Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3231342e302f32342d3234203d3e20383334.roa
File: 34362e3233362e3231342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 2+JsFe4Q8IuIlvxG2BbzykgdA2dQVUKp63NmJv/ANlM=
Subject key identifier: 44:90:33:9F:08:32:D9:43:2B:66:BC:2E:BB:D1:54:66:8E:76:12:18
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 0600B3D4CABACF1BD775493FC4B12FEDC8C9359B
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3231342e302f32342d3234203d3e20383334.roa
Signing time: Fri 05 Sep 2025 17:15:31 +0000
ROA not before: Fri 05 Sep 2025 17:10:31 +0000
ROA not after: Fri 04 Sep 2026 17:15:31 +0000
asID: 834
IP address blocks: 46.236.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:00:b3:d4:ca:ba:cf:1b:d7:75:49:3f:c4:b1:2f:ed:c8:c9:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 5 17:10:31 2025 GMT
Not After : Sep 4 17:15:31 2026 GMT
Subject: CN=4490339F0832D9432B66BC2EBBD154668E761218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:8d:d7:cd:69:4c:c0:25:fe:3e:f4:cc:72:
13:51:3b:2d:73:2a:41:3a:16:b2:fd:1d:b8:f9:1f:
c1:7e:5a:ed:eb:17:f7:c4:cf:e9:a4:24:fb:5b:20:
c4:c1:a0:af:7a:e3:64:74:5f:33:68:69:a6:eb:a1:
a3:72:b6:b7:56:ad:c2:8f:31:8e:a1:d5:ea:d3:bc:
8e:03:34:e6:d6:f1:34:3d:45:d2:b1:fe:3b:69:9b:
3e:36:3c:a1:0e:a4:ed:02:4d:eb:d4:2c:0e:4d:af:
f4:67:3e:97:00:73:db:5c:90:de:64:b2:24:8e:17:
26:ca:f2:64:80:31:c3:36:4c:c0:f5:17:6d:3e:ce:
9d:a7:cb:22:85:fa:03:a9:fe:dd:df:f8:e5:8e:53:
6b:e2:bc:3e:89:99:b5:db:d2:e6:c4:1b:df:91:93:
96:9f:fb:12:df:88:cc:35:a0:61:ed:0c:38:55:b8:
f9:e6:1c:a4:15:b2:a6:46:83:c7:30:11:73:4e:33:
76:b2:61:73:e3:22:59:dd:dc:66:1d:ff:bd:77:2e:
34:40:bc:2f:7d:62:aa:05:f4:03:89:5a:cf:f1:84:
d0:71:ff:63:97:83:01:72:5a:97:0b:cc:cb:4f:4a:
00:68:f6:cf:75:5e:60:08:55:1d:b4:93:28:e0:a3:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:90:33:9F:08:32:D9:43:2B:66:BC:2E:BB:D1:54:66:8E:76:12:18
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3231342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.214.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c8:6b:ca:15:7c:c3:48:41:8d:e5:17:e9:8c:cf:6e:16:63:
1f:b2:3a:26:de:1d:65:84:aa:63:d1:32:32:8e:82:db:ef:fe:
69:44:b3:ee:6a:c7:c9:04:3b:d3:6b:c4:80:83:6a:ec:54:cc:
03:f1:7a:ad:52:fd:91:40:5a:da:57:cc:6c:c7:f9:fc:c5:18:
41:21:2c:ae:af:db:5f:3b:d6:8a:6b:97:30:49:c7:6c:a5:7a:
63:de:39:93:ef:57:a1:33:8f:60:7b:02:bf:5e:c4:ee:6d:6b:
28:69:92:24:9b:1a:5d:59:8e:25:06:f8:35:3c:60:f9:a0:6e:
39:be:47:5f:e4:ca:8b:1e:53:ba:52:69:88:c6:e8:3d:52:ac:
00:7b:61:13:66:30:96:45:a3:d6:6d:51:8d:c7:43:9f:21:5b:
35:82:d0:38:b0:66:b4:02:5e:2f:57:e3:39:75:73:6e:9e:b4:
e6:d2:d5:0f:64:dd:a4:dd:a6:5f:96:66:b6:67:04:e8:08:a0:
b1:8a:9d:fb:26:cb:c9:d3:c5:c6:63:2c:31:91:a0:30:65:d4:
51:48:62:cf:ab:64:77:6d:3c:f1:33:49:27:ff:86:5d:0b:ab:
1a:4d:dd:37:cb:cb:55:d7:83:9b:77:d6:a6:b8:1a:bc:db:5b:
fe:d5:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:54:45 2025 by rpki-client