Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3230362e302f32342d3234203d3e20323134343833.roa
File: 34362e3233362e3230362e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: 5Gwc0juDWfDeKpacxWgKJ2nj2SDtxjpbshm+YtDLUgw=
Subject key identifier: 3D:6F:B1:35:84:FF:87:E0:8C:48:BD:5A:CA:0C:AD:FA:3D:84:AC:9B
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 5ABC4744E421F156546F01037F45546A0C878B6E
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3230362e302f32342d3234203d3e20323134343833.roa
Signing time: Thu 04 Sep 2025 10:40:04 +0000
ROA not before: Thu 04 Sep 2025 10:35:04 +0000
ROA not after: Thu 03 Sep 2026 10:40:04 +0000
asID: 214483
IP address blocks: 46.236.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:bc:47:44:e4:21:f1:56:54:6f:01:03:7f:45:54:6a:0c:87:8b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:04 2025 GMT
Not After : Sep 3 10:40:04 2026 GMT
Subject: CN=3D6FB13584FF87E08C48BD5ACA0CADFA3D84AC9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:1f:bb:f7:b1:0b:b2:7e:52:45:e1:d3:87:
4d:79:6b:dd:c7:95:2f:e9:0e:77:0e:c4:d6:4f:97:
6f:04:49:8b:ff:91:f3:d6:8b:db:e8:6e:43:14:56:
4a:6d:56:38:ec:71:e1:0e:0f:02:73:2a:43:3b:f9:
a1:06:fc:3b:00:65:5f:cb:28:8a:bc:9e:ae:21:01:
c0:79:45:aa:51:e9:aa:0a:d6:17:fb:0c:7b:40:ed:
a8:21:bd:4d:97:5e:80:ee:8b:ba:33:aa:5a:55:19:
71:f2:f4:4c:23:91:f1:1a:d8:e0:99:14:62:0c:52:
b8:60:d8:c5:37:15:6a:01:d3:b7:8f:5b:99:e4:0c:
58:87:9b:b7:c2:07:7d:3e:42:56:81:13:01:a5:9b:
48:a0:26:6c:1a:45:42:ca:77:90:7d:ce:5b:84:ed:
23:e0:0e:5e:62:32:31:60:34:f9:da:21:0e:78:a5:
e9:af:0b:0a:52:52:f5:c3:5a:e9:77:c1:1a:87:de:
0c:e4:2c:58:a5:3e:ca:e5:69:aa:3c:d1:89:35:b9:
7f:e8:9d:72:d2:e0:fa:b6:4e:91:03:75:08:fa:51:
7b:6b:76:21:88:5d:97:4e:55:21:49:47:76:7f:28:
1f:52:77:01:46:a6:b5:20:73:f6:d2:86:ad:f5:e6:
ca:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6F:B1:35:84:FF:87:E0:8C:48:BD:5A:CA:0C:AD:FA:3D:84:AC:9B
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3230362e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.206.0/24
Signature Algorithm: sha256WithRSAEncryption
93:85:29:b5:b3:0f:5d:db:6b:3f:f8:2c:63:d7:df:a9:a6:e8:
4e:aa:68:52:75:4e:bd:d9:81:f8:22:c2:b2:7b:4d:89:44:36:
67:1a:70:30:9f:3c:94:77:ec:de:22:3e:81:b6:e5:4a:98:aa:
ad:a2:35:35:bb:da:20:a1:a2:82:68:4a:3d:8d:af:f7:38:6f:
c2:ac:3e:ee:b4:e7:ad:04:73:10:1a:63:da:40:f7:0d:f0:71:
58:0c:10:c4:44:4f:35:c1:35:c0:ac:c9:2f:2b:40:24:ba:34:
e0:9b:2c:95:8f:b4:e2:27:d2:1c:2b:52:37:78:82:36:69:cb:
54:7f:27:0a:97:b8:e5:54:b8:69:8b:17:45:b7:65:78:67:3f:
04:b9:bc:f0:92:ab:45:28:c9:68:dc:b7:c8:4e:50:16:3f:62:
a0:9e:a2:47:8f:3f:43:69:10:55:86:15:26:e9:61:4a:e9:ec:
88:42:a3:ea:b6:d3:22:60:3b:08:43:4f:56:f7:c1:af:cf:b8:
24:e1:d3:39:09:17:ba:7c:79:a5:45:eb:6f:21:94:e7:dc:72:
22:a7:42:1e:9a:a3:80:39:8b:0d:92:56:51:f6:58:f6:9c:f1:
47:12:20:da:80:dd:07:2d:a2:9e:15:95:be:e9:44:38:72:da:
53:31:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:55:31 2025 by rpki-client