Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e20323139323234.roa
File: 34352e3133352e3232352e302f32342d3234203d3e20323139323234.roa (raw, json)
Hash identifier: JUzbKeDBxeENhdV62rNCfVwNXAPKRQnq94GVkcDPx38=
Subject key identifier: 18:A2:86:FB:D3:3D:48:44:6E:42:78:09:66:B4:96:B4:8F:51:6A:3D
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 36A6851AEAB228FBC448ADF55D3EBA78C9E6F4CE
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e20323139323234.roa
Signing time: Tue 11 Aug 2026 21:29:23 +0000
ROA not before: Tue 11 Aug 2026 21:24:23 +0000
ROA not after: Tue 10 Aug 2027 21:29:23 +0000
asID: 219224
IP address blocks: 45.135.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a6:85:1a:ea:b2:28:fb:c4:48:ad:f5:5d:3e:ba:78:c9:e6:f4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Aug 11 21:24:23 2026 GMT
Not After : Aug 10 21:29:23 2027 GMT
Subject: CN=18A286FBD33D48446E42780966B496B48F516A3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:1d:5b:26:80:38:16:ed:a6:cd:7d:84:ee:
4f:e6:1e:1d:00:2d:92:e3:fc:a9:9d:92:ce:98:44:
e8:b3:c4:43:b1:6d:e9:92:f9:31:32:54:37:c6:d1:
31:d8:85:c2:94:fe:c8:44:bc:c6:86:cf:a2:68:b4:
81:54:26:85:a3:f2:dd:88:7e:0e:43:05:0e:08:ea:
0c:34:d2:2a:52:88:3a:20:23:1f:6c:00:19:11:54:
c5:78:cc:86:0a:7d:9b:88:8e:f5:30:4b:a7:af:a7:
d6:6a:70:ab:61:d2:65:9c:84:ff:3b:2d:b6:36:5f:
b7:3e:2d:bc:bd:5b:a3:da:04:e4:e0:6e:40:da:47:
7c:4d:d1:9c:7f:e1:b9:8c:71:1c:76:c8:28:72:07:
9c:5d:06:05:c6:b2:19:41:c7:dc:ab:8e:01:2e:d2:
88:5a:27:36:9b:5f:8f:c2:be:e6:7e:21:70:bc:e4:
69:cb:c4:bb:d6:f7:66:6e:6d:bf:e1:61:2c:a2:b5:
17:ac:d8:50:7b:78:e1:b4:9a:72:5f:34:36:54:70:
c9:bb:4e:d8:fa:52:52:4b:1c:58:b3:0c:19:b5:98:
4f:77:e3:1e:84:b1:6f:3a:9e:47:b8:1f:2b:a4:7f:
d0:41:c6:c9:5f:cd:cc:8b:33:a1:48:cd:6a:28:b6:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A2:86:FB:D3:3D:48:44:6E:42:78:09:66:B4:96:B4:8F:51:6A:3D
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e20323139323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.225.0/24
Signature Algorithm: sha256WithRSAEncryption
13:59:2c:29:0a:e1:02:15:41:90:3a:45:57:58:db:0f:74:2b:
c7:49:39:f7:d2:49:e1:0e:9a:f1:28:a7:c1:be:52:21:65:85:
f4:ac:9a:20:7e:a4:f8:4b:11:e7:16:ed:eb:1f:9f:6f:7d:ca:
f4:52:d4:77:3e:cd:81:ca:ee:83:fc:96:05:79:c0:74:6c:4f:
5f:be:4c:d9:49:ad:32:f4:79:b4:0b:f1:2d:61:03:5f:ba:ee:
bf:0d:67:5a:20:96:17:1d:9f:42:70:d2:73:2f:86:f7:1c:0c:
b4:be:f0:db:83:06:3a:35:28:6f:85:8c:65:56:0e:cb:6f:ff:
f2:5c:d0:a0:66:64:ae:42:5a:d4:fa:97:f4:a6:c3:6c:8d:6e:
43:38:e1:bf:d5:b1:06:e7:21:b0:71:84:4e:fd:ef:fb:cd:e2:
a0:dd:b7:d8:5f:3a:f1:fe:2a:78:c3:33:8d:98:4a:ce:4c:fa:
e5:47:54:bc:ea:db:be:8c:fa:11:61:b0:14:45:a7:3b:c5:16:
e4:f2:05:d0:a6:d4:c9:e6:9c:21:aa:a4:74:2f:09:dd:5f:98:
e5:76:b6:af:be:ef:3f:92:c7:e7:59:dc:ed:14:10:d1:6a:7c:
4b:40:7b:aa:84:17:38:99:5e:d4:80:84:55:12:b8:15:f8:db:
2d:6c:30:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:47 2026 by rpki-client