Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e203133333335.roa
File: 34352e3133352e3232352e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: fibLV9KozYnpe9FXsPj0zBtcui2U5YnJS/172+CPjcs=
Subject key identifier: D1:74:C9:54:38:1C:B4:19:DE:49:90:81:9D:F4:38:F5:32:ED:9F:0B
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 0E2B1887AF48539C806FC5759E64952F03E0FD8E
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e203133333335.roa
Signing time: Tue 11 Aug 2026 21:29:23 +0000
ROA not before: Tue 11 Aug 2026 21:24:23 +0000
ROA not after: Tue 10 Aug 2027 21:29:23 +0000
asID: 13335
IP address blocks: 45.135.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2b:18:87:af:48:53:9c:80:6f:c5:75:9e:64:95:2f:03:e0:fd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Aug 11 21:24:23 2026 GMT
Not After : Aug 10 21:29:23 2027 GMT
Subject: CN=D174C954381CB419DE4990819DF438F532ED9F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:2c:7d:48:84:7f:50:3d:05:8c:4f:48:28:
b6:9b:9f:6d:47:f4:20:f5:56:dd:6c:a3:2f:05:f7:
c5:6c:7b:b5:a7:8f:49:8c:ad:42:26:fe:9c:14:34:
1f:d2:e0:a8:64:db:08:5d:33:b9:e5:7d:a5:62:6e:
92:79:e0:73:02:b0:99:43:4b:ff:a7:77:7b:09:e3:
1f:c4:a1:6f:a2:b5:81:1c:5f:cb:2e:48:38:b3:e8:
00:f7:ba:b3:4f:d8:e3:03:49:30:88:de:ed:8e:67:
1c:23:10:db:93:b0:f8:b7:9d:0c:45:83:35:2c:9d:
6d:c7:81:40:ee:6c:9d:68:6b:67:88:28:85:e1:ad:
5c:11:c4:cd:5a:5f:26:20:c1:e8:ec:9f:0c:05:ed:
f9:f9:e5:45:8f:b8:81:1c:fb:dc:62:da:d4:62:da:
ac:4f:fc:2c:04:3a:01:83:85:b3:1d:e6:ba:18:d2:
57:9e:47:d1:bb:f2:e0:27:e8:4e:71:62:32:1c:c2:
41:b4:ed:12:d9:32:09:7e:a3:e7:ef:27:a4:2e:5f:
b0:1c:41:df:e5:ec:d2:10:b4:16:fb:78:17:af:9a:
62:a8:e9:64:ab:c1:76:ec:c0:b5:e6:26:26:04:13:
71:fc:2f:17:c9:c4:d6:94:c0:10:16:96:03:b8:84:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:C9:54:38:1C:B4:19:DE:49:90:81:9D:F4:38:F5:32:ED:9F:0B
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:75:c7:13:08:20:db:05:19:de:f0:0a:0b:15:94:1e:84:e4:
45:72:49:a2:82:f2:17:7b:6d:a8:33:c8:22:ed:66:16:b4:ce:
df:8f:d8:f5:d1:5f:38:27:9f:0c:92:08:0c:22:2a:cb:18:4f:
15:5e:e1:ee:13:6b:ea:0a:de:3b:e8:48:ae:97:96:af:98:47:
43:23:1c:94:cf:54:e7:b0:e1:ae:0f:7c:24:b3:45:3e:c9:59:
30:cb:6d:54:d8:6d:f3:b4:bb:92:25:28:26:7f:8c:4b:56:38:
4b:6e:27:f4:ab:48:5c:77:15:b9:b4:43:25:b6:b9:ad:d5:c8:
c1:5d:97:b1:bd:e7:ac:22:a1:61:a5:74:42:12:0d:52:a4:7e:
92:5e:25:7f:e8:d4:29:d5:7c:54:58:5c:6a:09:34:02:33:69:
b1:3b:4a:23:f0:7f:97:75:ec:9f:8c:ba:0e:c5:1f:5f:56:27:
91:68:72:cb:f1:73:6e:12:ea:e0:75:38:5f:fe:23:40:a5:b7:
1c:a7:4d:5e:55:02:19:9c:45:bb:88:13:59:95:00:42:91:9e:
ab:8c:31:8d:f8:ee:5d:9e:80:d1:fe:ed:3b:55:e6:5c:cf:eb:
b3:84:6d:48:96:04:90:de:23:a0:ab:92:6b:0c:3f:12:7f:28:
6e:5a:95:03
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUDisYh69IU5yAb8V1nmSVLwPg/Y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0
MWFjZWJiODAeFw0yNjA4MTEyMTI0MjNaFw0yNzA4MTAyMTI5MjNaMDMxMTAvBgNV
BAMTKEQxNzRDOTU0MzgxQ0I0MTlERTQ5OTA4MTlERjQzOEY1MzJFRDlGMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDSx9SIR/UD0FjE9IKLabn21H
9CD1Vt1soy8F98Vse7Wnj0mMrUIm/pwUNB/S4Khk2whdM7nlfaVibpJ54HMCsJlD
S/+nd3sJ4x/EoW+itYEcX8suSDiz6AD3urNP2OMDSTCI3u2OZxwjENuTsPi3nQxF
gzUsnW3HgUDubJ1oa2eIKIXhrVwRxM1aXyYgwejsnwwF7fn55UWPuIEc+9xi2tRi
2qxP/CwEOgGDhbMd5roY0leeR9G78uAn6E5xYjIcwkG07RLZMgl+o+fvJ6QuX7Ac
Qd/l7NIQtBb7eBevmmKo6WSrwXbswLXmJiYEE3H8LxfJxNaUwBAWlgO4hMojAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU0XTJVDgctBneSZCBnfQ49TLtnwswHwYDVR0j
BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz
YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH
czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt
ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzM1MmUzMjMy
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzMzM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYfhMA0GCSqGSIb3DQEBCwUAA4IBAQCgdccTCCDbBRne8AoLFZQehORFckmigvIX
e22oM8gi7WYWtM7fj9j10V84J58MkggMIirLGE8VXuHuE2vqCt476Eiul5avmEdD
IxyUz1TnsOGuD3wks0U+yVkwy21U2G3ztLuSJSgmf4xLVjhLbif0q0hcdxW5tEMl
trmt1cjBXZexveesIqFhpXRCEg1SpH6SXiV/6NQp1XxUWFxqCTQCM2mxO0oj8H+X
deyfjLoOxR9fVieRaHLL8XNuEurgdThf/iNApbccp01eVQIZnEW7iBNZlQBCkZ6r
jDGN+O5dnoDR/u07VeZcz+uzhG1IlgSQ3iOgq5JrDD8SfyhuWpUD
-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:05 2026 by rpki-client