Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3139322e302f32342d3234203d3e20323134343332.roa
File: 34362e3233362e3139322e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier: MSiiGG5GEywaK9ucRK+3Q71mczJBLED2RG9UuqNJeAg=
Subject key identifier: DA:0E:4A:78:6E:29:24:27:D0:21:E7:5C:07:1F:78:C6:F4:8D:96:BE
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 264FF9FF2C3DE15CF69533D91E49AD26310E699F
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3139322e302f32342d3234203d3e20323134343332.roa
Signing time: Thu 04 Sep 2025 10:40:04 +0000
ROA not before: Thu 04 Sep 2025 10:35:04 +0000
ROA not after: Thu 03 Sep 2026 10:40:04 +0000
asID: 214432
IP address blocks: 46.236.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4f:f9:ff:2c:3d:e1:5c:f6:95:33:d9:1e:49:ad:26:31:0e:69:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:04 2025 GMT
Not After : Sep 3 10:40:04 2026 GMT
Subject: CN=DA0E4A786E292427D021E75C071F78C6F48D96BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:ab:ce:8f:72:e8:d0:1c:be:8a:94:07:75:
56:9f:7f:84:74:11:65:1c:22:9e:dc:0b:08:35:1b:
05:cf:f4:24:77:59:e4:8f:8d:5a:d1:13:98:86:e0:
42:f6:7f:81:ef:3c:bb:5a:58:cb:f4:6d:06:26:11:
57:0e:68:56:72:54:2f:01:f8:fb:9f:c8:12:b3:2f:
8f:d2:e5:6d:ed:57:aa:ac:30:9f:49:3f:8e:f9:94:
9f:b0:87:a8:4a:cf:0c:4a:e3:58:1e:fa:53:76:03:
4f:63:50:e9:c7:cc:d8:03:1c:b0:d5:4b:a2:bb:ed:
ad:9e:73:c5:ce:fe:f8:48:f5:97:1e:7f:f8:10:d8:
46:95:78:14:f4:6d:e4:4f:08:45:71:85:a6:d7:07:
8e:0c:7f:2c:ad:b5:bd:cf:ed:c6:d1:7b:94:1a:7d:
3a:84:d8:05:f6:b4:54:05:a9:88:ea:15:f6:39:98:
e0:0c:35:58:62:54:a7:16:bd:89:2a:b1:05:0b:df:
6a:da:12:87:c7:85:23:2b:5a:7b:f8:c3:6b:2f:d0:
c8:88:d4:ca:53:12:5b:bd:03:70:c8:70:91:84:5c:
51:b2:12:3d:0d:d8:bd:f9:9b:4c:02:9d:f3:d9:d9:
e6:fc:fb:7b:fb:48:c4:7a:23:e8:65:34:4d:4a:41:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0E:4A:78:6E:29:24:27:D0:21:E7:5C:07:1F:78:C6:F4:8D:96:BE
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3139322e302f32342d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.192.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c8:57:71:9b:7c:07:3c:7c:cb:ad:7a:bf:2e:92:6f:14:46:
eb:db:38:8c:27:c1:af:90:76:2d:d4:c8:d5:e9:3d:dc:bb:55:
10:6a:fc:80:42:3b:45:53:f4:99:63:49:87:31:48:63:a0:5c:
bb:88:ab:79:6b:f0:a0:f6:19:cd:68:04:ab:65:4b:4c:e2:02:
3a:4d:f2:2e:95:2e:c7:c0:55:e3:a8:1b:ab:49:fe:00:1a:30:
7f:19:3f:17:af:cb:8b:1a:1f:8f:28:0d:38:c0:0d:7e:ac:8e:
c0:b3:75:1f:e5:40:b6:b2:7e:60:cb:c1:c0:9a:3f:0d:99:7e:
bc:61:78:e9:f5:aa:89:37:f8:27:eb:00:c0:8d:a5:d2:bd:e7:
5c:1a:48:22:e6:03:cf:54:61:29:3c:47:bd:b9:c6:4e:98:f6:
1c:25:fc:ab:5d:2d:a5:5b:0e:dc:7f:a6:4e:ab:58:65:70:59:
b9:1b:6c:26:91:9d:49:59:4d:2b:24:09:50:b7:5f:90:b0:00:
5b:3d:c7:80:12:8c:6f:f3:ba:55:03:97:a1:42:7e:9c:44:e6:
2c:a1:14:9f:05:b3:81:db:cb:ab:bd:49:75:9c:32:5b:2b:33:
1d:3e:18:fa:ca:55:71:8e:f5:09:e5:de:d3:7d:dc:7e:3f:41:
45:bc:54:68
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUJk/5/yw94Vz2lTPZHkmtJjEOaZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNTA5MDQxMDM1MDRaFw0yNjA5MDMxMDQwMDRaMDMxMTAvBgNV
BAMTKERBMEU0QTc4NkUyOTI0MjdEMDIxRTc1QzA3MUY3OEM2RjQ4RDk2QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZqvOj3Lo0By+ipQHdVaff4R0
EWUcIp7cCwg1GwXP9CR3WeSPjVrRE5iG4EL2f4HvPLtaWMv0bQYmEVcOaFZyVC8B
+PufyBKzL4/S5W3tV6qsMJ9JP475lJ+wh6hKzwxK41ge+lN2A09jUOnHzNgDHLDV
S6K77a2ec8XO/vhI9Zcef/gQ2EaVeBT0beRPCEVxhabXB44Mfyyttb3P7cbRe5Qa
fTqE2AX2tFQFqYjqFfY5mOAMNVhiVKcWvYkqsQUL32raEofHhSMrWnv4w2sv0MiI
1MpTElu9A3DIcJGEXFGyEj0N2L35m0wCnfPZ2eb8+3v7SMR6I+hlNE1KQbgvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU2g5KeG4pJCfQIedcBx94xvSNlr4wHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUt
OWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1NGJjLzAvMzQzNjJlMzIzMzM2MmUzMTM5
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzNDMzMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAu7MAwDQYJKoZIhvcNAQELBQADggEBACTIV3GbfAc8fMuter8ukm8URuvbOIwn
wa+Qdi3UyNXpPdy7VRBq/IBCO0VT9JljSYcxSGOgXLuIq3lr8KD2Gc1oBKtlS0zi
AjpN8i6VLsfAVeOoG6tJ/gAaMH8ZPxevy4saH48oDTjADX6sjsCzdR/lQLayfmDL
wcCaPw2ZfrxheOn1qok3+CfrAMCNpdK951waSCLmA89UYSk8R725xk6Y9hwl/Ktd
LaVbDtx/pk6rWGVwWbkbbCaRnUlZTSskCVC3X5CwAFs9x4ASjG/zulUDl6FCfpxE
5iyhFJ8Fs4Hby6u9SXWcMlsrMx0+GPrKVXGO9Qnl3tN93H4/QUW8VGg=
-----END CERTIFICATE-----
Generated at Sun Sep 7 04:02:25 2025 by rpki-client