Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3234382e302f32322d3234203d3e203133333437.roa
File: 34362e3233362e3234382e302f32322d3234203d3e203133333437.roa (raw, json)
Hash identifier: mQbdx/r5p/hZB+PZWkWmtdRSbv14VNrPFbCISLD7eeg=
Subject key identifier: 74:96:6D:CF:E4:43:B2:25:55:D1:D4:B8:40:C5:5A:C4:13:8F:40:B8
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 2A08540761AD89E5B94BC8A8AC7C741C9E76F286
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3234382e302f32322d3234203d3e203133333437.roa
Signing time: Thu 04 Sep 2025 10:40:05 +0000
ROA not before: Thu 04 Sep 2025 10:35:05 +0000
ROA not after: Thu 03 Sep 2026 10:40:05 +0000
asID: 13347
IP address blocks: 46.236.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:08:54:07:61:ad:89:e5:b9:4b:c8:a8:ac:7c:74:1c:9e:76:f2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:05 2025 GMT
Not After : Sep 3 10:40:05 2026 GMT
Subject: CN=74966DCFE443B22555D1D4B840C55AC4138F40B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:8b:75:c7:9a:98:45:fb:07:4c:4a:63:61:
2f:11:bc:2b:93:5e:77:82:53:58:ec:dc:33:e5:7c:
27:36:36:fa:a7:a9:44:b5:99:66:74:1b:44:b7:b9:
ff:5b:0d:f6:f4:3b:4d:ff:03:6d:1c:99:90:19:eb:
67:8f:d9:66:51:ce:05:e7:27:f7:f2:1d:05:cd:ce:
19:95:bb:80:fc:8f:21:56:2f:77:17:e3:30:3b:14:
1d:da:0d:a1:b9:82:e2:ff:e7:fc:7d:94:5e:45:8c:
f4:b7:f6:e3:4e:e1:50:eb:43:7e:62:96:0d:dc:8b:
d8:0b:11:31:ba:dd:2e:8a:78:32:db:76:95:fc:cd:
7d:5a:6e:1e:50:38:2e:ce:5a:d3:01:e6:0d:af:3c:
2e:47:b2:17:8f:95:6c:cd:ab:0b:ff:cd:87:ad:c7:
62:7e:d6:3a:84:14:1d:ca:a3:81:8f:02:52:54:92:
c1:83:28:ed:2f:9b:8b:5b:ab:29:7d:3a:da:14:6b:
91:85:89:18:6f:f6:b3:82:17:d6:7b:f3:86:73:30:
30:c6:1e:1b:17:2b:be:38:95:f3:5d:5e:83:06:1e:
55:f0:70:7e:32:3a:81:71:f1:51:6c:48:32:e3:88:
bc:b7:ec:4e:d7:1e:ae:f1:77:e7:4c:78:5f:a4:71:
aa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:96:6D:CF:E4:43:B2:25:55:D1:D4:B8:40:C5:5A:C4:13:8F:40:B8
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3234382e302f32322d3234203d3e203133333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.248.0/22
Signature Algorithm: sha256WithRSAEncryption
72:69:1f:4e:f6:0b:5a:cb:49:45:01:bf:78:9e:91:06:e3:51:
44:70:82:a4:bd:64:bb:57:ef:10:7e:97:58:f7:ed:9e:5a:58:
b7:79:c6:f1:48:d6:8c:48:e9:d3:f1:4b:03:2a:97:ce:d3:ee:
19:1a:e4:85:b4:19:db:04:24:7c:37:9c:00:14:7e:90:91:af:
e9:88:02:a1:d6:20:50:a4:3c:39:e8:37:2d:29:4d:43:54:f8:
89:21:3a:0c:83:f0:d7:b8:0f:1d:f4:be:e3:d0:2e:33:26:d2:
4a:0b:51:75:bb:3e:1b:d9:25:f6:7a:44:92:ff:17:8c:58:c2:
6d:3b:c1:6c:21:a3:d3:93:04:1e:18:e2:80:8b:c9:03:46:0c:
82:6a:c8:81:0e:55:1b:6d:a5:a0:6f:84:e1:ae:ac:4a:12:3b:
44:6a:2a:99:a1:ea:b1:30:20:fb:4a:c6:4a:28:fb:be:05:45:
f1:72:7e:3d:27:d8:2e:81:f6:0c:dc:be:ed:16:f5:e5:96:1a:
d3:28:01:bb:02:11:83:b0:a9:ce:71:c4:68:c6:62:53:d8:d8:
c0:2c:16:07:82:06:56:2d:f2:ba:0a:9f:67:36:ad:90:05:48:
04:fa:09:b1:06:93:05:e3:2e:29:db:a7:20:7f:e0:2c:3a:e4:
b6:e6:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:19:30 2025 by rpki-client