Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3233203d3e20323133303031.roa
File: 34352e3134362e3136302e302f32332d3233203d3e20323133303031.roa (raw, json)
Hash identifier: J60EsWIeYN4a4peosqQOm0lgQhTjR5G5qC6zOtaqQT0=
Subject key identifier: C6:FF:41:69:99:59:57:F6:7A:6A:89:DD:E5:40:2D:9A:93:70:BD:C7
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 7EF67B3384702A042383DAA1C6F554344A61B288
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3233203d3e20323133303031.roa
Signing time: Sat 04 Jul 2026 20:15:18 +0000
ROA not before: Sat 04 Jul 2026 20:10:18 +0000
ROA not after: Sat 03 Jul 2027 20:15:18 +0000
asID: 213001
IP address blocks: 45.146.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f6:7b:33:84:70:2a:04:23:83:da:a1:c6:f5:54:34:4a:61:b2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Jul 4 20:10:18 2026 GMT
Not After : Jul 3 20:15:18 2027 GMT
Subject: CN=C6FF4169995957F67A6A89DDE5402D9A9370BDC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:a9:00:ef:5b:b4:95:b5:e6:28:84:32:d5:
8f:50:32:d5:55:5a:cc:96:6a:27:7d:a8:63:97:5f:
c4:5f:68:af:ac:aa:83:1e:ea:3c:0e:b7:69:e4:c0:
c7:ec:fc:4b:82:64:65:63:56:ff:42:c1:a2:a9:cc:
2b:b7:37:05:84:ff:ea:1c:f5:d1:4e:25:36:19:e6:
b8:58:5a:04:57:cb:65:71:c5:ee:f9:94:ec:2b:44:
e7:34:14:67:1f:52:8f:84:0e:7b:16:73:3f:1f:02:
8d:7a:0b:09:cf:cc:37:5b:59:48:cf:86:f4:d1:5e:
e9:61:31:33:f5:f6:03:a3:22:c0:b2:98:c6:29:6e:
cf:b1:81:3e:0b:db:b1:db:81:52:c7:92:a8:99:57:
45:6d:0e:ef:ac:3b:38:34:0b:dc:a4:83:cf:04:68:
b6:66:6e:34:0c:5f:42:67:b8:b3:0a:72:a6:b0:16:
7f:58:68:9a:b0:c8:a6:7a:72:ab:be:a5:a9:68:6d:
08:d6:1d:a6:b1:0d:61:49:65:f2:59:a8:e5:c0:5d:
42:e7:da:47:8d:4d:19:8b:2e:99:e1:55:83:5b:48:
74:b3:0b:63:90:83:3a:60:f2:33:22:66:44:c3:23:
c4:49:2a:82:88:26:ee:58:e3:db:18:27:15:c9:60:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FF:41:69:99:59:57:F6:7A:6A:89:DD:E5:40:2D:9A:93:70:BD:C7
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3233203d3e20323133303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.160.0/23
Signature Algorithm: sha256WithRSAEncryption
42:92:a7:15:21:94:76:74:b7:2f:87:4a:58:2a:04:67:26:3a:
91:15:05:48:7b:ff:25:72:df:05:c1:ad:59:5f:63:5f:b7:fb:
70:7b:f8:d1:37:84:3b:7b:85:0f:a4:66:d6:5a:f2:8e:b6:7b:
98:ae:c8:5e:97:84:1b:74:6a:17:c3:8d:af:bf:9c:98:9e:19:
95:00:45:e4:6b:75:7f:50:69:8e:a2:ca:82:7e:a3:cf:5b:33:
ad:ce:89:5b:c3:19:da:0c:23:19:f5:43:44:3e:ad:b0:08:63:
1d:02:5a:f5:9d:9a:03:69:46:1b:bb:a0:ea:85:ee:c1:88:78:
de:0a:13:f2:26:c3:c2:fb:5e:23:bf:73:ad:c6:38:e8:67:32:
51:d5:c2:be:45:b4:4d:f7:2a:02:6e:28:32:fa:8c:46:3a:c4:
91:3c:ea:1d:be:6b:ba:71:01:64:e8:43:04:03:61:b6:6b:a1:
0c:d1:21:df:59:83:c4:40:8a:0a:79:75:8c:11:20:48:9b:c3:
54:02:2a:54:69:33:7a:7b:14:d4:f8:b4:db:6b:d7:09:20:24:
d9:28:2e:b9:dc:e2:3d:34:be:16:90:0b:73:ca:0b:26:74:50:
9c:d1:24:00:56:00:d7:ac:fb:c0:21:4b:0a:1d:28:d2:b7:3e:
d1:60:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:54:52 2026 by rpki-client