Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e20323635393139.roa
File: 34352e3133352e3232352e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier: 05hRrTk37+8U9a1zSo13a1wUWudlE7bQ2/vQErVKjjY=
Subject key identifier: E5:E3:AE:FF:EF:DF:B7:EB:C2:BD:C0:B9:BB:CC:12:5F:F9:56:D6:F3
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 4CB182817703B9FF3B2E678ABCF634C16EAA3F92
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e20323635393139.roa
Signing time: Tue 11 Aug 2026 21:29:23 +0000
ROA not before: Tue 11 Aug 2026 21:24:23 +0000
ROA not after: Tue 10 Aug 2027 21:29:23 +0000
asID: 265919
IP address blocks: 45.135.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b1:82:81:77:03:b9:ff:3b:2e:67:8a:bc:f6:34:c1:6e:aa:3f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Aug 11 21:24:23 2026 GMT
Not After : Aug 10 21:29:23 2027 GMT
Subject: CN=E5E3AEFFEFDFB7EBC2BDC0B9BBCC125FF956D6F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:14:30:f4:92:f0:cc:f0:99:65:03:9e:3e:
0b:c1:9b:d7:b8:03:22:bb:d9:fb:98:1f:4b:9c:cb:
f0:30:a2:27:9a:fa:3d:bd:36:d4:16:1d:41:dc:09:
99:22:ea:22:f9:d1:ca:f3:41:73:41:e6:6a:dd:57:
c8:56:35:75:b0:8e:0d:34:82:f8:b7:40:e1:10:6c:
38:25:f4:78:f0:26:ed:17:c1:3a:c1:c0:7a:a4:4b:
cd:ad:fd:62:d9:0d:7e:b9:63:9f:f0:3c:37:ec:3c:
e3:4e:9c:64:ab:58:e7:b2:da:36:c1:10:cf:07:2e:
42:d8:7c:68:ea:73:14:b0:1e:42:e5:f6:b6:6e:8c:
6a:cf:f7:9c:ed:49:85:e3:e7:87:54:96:4b:11:5f:
d5:05:49:ca:f6:54:a3:9e:b9:19:a7:31:40:1a:c0:
6c:4e:08:ee:56:7b:bf:15:d3:59:b1:c6:28:4f:d7:
d0:51:3f:9e:00:b0:65:b9:a8:98:b4:63:bf:7d:90:
50:f2:b3:24:1c:93:78:64:40:05:8a:a0:ca:ba:dc:
c5:7c:ef:02:b0:02:da:f1:09:0d:91:11:4a:7a:4b:
6e:5e:3b:bb:da:97:30:cb:8c:5e:7f:4a:51:be:af:
83:a0:5e:e9:2a:c5:d9:a9:38:1d:39:99:30:3c:34:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E3:AE:FF:EF:DF:B7:EB:C2:BD:C0:B9:BB:CC:12:5F:F9:56:D6:F3
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e20323635393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.225.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a4:8f:ea:c4:f4:67:05:f5:2a:36:5b:87:26:58:f9:a9:96:
c6:f3:6c:b8:3a:0d:d8:34:49:22:42:29:e7:7d:11:80:fb:00:
d6:ca:0d:b9:ba:2d:58:30:39:df:74:71:0d:0d:a9:dc:51:f0:
c8:d5:cf:25:15:e6:db:e9:23:e3:d8:92:7e:43:58:b7:82:c1:
bf:60:69:2c:42:e1:03:10:fd:71:fd:25:d3:46:4b:37:c2:14:
64:98:90:ff:5c:bf:1f:c1:fd:c1:50:4c:3a:44:60:54:56:9b:
a5:01:40:59:22:3f:03:5a:79:34:d5:7f:9b:c2:08:27:33:74:
31:a4:ee:1d:6c:74:58:35:f9:19:21:97:28:89:2f:f8:d1:01:
73:48:82:bb:d6:1f:37:bb:2d:7e:3d:fd:f1:7c:1d:a1:b7:cf:
5a:3d:da:66:67:1c:aa:99:15:8f:52:21:f4:df:39:9f:c0:7d:
62:be:3b:3a:54:f4:e7:89:a1:3e:e7:d2:05:f8:2e:06:fb:31:
21:3b:f6:20:55:70:cc:c7:f3:f2:ef:bd:f2:91:7d:c4:ed:97:
83:93:ba:f2:70:60:08:f4:fc:93:4f:6b:17:b1:fc:b1:92:cb:
df:ba:1b:dd:27:86:f7:a2:15:53:6d:cd:2c:6f:a1:26:3c:e3:
19:ad:26:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:05 2026 by rpki-client