Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3233322e302f32312d3231203d3e203631323434.roa
File: 34362e3233362e3233322e302f32312d3231203d3e203631323434.roa (raw, json)
Hash identifier: 1cC/eBKh38I8sf1ZvUetyQRL8JZAhywh7BGL6L3qg5o=
Subject key identifier: 06:8B:A4:EE:3C:B5:66:65:49:E6:04:D4:30:98:0E:28:5B:96:94:57
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 7F1AC935D491A69565C9CD7E14E1EB6D9353D621
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3233322e302f32312d3231203d3e203631323434.roa
Signing time: Thu 04 Sep 2025 10:40:03 +0000
ROA not before: Thu 04 Sep 2025 10:35:03 +0000
ROA not after: Thu 03 Sep 2026 10:40:03 +0000
asID: 61244
IP address blocks: 46.236.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:1a:c9:35:d4:91:a6:95:65:c9:cd:7e:14:e1:eb:6d:93:53:d6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:03 2025 GMT
Not After : Sep 3 10:40:03 2026 GMT
Subject: CN=068BA4EE3CB5666549E604D430980E285B969457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:04:9b:c5:00:c1:bc:c6:44:dc:d9:59:2f:
74:88:f9:92:ca:7e:95:7a:02:1d:bd:68:24:5e:89:
0b:92:b6:01:95:70:30:32:ed:56:1c:1e:ea:97:f6:
4a:b5:c0:13:4c:14:2f:ee:85:8f:d4:ea:fd:36:79:
b6:ef:cb:f7:b5:4b:ae:44:bd:97:ad:5b:e8:16:5f:
fb:bf:c8:02:36:fd:82:fc:63:01:7c:da:19:39:c7:
fd:cf:51:20:4a:3d:b2:19:31:52:cd:8c:67:8c:1f:
91:20:15:33:94:1a:3a:4a:9f:4b:62:21:ef:24:9c:
d9:e1:ce:9e:85:78:14:41:be:b5:77:f4:15:12:59:
9d:0f:b6:1e:89:b0:96:d0:19:fc:e4:87:71:f3:87:
88:87:7d:ef:6b:99:9f:cb:49:30:98:a8:a9:25:dc:
ac:00:91:57:34:23:eb:1c:23:82:67:cc:41:48:88:
4a:bb:ce:79:bb:cb:d3:52:80:42:7a:d5:b8:c1:4e:
3f:88:58:36:6e:37:2a:2b:ef:2d:9d:85:7b:0a:83:
68:c6:78:a4:ad:a1:b4:b6:f7:bd:c2:b8:13:1c:40:
a9:db:b3:df:88:9f:bd:c0:ad:77:80:65:b2:6d:ba:
0f:0e:f1:71:e2:1e:fa:59:00:ad:9e:32:4c:3d:35:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8B:A4:EE:3C:B5:66:65:49:E6:04:D4:30:98:0E:28:5B:96:94:57
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3233322e302f32312d3231203d3e203631323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.232.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:85:87:e8:43:34:a3:c3:78:52:6d:47:e1:40:4d:9f:e4:c2:
01:38:49:01:32:66:16:79:ac:fb:22:29:a8:95:50:61:b3:f7:
32:45:a4:54:7c:56:08:3f:09:a9:07:18:66:2c:32:9a:38:9e:
f5:b2:74:f9:e7:93:ec:14:64:99:bc:cf:76:93:c3:02:7e:ea:
6c:b2:67:f3:bf:31:da:d6:d0:f4:8e:16:40:f1:6a:d8:58:8d:
47:34:16:bb:47:d6:0c:9d:67:f0:dd:2e:86:4e:1d:de:a8:05:
f8:ed:9c:fe:28:32:95:b5:fe:65:5b:d4:15:60:fe:88:76:e5:
fe:db:72:28:43:bd:27:f7:7e:36:44:e8:01:64:c9:0c:20:d0:
14:97:d1:85:31:d0:ed:00:8c:5a:46:1c:e9:c2:b2:a9:93:7f:
93:71:3f:91:39:5b:25:14:c2:e1:8a:3c:1f:3c:e0:3f:4f:a5:
5c:d1:c9:a8:fd:00:be:2d:7c:1b:68:be:15:36:33:ef:56:19:
ad:18:0d:d0:2c:9e:ff:a5:1f:e0:78:07:81:a0:b2:11:69:3c:
24:b0:0b:40:f4:09:3d:09:08:26:71:46:80:1a:a0:37:1c:fc:
30:81:24:d0:b3:29:6a:58:75:92:cf:0f:da:bb:7c:a0:3a:ca:
bb:1c:60:45
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUfxrJNdSRppVlyc1+FOHrbZNT1iEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNTA5MDQxMDM1MDNaFw0yNjA5MDMxMDQwMDNaMDMxMTAvBgNV
BAMTKDA2OEJBNEVFM0NCNTY2NjU0OUU2MDRENDMwOTgwRTI4NUI5Njk0NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgeASbxQDBvMZE3NlZL3SI+ZLK
fpV6Ah29aCReiQuStgGVcDAy7VYcHuqX9kq1wBNMFC/uhY/U6v02ebbvy/e1S65E
vZetW+gWX/u/yAI2/YL8YwF82hk5x/3PUSBKPbIZMVLNjGeMH5EgFTOUGjpKn0ti
Ie8knNnhzp6FeBRBvrV39BUSWZ0Pth6JsJbQGfzkh3Hzh4iHfe9rmZ/LSTCYqKkl
3KwAkVc0I+scI4JnzEFIiEq7znm7y9NSgEJ61bjBTj+IWDZuNyor7y2dhXsKg2jG
eKStobS2973CuBMcQKnbs9+In73ArXeAZbJtug8O8XHiHvpZAK2eMkw9NdhhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUBouk7jy1ZmVJ5gTUMJgOKFuWlFcwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUt
OWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1NGJjLzAvMzQzNjJlMzIzMzM2MmUzMjMz
MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNjMxMzIzNDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
LuzoMA0GCSqGSIb3DQEBCwUAA4IBAQBKhYfoQzSjw3hSbUfhQE2f5MIBOEkBMmYW
eaz7IimolVBhs/cyRaRUfFYIPwmpBxhmLDKaOJ71snT555PsFGSZvM92k8MCfups
smfzvzHa1tD0jhZA8WrYWI1HNBa7R9YMnWfw3S6GTh3eqAX47Zz+KDKVtf5lW9QV
YP6IduX+23IoQ70n9342ROgBZMkMINAUl9GFMdDtAIxaRhzpwrKpk3+TcT+ROVsl
FMLhijwfPOA/T6Vc0cmo/QC+LXwbaL4VNjPvVhmtGA3QLJ7/pR/geAeBoLIRaTwk
sAtA9Ak9CQgmcUaAGqA3HPwwgSTQsylqWHWSzw/au3ygOsq7HGBF
-----END CERTIFICATE-----
Generated at Sun Sep 7 03:54:46 2025 by rpki-client