Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa
File: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (raw, json)
Hash identifier: XTDJATGz+5Q73NiC1c/IBrS41alzR60OgjqgVHPK5mY=
Subject key identifier: 13:06:4C:8A:33:9C:D4:1D:9F:65:ED:E3:8F:75:B4:2F:E8:7F:0B:F2
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 333F2E5DF797FAA693EFD14AAC70B91E307A34A0
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa
Signing time: Mon 17 Aug 2026 09:49:30 +0000
ROA not before: Mon 17 Aug 2026 09:44:30 +0000
ROA not after: Mon 16 Aug 2027 09:49:30 +0000
asID: 216183
IP address blocks: 45.146.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:3f:2e:5d:f7:97:fa:a6:93:ef:d1:4a:ac:70:b9:1e:30:7a:34:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Aug 17 09:44:30 2026 GMT
Not After : Aug 16 09:49:30 2027 GMT
Subject: CN=13064C8A339CD41D9F65EDE38F75B42FE87F0BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:9b:66:32:77:a0:7a:ad:1b:88:d8:4f:48:
8b:74:5a:77:f8:ff:15:c9:c1:01:35:52:04:73:2d:
9d:19:5e:10:a1:09:98:e7:ba:00:4e:8f:37:a9:35:
40:fc:4a:70:64:3d:d6:e4:7e:ac:f3:44:f9:84:48:
9b:a0:9f:88:55:43:2d:cc:38:f1:54:ef:5d:66:10:
4a:d8:66:66:a5:ba:98:bc:68:28:83:2b:15:0a:14:
8f:17:1d:79:f0:31:92:38:44:63:0c:d0:de:80:e0:
ca:8c:00:56:38:a6:d6:77:6f:74:2b:50:5b:ca:77:
ab:c6:c1:5f:67:3d:c8:18:d1:67:fe:6d:88:75:d6:
1f:bd:00:f2:e4:5f:77:84:84:8c:e9:e7:da:ee:b4:
ac:84:9b:3f:3c:35:dd:c6:e8:9a:96:4c:b3:35:2d:
12:cf:29:50:2b:eb:eb:f9:33:79:19:31:67:c1:a2:
75:63:78:30:cd:45:8f:6a:d3:ff:8a:e0:41:e5:38:
75:5c:bc:ca:88:13:9b:b5:50:52:1c:f5:a1:ff:0f:
5d:8c:9c:8c:63:65:d2:ca:26:da:d0:61:d6:b6:0a:
d2:cd:4e:c6:72:91:2d:cf:2e:e2:da:3d:14:2d:bc:
bc:95:53:c9:f3:da:c1:09:66:09:ac:6d:d8:e9:ed:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:06:4C:8A:33:9C:D4:1D:9F:65:ED:E3:8F:75:B4:2F:E8:7F:0B:F2
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.163.0/24
Signature Algorithm: sha256WithRSAEncryption
19:29:a3:3e:83:0f:40:d8:9f:f8:29:54:5b:e2:8e:20:e7:a6:
8e:19:c2:a7:24:32:19:a3:f5:d2:48:0e:33:2d:12:20:44:3a:
dd:2f:e5:c3:39:87:9d:90:b8:20:45:84:1e:dd:e0:80:c7:fd:
8c:bd:2a:94:f2:0e:40:ee:1a:90:fc:b1:87:09:37:dc:1f:fa:
af:14:ed:98:a6:02:c1:c9:fb:86:93:ff:5f:af:90:0f:f7:b9:
85:2b:4c:2f:39:65:7b:46:cb:7e:ea:59:eb:45:50:4f:b5:03:
0c:82:b2:5c:6a:98:7c:91:79:98:e2:85:8c:bb:fb:5e:86:a9:
3d:82:80:68:60:a4:41:80:a8:be:80:8f:23:50:53:eb:9a:e8:
49:93:59:f4:5b:58:c3:c7:75:63:75:c6:04:52:bd:04:30:e7:
ca:54:49:58:11:d0:4a:c1:43:df:8f:86:53:9a:5e:32:bc:1f:
eb:48:bf:9f:f8:63:e2:dc:b7:bb:28:98:7e:3e:d3:22:fd:ff:
9e:e1:62:93:94:43:90:b9:fe:e2:ef:08:6d:18:e5:e9:01:97:
f6:d0:cc:20:01:14:e1:cb:84:97:9c:55:f2:1f:89:b0:84:3b:
fc:59:02:09:5e:f9:b2:1f:63:46:dd:01:72:b5:61:b1:f0:ab:
94:46:b4:cb
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUMz8uXfeX+qaT79FKrHC5HjB6NKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm
MjYwNzNjMzAeFw0yNjA4MTcwOTQ0MzBaFw0yNzA4MTYwOTQ5MzBaMDMxMTAvBgNV
BAMTKDEzMDY0QzhBMzM5Q0Q0MUQ5RjY1RURFMzhGNzVCNDJGRTg3RjBCRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XZtmMnegeq0biNhPSIt0Wnf4
/xXJwQE1UgRzLZ0ZXhChCZjnugBOjzepNUD8SnBkPdbkfqzzRPmESJugn4hVQy3M
OPFU711mEErYZmalupi8aCiDKxUKFI8XHXnwMZI4RGMM0N6A4MqMAFY4ptZ3b3Qr
UFvKd6vGwV9nPcgY0Wf+bYh11h+9APLkX3eEhIzp59rutKyEmz88Nd3G6JqWTLM1
LRLPKVAr6+v5M3kZMWfBonVjeDDNRY9q0/+K4EHlOHVcvMqIE5u1UFIc9aH/D12M
nIxjZdLKJtrQYda2CtLNTsZykS3PLuLaPRQtvLyVU8nz2sEJZgmsbdjp7TX9AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUEwZMijOc1B2fZe3jj3W0L+h/C/IwHwYDVR0j
BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz
NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K
Z2M4TS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmZlMmIyN2Et
MWVjNS00YWI3LTk3OGUtNmRhOWNmOWYzNzkwLzAvMzQzNTJlMzEzNDM2MmUzMTM2
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzYzMTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtkqMwDQYJKoZIhvcNAQELBQADggEBABkpoz6DD0DYn/gpVFvijiDnpo4Zwqck
Mhmj9dJIDjMtEiBEOt0v5cM5h52QuCBFhB7d4IDH/Yy9KpTyDkDuGpD8sYcJN9wf
+q8U7ZimAsHJ+4aT/1+vkA/3uYUrTC85ZXtGy37qWetFUE+1AwyCslxqmHyReZji
hYy7+16GqT2CgGhgpEGAqL6AjyNQU+ua6EmTWfRbWMPHdWN1xgRSvQQw58pUSVgR
0ErBQ9+PhlOaXjK8H+tIv5/4Y+Lct7somH4+0yL9/57hYpOUQ5C5/uLvCG0Y5ekB
l/bQzCABFOHLhJecVfIfibCEO/xZAgle+bIfY0bdAXK1YbHwq5RGtMs=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:30:52 2026 by rpki-client