zEUtrHaEZVl6u8sy/wu7iqCw9QCmD1
HeCzw9+kbHPO2p4cBOHzstMhnzTRuHTBQ6Q3E8NcIcb2QXs5QCF4wKoW4+ysCbcG
dLmVTahU4iPEdHh6t+tBZyVc7dVWGRnHg07/ppG6Lq2GQVtiFMV5h4MNIQX9AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQURfyxNCLu0vtUy7oMY1jT1TTwGgIwHwYDVR0j
BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz
YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH
czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt
ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzMxMmUzMTMw
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM1MzEzOTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYNqMA0GCSqGSIb3DQEBCwUAA4IBAQA2t1cugSTAPY7iv6RprCv+fGw8F1LyzSvO
vVS8JNl1lQ7W2jZjhyoc3vIk0+TqMTyvBWsWqoOH2Yy2P0RorZVbc2Lt02dgCTBh
VXO15OOIaxWgD6KDko7kOwjPq3wakcikLnEuhVdr6K6bSDYFlKUYUaH8PK47FHTi
TEgL0w8WhjEseHx8DgeeydeANO5MwKCjblJz9uTNAmwrHiE8XhdmOfv7nZoApUtt
lgi6eAEQ/kUfxZ3fSOBAgAyjgVjWSiOEdu+v+Mvvsz8lxRbGBXdHLroAcJ9xLStk
FWW1eBJWqyNsnGivFbJXKqbKdNZkULyArJkpaF6Hzg2cwBdcF+Lh
-----END CERTIFICATE-----
Generated at Sat Jun 27 23:48:37 2026 by rpki-client