Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3234342e302f32322d3234203d3e2037303239.roa
File: 34362e3233362e3234342e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: um+o54kN7D6LC9UqCOEHOknO5nv21RBpQ7+7dhIelpE=
Subject key identifier: A9:FD:34:A0:54:D1:22:E2:73:AA:31:FB:C6:40:0F:5A:A1:FE:39:5B
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 189A9FD177B01AC68A58B93B0C5D2649C87FE3A2
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3234342e302f32322d3234203d3e2037303239.roa
Signing time: Thu 04 Sep 2025 10:40:05 +0000
ROA not before: Thu 04 Sep 2025 10:35:05 +0000
ROA not after: Thu 03 Sep 2026 10:40:05 +0000
asID: 7029
IP address blocks: 46.236.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:9a:9f:d1:77:b0:1a:c6:8a:58:b9:3b:0c:5d:26:49:c8:7f:e3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:05 2025 GMT
Not After : Sep 3 10:40:05 2026 GMT
Subject: CN=A9FD34A054D122E273AA31FBC6400F5AA1FE395B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:21:2b:b0:5f:ba:7a:5d:47:7a:31:d8:9c:
e1:e5:f6:5f:1f:39:ed:d6:f1:ba:d1:2b:91:fd:5e:
4c:e4:76:f0:f9:b5:cf:43:55:a9:95:a8:db:8b:ac:
03:d4:a7:01:f8:9c:60:8d:a9:f0:9c:2e:7f:e8:12:
6b:41:d3:98:8d:1e:de:04:be:dd:b4:fa:1d:92:6f:
0b:54:65:66:36:6b:aa:98:ba:00:39:21:31:08:8a:
1a:5c:49:93:00:07:94:68:7c:01:21:c7:41:38:55:
17:19:c2:15:6b:6a:55:bd:36:81:12:6e:69:69:94:
42:41:f6:eb:be:16:0c:83:37:c4:9c:c8:1e:bd:2a:
7d:de:b4:48:15:90:d9:8d:35:c6:7c:7e:c0:56:6a:
d8:48:26:ca:4c:76:a4:cd:07:4d:0c:74:f3:31:62:
25:a1:ab:82:14:2e:62:e6:c8:10:25:7c:a4:6b:55:
d7:74:24:04:54:7c:78:ae:f2:9b:47:c0:64:b3:30:
bf:72:90:9a:0a:c1:cc:a0:06:c5:69:cc:07:94:fa:
e2:c0:2a:9e:9b:42:44:a1:e2:77:4a:06:cb:2c:65:
0d:ec:81:1d:ad:bb:3e:e3:c9:d8:fd:74:82:d7:99:
4f:b5:a2:5c:6f:5b:9a:9b:d0:85:ee:a6:d0:b5:47:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:34:A0:54:D1:22:E2:73:AA:31:FB:C6:40:0F:5A:A1:FE:39:5B
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3234342e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.244.0/22
Signature Algorithm: sha256WithRSAEncryption
54:77:c3:06:9b:66:ec:30:38:dc:20:1d:39:52:50:a8:bf:53:
0f:61:93:63:17:ab:c5:0e:8b:48:8e:c1:54:58:af:c5:da:e6:
b1:04:93:51:6f:d4:bc:80:4f:02:89:55:5d:6f:1a:58:f8:01:
6e:cc:da:4b:b4:db:4a:f2:76:ad:5d:db:f7:09:a9:8c:18:81:
ec:66:82:78:67:34:03:fe:6d:0f:a1:47:41:b7:0d:26:d3:e9:
50:28:dc:2f:2d:31:ea:3d:1a:1b:5f:19:60:af:49:28:87:43:
5e:30:8d:68:c0:0b:6b:68:f0:b7:08:62:37:24:6c:a4:73:5f:
4f:6f:ed:20:0e:a2:41:bc:2f:60:16:82:5b:b4:54:16:eb:1f:
81:ad:bb:1c:7b:42:93:52:74:a5:2c:d9:58:2c:fa:dd:91:bd:
5b:06:e4:ca:dd:84:3f:a4:40:bc:34:a1:dc:72:9d:26:d7:3b:
18:db:44:99:00:c0:6d:41:ff:e5:fc:25:68:2e:b8:d6:3a:d3:
66:2e:c1:ea:23:20:47:74:37:88:97:e7:58:6d:36:4e:39:1d:
96:6a:a2:7b:05:8a:1f:e2:e7:d7:50:d5:c4:cf:37:8f:4a:8a:
e5:f5:c3:2d:74:9b:57:2e:b3:71:0a:97:6c:57:cd:00:a2:23:
4b:76:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:54:45 2025 by rpki-client