Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3235342e302f32332d3234203d3e2039333034.roa
File: 34362e3233362e3235342e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: dA2TQes6AQRhhJLumLAVFXIekeMV5FcJvKSsY0cTmuA=
Subject key identifier: B6:9F:CF:AE:F5:BB:C9:67:42:0C:AE:48:BB:89:78:04:F3:00:69:8F
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 209098A0D3B733648480915A8DFB1257D6B35007
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3235342e302f32332d3234203d3e2039333034.roa
Signing time: Thu 04 Sep 2025 10:40:04 +0000
ROA not before: Thu 04 Sep 2025 10:35:04 +0000
ROA not after: Thu 03 Sep 2026 10:40:04 +0000
asID: 9304
IP address blocks: 46.236.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:90:98:a0:d3:b7:33:64:84:80:91:5a:8d:fb:12:57:d6:b3:50:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:04 2025 GMT
Not After : Sep 3 10:40:04 2026 GMT
Subject: CN=B69FCFAEF5BBC967420CAE48BB897804F300698F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:02:84:60:be:5e:05:68:2a:a4:07:d5:3f:
a4:5e:4f:40:6c:aa:d8:fa:08:69:a0:fe:07:0c:5e:
c5:e0:a7:98:95:09:27:6d:c3:52:5c:50:71:09:f7:
2d:37:86:cf:17:30:72:33:6b:2f:73:86:42:db:46:
81:4d:0f:79:f0:52:20:38:0c:80:55:27:05:f4:af:
72:39:68:28:17:1d:33:21:d9:ec:e5:85:bb:07:b4:
33:f2:aa:df:20:ab:e5:27:e1:9d:80:2a:e2:e3:26:
69:c6:e5:97:ed:92:48:84:18:5e:27:20:73:15:88:
53:f3:9b:50:11:01:90:58:20:31:13:4d:83:11:ca:
23:1c:f6:b9:37:fe:a9:d1:d3:5b:47:58:3f:6a:06:
aa:4a:1c:ae:5a:59:74:18:b5:1a:03:3b:bc:a8:1f:
8f:21:7e:67:f5:8c:5c:c4:7b:d4:2c:22:e3:b8:df:
03:97:9e:3a:54:af:9d:01:76:5c:1c:25:64:23:69:
42:a4:44:46:9e:f5:98:08:01:c9:31:2b:99:01:d0:
00:16:98:e3:25:e4:63:9f:92:49:67:00:39:1d:fc:
7a:a3:08:d1:ac:72:e9:69:24:51:83:6d:a2:f2:79:
c1:63:81:98:b0:7d:bf:17:99:87:65:b6:e3:85:0b:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9F:CF:AE:F5:BB:C9:67:42:0C:AE:48:BB:89:78:04:F3:00:69:8F
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/34362e3233362e3235342e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.254.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:13:aa:34:ad:ec:e3:da:48:72:f5:17:b0:21:54:a3:c2:9b:
3e:bf:27:c3:54:16:66:d7:7d:04:c2:9f:65:d3:9a:54:b7:5b:
d6:e7:b4:2e:68:e9:cb:f6:52:98:25:b0:b9:a6:15:b9:b1:12:
87:c8:40:39:4b:c3:73:24:3a:1c:cb:6d:35:c8:d0:2d:6a:20:
4f:c7:eb:9e:dc:76:6b:bb:64:b1:f1:d1:c8:c2:47:71:65:f9:
9a:8f:3f:be:9f:4f:a2:bf:3d:dd:c8:1b:f1:9e:b5:ac:23:62:
dc:4a:ff:fb:66:21:81:9a:56:19:af:70:31:96:a2:3a:42:7a:
52:03:56:d9:70:b4:8e:4b:7c:ab:15:ea:4b:55:5d:10:62:a9:
f3:c1:35:70:b6:8e:3a:dd:d2:96:56:41:b3:3c:9c:11:60:31:
bc:4d:85:b0:38:ba:e1:0b:be:dc:09:c6:fb:2e:99:94:69:b3:
09:73:38:b1:b6:d8:fe:71:ea:4c:96:9e:1c:2d:d5:0b:94:fc:
12:f6:52:52:2f:c5:8a:d2:5c:23:70:49:62:24:e8:4c:b9:67:
df:0e:41:70:fa:2d:f2:51:e3:1b:c3:98:74:d3:0f:4f:b3:7f:
bf:43:02:d6:68:03:9f:51:3e:49:8f:a1:e3:c7:70:0c:b0:b0:
af:f2:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:54:48 2025 by rpki-client