Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3231362e302f32312d3234203d3e2038383230.roa
File: 34362e3233362e3231362e302f32312d3234203d3e2038383230.roa (raw, json)
Hash identifier: Kb3/DL3UKhKr+Z0cuyMGdqJCrbyQJ1Skm+0DyqeHH5I=
Subject key identifier: 0B:4A:4C:73:8F:71:33:3D:D8:2A:80:F5:C4:C6:AA:9B:DE:CC:2E:3B
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 07BE373D84040C5901FB4B51AE8AC1976001439D
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3231362e302f32312d3234203d3e2038383230.roa
Signing time: Fri 05 Sep 2025 08:43:28 +0000
ROA not before: Fri 05 Sep 2025 08:38:28 +0000
ROA not after: Fri 04 Sep 2026 08:43:28 +0000
asID: 8820
IP address blocks: 46.236.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:be:37:3d:84:04:0c:59:01:fb:4b:51:ae:8a:c1:97:60:01:43:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 5 08:38:28 2025 GMT
Not After : Sep 4 08:43:28 2026 GMT
Subject: CN=0B4A4C738F71333DD82A80F5C4C6AA9BDECC2E3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:5e:a5:a6:30:7f:66:c8:f4:a5:68:a6:bb:
a8:c3:2c:32:93:17:07:ee:26:a0:b7:95:55:09:40:
8d:37:ff:87:9a:9c:0e:5d:67:f5:50:fc:88:52:56:
2d:e7:1e:98:3d:a2:6f:6e:1f:9a:0d:f3:31:89:5c:
9f:10:36:11:4c:9a:fb:7e:1e:a8:71:e2:b9:0c:19:
33:d5:de:aa:72:dc:8f:e2:ca:78:b1:be:fa:ca:2f:
34:dd:eb:46:95:bb:95:1a:3e:c0:9e:91:9c:d1:2d:
27:63:fd:ee:c4:90:62:33:ba:0a:f3:a9:bc:6d:92:
a7:81:d3:fa:f5:77:cb:d8:d6:95:e0:f8:79:ee:04:
83:fa:13:7b:76:58:74:a3:59:38:d2:5b:bd:1f:13:
51:f0:bc:a1:24:9b:49:3e:89:23:0a:8d:92:8d:7a:
04:9c:78:0c:4f:06:3b:42:98:16:93:9f:dd:51:cd:
39:3c:0c:43:38:32:dd:89:d8:b1:f5:45:cb:b5:f0:
7f:27:c1:5c:fa:5c:2d:41:0e:36:43:dd:54:05:60:
25:64:1d:ce:b3:34:92:d3:59:a8:5b:8b:12:62:16:
11:11:a3:df:20:c3:e7:da:47:db:15:1a:a6:37:42:
1f:c2:0a:75:ae:b8:1e:d8:a8:aa:29:96:7b:26:84:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4A:4C:73:8F:71:33:3D:D8:2A:80:F5:C4:C6:AA:9B:DE:CC:2E:3B
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3231362e302f32312d3234203d3e2038383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.216.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:d1:5b:3b:ce:86:ab:36:88:66:f1:96:b1:d5:89:36:b8:e1:
96:82:4b:6b:5f:82:38:2d:a2:c8:d8:40:2b:16:ed:99:97:c0:
5c:26:22:4a:e7:79:9a:7c:c8:d4:34:09:9f:5b:df:e2:b6:ef:
98:58:4c:32:d9:64:2d:e8:30:cb:5e:84:93:88:6d:33:50:af:
3e:1b:dd:71:f4:7c:d4:3e:98:ec:19:9e:d7:0c:24:e4:df:d2:
c7:bd:ef:ff:13:db:f7:0b:f1:1b:17:a3:aa:45:72:e2:0d:0c:
fb:83:ec:2b:ec:03:b6:16:d5:c3:49:f3:d5:29:78:16:de:b2:
73:d1:ce:5b:3f:2a:b8:2d:79:46:e8:46:72:14:db:44:8e:8e:
60:9d:f9:88:1e:df:29:0c:34:02:98:a6:82:ef:80:46:57:a4:
08:87:a1:27:9e:e4:bb:5a:d5:e7:42:dc:cf:3d:00:e6:d1:1f:
4f:e7:c0:e8:7d:a4:a0:48:ac:75:b5:f7:ee:b9:f1:0d:9f:13:
61:1f:2d:dc:ef:95:90:46:8f:db:a4:7a:50:fb:d7:16:d6:47:
2f:0a:b3:09:56:03:c8:48:89:03:c9:2c:ac:e1:46:9e:a4:27:
de:5b:02:48:09:c1:cd:77:fc:ae:49:60:e3:e3:2c:f7:ff:ba:
53:46:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:54:46 2025 by rpki-client