Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234332e302f32342d3234203d3e203133353337.roa
File: 34352e38362e3234332e302f32342d3234203d3e203133353337.roa (raw, json)
Hash identifier: tNk6sAh3L0lZl9TYRJhIaF/y1hBkQK2BZutoubLVb/0=
Subject key identifier: 69:84:73:3C:A4:7C:47:E5:86:28:05:74:95:6D:AA:AC:3F:BE:B0:55
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 07C55C51D28410DDE4C53BE9A22ABE91185DBC54
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234332e302f32342d3234203d3e203133353337.roa
Signing time: Wed 21 Oct 2026 02:43:30 +0000
ROA not before: Wed 21 Oct 2026 02:38:30 +0000
ROA not after: Wed 20 Oct 2027 02:43:30 +0000
asID: 13537
IP address blocks: 45.86.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 13:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c5:5c:51:d2:84:10:dd:e4:c5:3b:e9:a2:2a:be:91:18:5d:bc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Oct 21 02:38:30 2026 GMT
Not After : Oct 20 02:43:30 2027 GMT
Subject: CN=6984733CA47C47E586280574956DAAAC3FBEB055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:53:fc:6c:91:28:17:6d:8f:5c:8e:70:2b:
22:24:07:b7:79:ed:09:e2:96:c1:41:b1:84:37:eb:
ef:2f:33:3b:34:e2:c0:4d:c4:58:0a:d2:8b:eb:a6:
4c:b9:ae:b9:de:98:c9:b9:73:75:3d:2b:e8:51:d3:
71:2a:ac:be:fb:c2:f5:a5:35:d5:30:6d:8e:c7:2d:
35:45:b0:15:bc:2c:d0:ce:65:ba:c9:6d:1a:a5:92:
23:13:0c:d1:c1:6c:74:67:e6:11:68:56:ef:4a:31:
eb:e2:c0:3d:7d:60:0b:6f:4e:dc:fd:ba:7e:96:0a:
e6:78:97:91:0e:8e:c1:60:fb:67:0a:01:2c:cf:33:
b9:f8:67:cd:b4:0e:6a:3c:8b:09:7c:22:b2:32:c7:
ca:03:22:81:90:a5:db:78:19:d3:53:95:05:ad:c3:
5b:af:73:0b:d3:25:5d:76:b1:d7:af:a0:14:ac:38:
38:62:03:58:b5:01:7f:f4:9d:ee:a5:45:33:96:ac:
d3:15:de:1e:26:bd:2a:98:c0:3f:de:71:31:7f:7d:
e4:ee:3d:3f:a6:79:31:e3:cd:6e:61:6f:82:b4:0f:
33:c5:bb:0d:94:83:68:ee:61:74:68:c3:92:57:16:
bb:f6:0f:2c:70:54:f2:91:d8:e5:b2:b9:c0:79:f1:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:84:73:3C:A4:7C:47:E5:86:28:05:74:95:6D:AA:AC:3F:BE:B0:55
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234332e302f32342d3234203d3e203133353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:00:15:cb:6e:7d:78:84:be:fb:00:59:e3:52:bc:03:62:0a:
a6:8d:3c:1a:dc:80:3e:f6:ae:65:e7:3f:47:1a:83:af:d7:23:
14:73:43:ac:df:dc:67:44:17:00:13:c7:f7:cc:2c:d8:1c:16:
9b:3b:27:30:98:e1:5b:5f:16:f7:2f:35:91:3a:ad:cf:6a:2c:
21:9a:17:4a:e6:98:80:82:af:d0:a7:fb:2e:22:6f:e9:2f:b4:
ca:40:0e:ed:ef:9f:62:c0:37:1c:30:f4:1f:b7:62:a6:b5:78:
5e:70:55:a8:87:fd:c4:38:af:8a:cc:59:9f:ca:df:0e:0b:49:
51:b4:d2:1e:0c:7b:6b:99:16:85:9d:25:56:ff:f7:da:4f:e7:
d8:36:50:e7:90:fd:85:de:0a:25:c4:7a:e1:0f:b2:d3:37:7a:
9b:f4:d2:30:b1:ca:3a:d6:30:97:67:c6:d3:82:82:e7:6c:8d:
bd:35:0f:7f:e9:44:0f:5a:70:ba:6b:11:9c:7e:96:18:30:69:
40:fb:a3:c0:77:6a:9a:f7:b2:34:dd:43:f0:9c:12:be:dc:c5:
23:42:8d:be:98:51:e5:b1:8b:7a:74:6b:53:32:25:58:81:17:
60:54:19:f9:c2:81:07:b5:1b:87:b2:f3:79:c7:9a:78:32:45:
da:61:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:42:48 2026 by rpki-client