Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3230302e302f32332d3234203d3e20313532313739.roa
File: 34362e3233362e3230302e302f32332d3234203d3e20313532313739.roa (raw, json)
Hash identifier: al7vvlZxSI1qkxlw8xJfh6NP97ptQV53/erfgv73xp4=
Subject key identifier: F0:AC:68:22:04:0F:07:9C:E3:DF:86:04:4E:1D:1D:4A:E2:98:B4:71
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 56CB7CEF55C617171AB69A64A81265F6F587012D
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3230302e302f32332d3234203d3e20313532313739.roa
Signing time: Thu 04 Sep 2025 10:40:07 +0000
ROA not before: Thu 04 Sep 2025 10:35:07 +0000
ROA not after: Thu 03 Sep 2026 10:40:07 +0000
asID: 152179
IP address blocks: 46.236.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:cb:7c:ef:55:c6:17:17:1a:b6:9a:64:a8:12:65:f6:f5:87:01:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:07 2025 GMT
Not After : Sep 3 10:40:07 2026 GMT
Subject: CN=F0AC6822040F079CE3DF86044E1D1D4AE298B471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:4e:ee:55:38:17:89:a2:7b:96:4f:34:bb:
c1:00:75:9c:3f:8b:5d:d9:cc:67:01:94:79:f4:30:
79:14:c3:70:7e:0f:5c:53:c9:de:d2:41:f9:61:d8:
37:8e:c8:85:f4:53:51:fc:a5:4e:29:a9:bd:f3:84:
02:13:45:13:57:4f:b6:d3:fd:99:12:64:ed:cc:c5:
28:a0:26:95:19:fe:bd:a1:99:f3:e8:fd:19:7a:e3:
4b:eb:a3:59:b8:17:1a:d8:0e:36:09:58:04:32:68:
f4:d5:79:bc:c7:50:4f:d1:f7:19:7b:16:e1:c2:c5:
a7:90:40:c0:02:a8:34:e0:df:7e:b1:ae:2d:c0:60:
9b:b2:51:0d:28:5a:45:85:0f:0f:5c:6b:ce:4e:81:
06:d0:95:4f:55:ef:1d:b2:e8:06:97:85:58:db:aa:
1d:10:b5:71:c4:37:a9:55:d6:ee:5c:cc:ae:df:1e:
58:66:06:c5:72:60:cd:c2:3f:59:a2:1f:43:d8:07:
2d:ce:61:19:f3:9f:ba:08:d4:9e:89:7d:be:2e:91:
82:80:4e:37:3f:39:ba:ad:9d:23:6f:26:a8:d4:06:
7c:3f:f3:e8:63:df:2a:05:92:d7:5d:00:ef:66:16:
75:4b:6a:b1:51:92:c9:04:2a:bf:3c:dc:51:72:99:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:68:22:04:0F:07:9C:E3:DF:86:04:4E:1D:1D:4A:E2:98:B4:71
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3230302e302f32332d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.200.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:4b:99:3d:ec:fc:e9:3c:82:8a:e7:56:0f:cf:df:4a:ea:18:
6a:47:51:3a:d4:92:10:a8:71:f8:62:07:b3:da:ff:5e:bf:19:
1b:e1:54:d1:a6:89:56:26:93:d0:5a:02:73:90:f9:fe:c1:a3:
f9:ba:17:94:41:5b:0b:1b:46:a3:ee:63:5d:b9:31:d1:44:dc:
8e:79:63:ba:55:52:c7:16:e2:05:40:09:90:47:9c:85:95:de:
01:f5:4e:98:7c:9c:c3:5c:fb:dd:63:5a:95:93:be:91:4d:cb:
d3:90:e7:a3:98:c7:51:bc:cd:49:51:86:c2:21:36:db:ca:0c:
90:83:20:b3:a9:84:84:88:43:b1:31:48:ad:ee:38:d2:c6:0e:
9d:b4:3d:ce:55:ac:8b:97:39:c0:36:01:a1:5b:6c:30:5f:a4:
43:4d:28:20:cf:a9:3d:b9:08:5b:40:ff:a7:27:0b:3c:a6:70:
e0:90:37:c1:e0:bf:fd:67:0e:b8:ea:7f:b6:30:ce:b2:4a:38:
58:57:32:d3:84:37:ec:5c:6c:43:70:02:32:c0:46:6b:cd:5d:
07:37:a2:42:6b:b6:2c:5c:ae:4d:59:d6:ef:70:f4:59:8a:aa:
2c:46:51:55:c6:66:f5:dc:3d:ea:3e:2a:1a:3d:63:e8:59:01:
ae:02:8d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:55:31 2025 by rpki-client