Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3139392e302f32342d3234203d3e20333935373933.roa
File: 34362e3233362e3139392e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: +SiBArTl2L+RA/Sv4fl/S6ke/ppWfEylXg6IPbEzfcc=
Subject key identifier: 4E:3C:B2:B0:9D:93:6C:FE:F1:75:8B:DE:EB:2A:FE:7D:61:30:20:98
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 186C7CB0B29E0162D6CB53B6BCE847C097533DF8
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3139392e302f32342d3234203d3e20333935373933.roa
Signing time: Thu 04 Sep 2025 10:40:06 +0000
ROA not before: Thu 04 Sep 2025 10:35:06 +0000
ROA not after: Thu 03 Sep 2026 10:40:06 +0000
asID: 395793
IP address blocks: 46.236.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:6c:7c:b0:b2:9e:01:62:d6:cb:53:b6:bc:e8:47:c0:97:53:3d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:06 2025 GMT
Not After : Sep 3 10:40:06 2026 GMT
Subject: CN=4E3CB2B09D936CFEF1758BDEEB2AFE7D61302098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:dd:88:f1:8d:70:ad:58:48:74:52:6c:e4:
8f:fb:1f:cf:2c:87:e4:ef:6b:10:73:c2:2a:6e:ff:
b9:37:fd:77:c6:b0:03:57:ab:f2:94:4c:f2:85:6d:
3a:d1:3c:f4:02:58:5c:3a:52:61:db:53:27:4a:5b:
20:91:38:47:c0:cd:67:6c:57:d1:d3:9e:9b:53:09:
e5:47:c6:73:f7:18:3e:0b:71:6c:5d:b1:16:85:83:
49:9c:27:2e:57:ec:16:53:81:32:57:62:1a:2a:1a:
a0:24:4c:88:dc:41:42:86:17:64:c6:33:11:7b:80:
07:fc:8d:65:1e:a4:70:d2:8d:03:5c:35:ae:d6:08:
e8:be:36:a8:3e:88:a5:9d:48:4c:30:5a:d9:5a:01:
cb:3b:47:b6:7c:4b:cd:13:b5:d6:f1:e9:71:95:e1:
3a:5d:08:d9:91:99:e4:87:64:fc:db:d4:fe:2b:f1:
29:97:1e:cd:4d:6a:2a:e7:fc:41:a0:0d:77:69:36:
ea:83:91:e1:fd:72:ba:07:e4:14:11:8d:d2:2c:16:
39:4a:90:c3:c3:8a:f1:8c:2d:ed:d4:18:66:b9:20:
14:6d:b1:77:a6:c4:1c:2b:d9:58:96:21:85:63:6c:
b8:2a:d6:fe:df:73:ed:75:18:4c:ce:99:ce:ae:c1:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:B2:B0:9D:93:6C:FE:F1:75:8B:DE:EB:2A:FE:7D:61:30:20:98
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3139392e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:bf:b4:43:26:5c:68:d2:1f:63:6d:98:17:f5:ad:21:a0:68:
54:52:2b:50:3a:ac:19:7c:16:5e:87:19:9b:73:94:c6:9d:3b:
be:89:77:4e:03:f2:38:1e:08:45:0e:94:8b:a5:e7:2b:8c:98:
f8:ef:74:c1:93:04:26:56:2a:0a:ac:93:6c:0f:e6:8e:1d:1c:
fa:d1:07:30:8f:66:b4:6b:b8:23:05:d8:4d:92:0d:78:3e:f2:
60:77:cf:fa:13:c5:00:d4:0b:ea:98:4f:f8:ba:68:9c:28:62:
99:54:17:7d:8c:a2:6b:ca:a9:49:6a:08:18:89:a1:3f:36:f6:
2c:fb:9f:55:d2:44:08:5a:73:ef:4a:14:d7:2c:df:0e:c9:6c:
69:7e:6b:61:3b:ed:99:93:3b:5e:5e:a3:93:91:86:af:fb:18:
df:57:dc:7c:2b:c2:be:9c:c6:ea:36:eb:1b:2f:05:98:33:68:
53:4e:9c:31:3b:c3:e6:2e:86:6d:24:51:83:65:8e:23:91:83:
03:1d:44:da:59:59:e1:e3:73:28:20:82:00:e5:f4:e9:e9:f4:
d7:6c:48:9f:93:03:ab:f5:63:db:d8:dd:0a:92:d3:fe:64:2c:
84:89:0a:51:94:da:27:8d:4d:13:c4:dc:1e:be:bd:ad:1d:03:
e0:57:99:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 04:02:24 2025 by rpki-client