Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3235332e302f32342d3234203d3e20383334.roa
File: 34362e3233362e3235332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: yebF78Y3SNqncpWWGzPYfUeLhm25A2Rgzalzhmbxuy8=
Subject key identifier: 15:19:57:BA:2B:21:AC:18:C4:E6:F4:42:86:79:D8:83:66:33:3A:88
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 69265E5E374B21AD3300C986DC3A541AC1A257E5
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3235332e302f32342d3234203d3e20383334.roa
Signing time: Fri 05 Sep 2025 13:33:20 +0000
ROA not before: Fri 05 Sep 2025 13:28:20 +0000
ROA not after: Fri 04 Sep 2026 13:33:20 +0000
asID: 834
IP address blocks: 46.236.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:26:5e:5e:37:4b:21:ad:33:00:c9:86:dc:3a:54:1a:c1:a2:57:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 5 13:28:20 2025 GMT
Not After : Sep 4 13:33:20 2026 GMT
Subject: CN=151957BA2B21AC18C4E6F4428679D88366333A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:b4:24:ca:9a:e7:ae:d7:c2:02:48:01:ef:
53:e5:03:cd:05:a6:59:ff:2c:4b:4c:0f:6d:14:d2:
09:81:81:da:2b:e9:bc:5c:99:62:c2:c0:9b:c0:1a:
a0:57:df:a5:53:8c:fd:3e:3c:fb:bd:da:ea:10:dd:
8a:2f:15:f2:83:0d:87:a8:e5:31:02:16:03:f1:96:
5b:5a:91:b2:5a:1c:7f:6d:e3:eb:c4:e6:c8:6c:50:
af:5b:cf:15:e9:39:39:64:1e:f3:94:3e:e1:39:c7:
fd:bd:52:bc:38:f9:39:6e:c0:fb:7c:ee:61:08:de:
a9:71:ad:5c:d4:a1:a4:b8:69:fa:04:f8:4a:c6:9a:
f6:dc:f8:d4:96:e3:12:ae:ff:db:bd:21:b6:41:33:
66:73:9b:0a:1c:b0:64:92:ba:1b:2d:10:77:91:b5:
da:42:a0:10:72:9c:c7:68:b9:72:cb:a9:9e:43:00:
fd:82:90:0b:96:b2:70:dd:35:7b:d2:d8:27:15:38:
a2:34:63:b0:bf:1f:b4:69:c0:a6:0b:ff:74:4a:a3:
c9:4a:76:de:c2:2c:ba:9e:57:1f:f3:3e:28:e8:85:
39:39:23:4f:cc:2e:36:61:89:8f:f8:7f:48:30:01:
74:f5:ae:75:10:e7:1a:2b:73:ce:8d:64:8c:ad:ed:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:19:57:BA:2B:21:AC:18:C4:E6:F4:42:86:79:D8:83:66:33:3A:88
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3235332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.253.0/24
Signature Algorithm: sha256WithRSAEncryption
29:62:1c:f9:28:f7:3f:73:1f:9e:0d:dd:79:99:1f:f0:14:36:
06:6a:9e:37:39:ba:a2:ae:1e:2f:a0:75:59:f4:9e:47:15:4e:
c1:47:3d:98:30:03:98:2d:de:6d:ac:87:e7:ba:8d:30:5d:8c:
eb:62:03:fa:b7:03:81:65:13:7d:dc:f4:af:aa:f0:6d:d6:cc:
6a:b8:5f:46:dd:fa:fb:b1:b9:8f:4f:85:c2:8e:96:ac:5e:69:
15:94:1d:aa:94:6c:5f:84:c2:39:26:df:81:b0:36:76:36:a9:
ed:a1:91:b7:ac:19:11:bb:31:b8:50:7e:36:61:c7:5e:b2:f8:
7f:fb:89:d4:b1:08:e5:42:7a:21:0c:86:74:d3:51:c7:74:47:
36:87:2e:73:18:44:11:0a:68:2b:f2:3c:e1:9a:d5:67:52:34:
93:fa:0d:51:c6:22:44:67:74:a5:b8:98:7a:d3:ab:f4:69:a5:
b5:e7:2f:ec:cd:59:b4:2d:e5:da:54:45:ca:3c:59:f7:16:7a:
60:ba:2b:53:ac:22:73:a9:8d:0e:38:6e:f9:dd:14:4e:48:fb:
d4:72:8e:1f:ca:54:cc:91:5c:26:34:d5:8f:0e:82:59:aa:72:
70:ac:9c:34:3c:35:0d:27:a5:1a:74:9c:d2:b1:4e:ec:67:1a:
03:83:63:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:54:47 2025 by rpki-client