Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3230322e302f32342d3234203d3e20313532313739.roa
File: 34362e3233362e3230322e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: v+eHakTVoqb9W6EsRrR0hEizqRyKc/lo7n0P02ET+po=
Subject key identifier: 08:84:0E:A9:57:5F:BF:0E:96:22:FE:EB:13:43:48:A6:E5:8E:E0:BF
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 5C0B5F1C60CDCD0388D248A6B1EA26FAC18146FE
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3230322e302f32342d3234203d3e20313532313739.roa
Signing time: Thu 04 Sep 2025 10:40:05 +0000
ROA not before: Thu 04 Sep 2025 10:35:05 +0000
ROA not after: Thu 03 Sep 2026 10:40:05 +0000
asID: 152179
IP address blocks: 46.236.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:0b:5f:1c:60:cd:cd:03:88:d2:48:a6:b1:ea:26:fa:c1:81:46:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:05 2025 GMT
Not After : Sep 3 10:40:05 2026 GMT
Subject: CN=08840EA9575FBF0E9622FEEB134348A6E58EE0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:c5:98:25:5d:9e:3e:05:1a:a7:94:8e:1d:
72:10:ea:09:29:8a:bd:b9:fc:7d:f0:12:74:82:98:
56:8c:ba:20:5a:74:0e:f5:b7:38:20:14:c7:dd:71:
f6:16:e9:27:07:2b:bd:38:9e:de:dd:51:d3:f1:a1:
fd:5d:00:e9:2e:e0:c8:dc:60:c5:3e:fc:2f:3c:72:
23:fb:50:60:fe:3c:bd:d9:33:34:8c:a2:95:69:73:
f8:3b:fa:e7:76:de:69:b3:2a:91:0c:7c:16:a3:c8:
a4:3a:31:ed:2c:98:01:ac:34:0b:19:3c:ff:81:cc:
5a:23:c9:0b:11:2a:46:b4:7c:33:47:6a:f0:27:82:
db:55:7a:c2:48:b4:ca:e7:f5:e4:fb:5e:5a:30:be:
50:50:33:72:f8:3f:33:09:38:9b:58:73:1c:3e:49:
72:b2:c7:00:2d:ec:f3:79:e5:0f:89:ec:1f:53:8f:
c9:12:f4:0a:7b:67:42:56:7b:64:10:48:aa:86:cc:
8c:aa:53:9f:37:4a:79:48:ad:2f:bc:4b:7b:96:9b:
55:b4:4a:66:1b:a8:7c:14:64:2a:80:8f:ab:4f:fe:
74:a8:ef:e1:f5:57:c0:1b:72:cd:c5:1f:37:09:4d:
5d:b1:1a:41:32:10:dc:e7:1c:f3:46:bc:de:ce:a6:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:84:0E:A9:57:5F:BF:0E:96:22:FE:EB:13:43:48:A6:E5:8E:E0:BF
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3230322e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.202.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e7:48:02:2f:de:ce:5e:6a:58:e6:2f:56:39:c1:c6:64:61:
b5:fd:7c:8e:b9:9c:13:ff:8b:cc:23:eb:89:23:d6:0a:cf:e8:
ac:83:76:2f:8d:fe:b5:07:03:c2:59:a8:f4:55:0a:8b:58:79:
6c:e3:48:be:2b:08:48:8d:61:53:54:37:e7:29:d2:01:bf:9a:
9d:41:e6:12:25:e6:33:8b:18:ce:94:ff:aa:b3:fe:b0:43:7a:
41:12:04:87:8b:22:2e:a9:53:2c:17:20:46:a7:c5:f3:fd:02:
80:1f:d3:9a:d9:32:3e:ac:f4:f4:d6:ab:54:05:21:ef:fc:a2:
cd:bf:41:b1:7e:40:76:4e:44:6c:60:54:34:05:a6:6e:41:8b:
90:37:dd:ea:d5:ac:4e:06:27:32:5a:f6:36:90:b0:d0:c7:07:
f7:dc:99:64:04:b8:38:c7:cd:55:d7:45:63:c4:36:6f:1c:c9:
25:16:af:6a:7e:7f:77:26:6a:af:99:1d:d0:8e:f7:e7:d9:1c:
00:fa:f3:93:d7:76:76:f2:f4:54:51:c9:05:01:db:25:76:10:
1d:c9:d9:92:be:de:a6:d4:d1:fa:a6:c3:5e:1d:d5:84:3c:98:
7a:15:30:c9:39:7f:0d:c8:26:33:15:ec:3d:a5:1a:34:cb:a8:
8a:8d:38:53
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXAtfHGDNzQOI0kimseom+sGBRv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNTA5MDQxMDM1MDVaFw0yNjA5MDMxMDQwMDVaMDMxMTAvBgNV
BAMTKDA4ODQwRUE5NTc1RkJGMEU5NjIyRkVFQjEzNDM0OEE2RTU4RUUwQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe98WYJV2ePgUap5SOHXIQ6gkp
ir25/H3wEnSCmFaMuiBadA71tzggFMfdcfYW6ScHK704nt7dUdPxof1dAOku4Mjc
YMU+/C88ciP7UGD+PL3ZMzSMopVpc/g7+ud23mmzKpEMfBajyKQ6Me0smAGsNAsZ
PP+BzFojyQsRKka0fDNHavAngttVesJItMrn9eT7XlowvlBQM3L4PzMJOJtYcxw+
SXKyxwAt7PN55Q+J7B9Tj8kS9Ap7Z0JWe2QQSKqGzIyqU583SnlIrS+8S3uWm1W0
SmYbqHwUZCqAj6tP/nSo7+H1V8Abcs3FHzcJTV2xGkEyENznHPNGvN7OprSrAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUCIQOqVdfvw6WIv7rE0NIpuWO4L8wHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUt
OWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1NGJjLzAvMzQzNjJlMzIzMzM2MmUzMjMw
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzMTM3Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAu7MowDQYJKoZIhvcNAQELBQADggEBAAjnSAIv3s5ealjmL1Y5wcZkYbX9fI65
nBP/i8wj64kj1grP6KyDdi+N/rUHA8JZqPRVCotYeWzjSL4rCEiNYVNUN+cp0gG/
mp1B5hIl5jOLGM6U/6qz/rBDekESBIeLIi6pUywXIEanxfP9AoAf05rZMj6s9PTW
q1QFIe/8os2/QbF+QHZORGxgVDQFpm5Bi5A33erVrE4GJzJa9jaQsNDHB/fcmWQE
uDjHzVXXRWPENm8cySUWr2p+f3cmaq+ZHdCO9+fZHAD685PXdnby9FRRyQUB2yV2
EB3J2ZK+3qbU0fqmw14d1YQ8mHoVMMk5fw3IJjMV7D2lGjTLqIqNOFM=
-----END CERTIFICATE-----
Generated at Sun Sep 7 04:02:24 2025 by rpki-client