Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136332e302f32342d3234203d3e20313937353238.roa
File: 34352e3134362e3136332e302f32342d3234203d3e20313937353238.roa (raw, json)
Hash identifier: Ebzg/MjqohTGeKwDaLunRaMiyaIF5yHH/QdRNJ9uULY=
Subject key identifier: 79:BA:57:49:A4:CD:C0:F8:74:D3:1E:DB:F4:5E:61:D6:00:1B:5F:03
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: FB9AFB7739B817B7E5452BA36430D74D32B818
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136332e302f32342d3234203d3e20313937353238.roa
Signing time: Fri 17 Jul 2026 14:40:54 +0000
ROA not before: Fri 17 Jul 2026 14:35:54 +0000
ROA not after: Fri 16 Jul 2027 14:40:54 +0000
asID: 197528
IP address blocks: 45.146.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
fb:9a:fb:77:39:b8:17:b7:e5:45:2b:a3:64:30:d7:4d:32:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Jul 17 14:35:54 2026 GMT
Not After : Jul 16 14:40:54 2027 GMT
Subject: CN=79BA5749A4CDC0F874D31EDBF45E61D6001B5F03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:e0:d7:bc:9c:db:c5:6f:c7:de:dc:4c:99:
4c:54:e3:21:ab:67:02:14:30:aa:f1:55:cb:fa:4a:
8d:61:f8:b0:57:cc:9e:bd:fc:0e:62:74:ca:10:4d:
2a:0b:5a:42:e1:29:5d:79:d0:85:f6:a4:b2:41:d2:
0a:b1:59:29:54:c1:74:df:f3:63:24:02:4c:90:cd:
63:72:f3:3d:46:b8:2e:15:10:3f:a2:a7:1c:6c:cf:
62:0c:d4:8b:9c:5b:62:ff:b9:51:3d:f2:62:9f:bf:
79:80:08:c9:f7:52:c6:69:e6:bf:d4:54:a6:ac:a0:
55:43:21:d8:b9:a3:25:9f:e5:9c:1e:36:69:f7:cb:
b9:60:55:2e:55:f5:22:7a:8a:e7:e1:05:19:ce:b0:
28:c8:1d:27:07:b4:73:c2:b5:0e:a5:37:81:9c:84:
42:2a:aa:b9:5a:15:16:74:14:a7:b2:89:10:bd:04:
d9:e5:46:b6:e2:26:c3:c7:da:e6:cb:ea:14:bf:3b:
e2:3e:6e:ba:99:67:0f:b2:43:fb:0d:a8:ae:b3:72:
18:42:df:e4:e8:3f:eb:f4:ff:d7:7b:8b:48:44:5e:
a2:6c:94:a5:f4:e5:e6:b7:d9:e9:e2:9e:dc:67:03:
ed:7b:42:79:55:29:1e:fb:5c:78:c0:14:4c:2a:de:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BA:57:49:A4:CD:C0:F8:74:D3:1E:DB:F4:5E:61:D6:00:1B:5F:03
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136332e302f32342d3234203d3e20313937353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.163.0/24
Signature Algorithm: sha256WithRSAEncryption
48:41:d0:2b:57:5b:74:0c:1f:5d:69:a8:49:d9:09:79:5c:5e:
d0:3a:f4:63:32:4f:1d:16:f3:e6:5a:29:23:9f:f6:45:5f:fb:
e4:0d:11:b7:f8:53:09:d1:58:e2:5e:c5:d9:14:46:fb:8d:a9:
af:3b:af:fe:08:1e:7b:54:ca:75:8e:a2:73:10:22:cf:6c:54:
57:2e:8b:6c:f2:50:82:7e:07:38:bd:bd:a1:77:8c:e8:9a:1e:
7b:2f:1a:94:2c:10:2b:f8:64:ec:d7:1e:74:44:77:59:08:bc:
5e:c3:df:c7:ff:78:2a:28:ec:b1:a8:c4:01:a6:fd:1d:29:b0:
0d:a4:8e:c9:16:e2:07:5b:50:5c:ef:db:d3:ed:3d:0d:5d:5d:
a6:2c:d7:20:f6:63:82:d5:45:b6:01:73:fb:0c:24:f1:29:43:
b6:f7:b5:cc:4f:7c:0d:31:27:2c:45:4b:a8:5d:94:12:b5:1c:
96:76:40:93:5d:2a:54:c6:98:3e:b8:c7:0f:c3:3e:18:8f:b9:
2c:23:0f:07:a3:2a:a4:76:24:27:13:e9:6d:90:7b:43:0a:d5:
39:ab:76:35:0d:31:0e:67:66:09:14:32:fa:ab:72:a2:f5:e8:
ff:f9:84:05:b4:e6:a6:58:6a:ab:03:07:39:50:5b:ab:64:bc:
95:84:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:15 2026 by rpki-client