Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e203235313938.roa
File: 34352e3133352e3232352e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: KoDrJ2OdkhVhTlGvpZ/A6YGh9ILbfu/slAp7A8mSXlE=
Subject key identifier: 59:5D:02:79:1B:FF:7C:A7:5C:51:B8:FF:49:91:11:3A:08:81:C4:87
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 71D7DD0E165F3B37CA6C6BA985F17277E8EE97C2
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e203235313938.roa
Signing time: Tue 30 Jun 2026 21:11:52 +0000
ROA not before: Tue 30 Jun 2026 21:06:52 +0000
ROA not after: Tue 29 Jun 2027 21:11:52 +0000
asID: 25198
IP address blocks: 45.135.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d7:dd:0e:16:5f:3b:37:ca:6c:6b:a9:85:f1:72:77:e8:ee:97:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Jun 30 21:06:52 2026 GMT
Not After : Jun 29 21:11:52 2027 GMT
Subject: CN=595D02791BFF7CA75C51B8FF4991113A0881C487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:82:57:a8:d1:d6:3b:83:5a:68:29:3a:04:
f2:30:ee:eb:93:ee:89:95:1e:12:77:d9:d6:dc:4f:
02:f2:bc:85:bf:76:71:95:1e:6f:82:a1:63:14:e5:
8c:2d:48:33:5d:b6:d1:52:8d:a6:2e:79:8d:91:6e:
68:c6:f4:5d:a6:9f:70:38:76:71:34:3b:28:2b:31:
7c:be:2a:b8:56:9c:27:20:66:6b:11:f4:b7:cf:34:
27:01:e4:e3:f0:2c:bb:5b:26:3d:c4:25:bf:42:a0:
ab:1b:68:bf:02:31:4a:42:a3:7e:0c:7b:67:d7:2e:
59:a6:c6:3a:b6:e4:2f:97:32:b0:7a:f7:05:1d:69:
ef:77:59:a5:1a:cd:d1:b9:7f:fc:f1:8d:78:8a:52:
10:cf:41:f0:6f:16:35:2a:53:6e:7a:0c:54:fe:ed:
29:4d:d2:01:6c:a3:d6:bf:54:ff:06:bf:9f:3d:dd:
87:4f:8a:c1:1d:b5:97:14:1d:85:07:a3:82:35:aa:
e4:ce:16:82:c6:fe:58:c2:22:13:d8:7c:08:46:67:
ba:3d:bf:4c:02:10:13:3c:0d:7d:44:9a:64:00:c3:
7f:b6:14:41:4f:4f:70:a1:9e:ce:60:31:eb:24:51:
4a:56:8a:1b:26:ad:6f:57:de:24:70:64:5c:fc:c7:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5D:02:79:1B:FF:7C:A7:5C:51:B8:FF:49:91:11:3A:08:81:C4:87
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.225.0/24
Signature Algorithm: sha256WithRSAEncryption
80:67:ca:8d:78:40:28:7f:c5:39:6a:b4:c2:21:8f:7f:9b:71:
3c:2d:8f:c6:15:4c:88:7d:61:32:e3:ba:f0:42:44:61:5a:af:
b2:dd:e2:5d:c4:db:84:57:a8:e2:e5:6a:1b:df:1e:43:f6:4f:
43:b7:2a:ed:39:21:e0:4f:75:bb:28:f4:fb:28:3a:e5:3c:fb:
31:6d:0b:61:c9:80:89:7f:41:6c:79:ee:71:6d:96:60:d5:74:
2c:26:b9:84:57:8b:7a:fa:1e:49:4e:e2:dd:4b:3d:91:42:7c:
ff:74:71:fc:40:0a:e4:08:b3:9b:2b:8a:43:6e:17:72:47:a0:
62:40:c9:c1:cb:ef:df:80:d8:f7:58:8d:97:ee:f3:81:19:09:
e2:27:8f:5a:1e:35:07:58:36:b3:38:8b:a1:bc:34:60:bf:55:
0d:11:88:34:d1:4c:af:df:a3:bf:c4:64:06:1c:76:55:d8:40:
b0:c9:3e:93:ff:16:be:e6:01:b9:7c:07:36:99:95:94:c4:e9:
8d:32:1e:83:12:1d:db:16:b6:fc:31:ba:29:b2:8a:93:29:82:
1c:d1:6c:94:6c:79:ac:1e:2c:17:02:50:35:35:40:ff:56:14:
2c:56:59:72:fb:ab:b8:a3:c5:e6:5c:a7:2e:f1:23:d6:ee:ff:
0f:31:19:c0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUcdfdDhZfOzfKbGuphfFyd+jul8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0
MWFjZWJiODAeFw0yNjA2MzAyMTA2NTJaFw0yNzA2MjkyMTExNTJaMDMxMTAvBgNV
BAMTKDU5NUQwMjc5MUJGRjdDQTc1QzUxQjhGRjQ5OTExMTNBMDg4MUM0ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BIJXqNHWO4NaaCk6BPIw7uuT
7omVHhJ32dbcTwLyvIW/dnGVHm+CoWMU5YwtSDNdttFSjaYueY2RbmjG9F2mn3A4
dnE0OygrMXy+KrhWnCcgZmsR9LfPNCcB5OPwLLtbJj3EJb9CoKsbaL8CMUpCo34M
e2fXLlmmxjq25C+XMrB69wUdae93WaUazdG5f/zxjXiKUhDPQfBvFjUqU256DFT+
7SlN0gFso9a/VP8Gv5893YdPisEdtZcUHYUHo4I1quTOFoLG/ljCIhPYfAhGZ7o9
v0wCEBM8DX1EmmQAw3+2FEFPT3Chns5gMeskUUpWihsmrW9X3iRwZFz8xyvVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUWV0CeRv/fKdcUbj/SZEROgiBxIcwHwYDVR0j
BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz
YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH
czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt
ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzM1MmUzMjMy
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM1MzEzOTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYfhMA0GCSqGSIb3DQEBCwUAA4IBAQCAZ8qNeEAof8U5arTCIY9/m3E8LY/GFUyI
fWEy47rwQkRhWq+y3eJdxNuEV6ji5Wob3x5D9k9DtyrtOSHgT3W7KPT7KDrlPPsx
bQthyYCJf0Fsee5xbZZg1XQsJrmEV4t6+h5JTuLdSz2RQnz/dHH8QArkCLObK4pD
bhdyR6BiQMnBy+/fgNj3WI2X7vOBGQniJ49aHjUHWDazOIuhvDRgv1UNEYg00Uyv
36O/xGQGHHZV2ECwyT6T/xa+5gG5fAc2mZWUxOmNMh6DEh3bFrb8MbopsoqTKYIc
0WyUbHmsHiwXAlA1NUD/VhQsVlly+6u4o8XmXKcu8SPW7v8PMRnA
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:26 2026 by rpki-client