Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136332e302f32342d3234203d3e203338313336.roa
File: 34352e3134362e3136332e302f32342d3234203d3e203338313336.roa (raw, json)
Hash identifier: 2UoYMc+T3VQ81nJuKfdlMgklJP2lCeK6kVAd1Zef4f8=
Subject key identifier: 90:C9:54:9B:25:4A:3B:14:E9:04:D4:28:26:80:D3:BF:B6:E7:34:CA
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 701DC634AD67F8474D2408853276370BED9A4581
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136332e302f32342d3234203d3e203338313336.roa
Signing time: Mon 18 May 2026 15:14:14 +0000
ROA not before: Mon 18 May 2026 15:09:14 +0000
ROA not after: Mon 17 May 2027 15:14:14 +0000
asID: 38136
IP address blocks: 45.146.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:1d:c6:34:ad:67:f8:47:4d:24:08:85:32:76:37:0b:ed:9a:45:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: May 18 15:09:14 2026 GMT
Not After : May 17 15:14:14 2027 GMT
Subject: CN=90C9549B254A3B14E904D4282680D3BFB6E734CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:c4:6e:59:b1:5a:c2:e6:47:7e:6c:11:ac:
cf:c4:85:cc:b5:dc:19:b7:ae:9a:93:72:be:90:ad:
52:cb:c4:93:33:b9:a2:09:0e:50:91:7c:bc:f9:c8:
1f:59:37:9f:d8:bd:68:3a:5a:ad:4b:51:12:bb:32:
1f:d0:9a:7b:4f:30:29:64:6d:a8:13:e0:59:c0:c5:
f6:7b:be:2d:a3:dd:6c:a6:71:08:2a:b2:02:50:89:
95:0b:47:55:a7:bb:4a:54:f9:fc:67:aa:35:d1:cc:
48:a0:54:2e:f7:79:51:b1:ec:8d:78:68:a6:d1:ad:
3c:58:b3:b6:00:68:cb:e7:59:00:31:36:ef:19:2b:
6e:f3:31:e1:8b:0c:4d:e3:5d:cf:42:93:e1:d1:f0:
c5:bd:f3:18:1a:18:b0:a9:5a:05:aa:6f:c3:66:80:
ce:7b:22:38:4f:1c:7c:57:af:b4:54:a7:f3:60:e1:
29:a7:a7:7d:b4:1f:20:54:05:10:e4:38:e0:8c:1a:
49:2f:2f:1b:71:e8:46:7b:5b:fb:6c:a3:f4:6f:78:
85:c4:52:a5:bc:2f:2c:bd:6b:c1:b3:e6:b4:d2:eb:
4f:07:0d:c7:2a:27:bd:87:81:18:a3:ec:38:f8:00:
32:ea:e9:a0:d4:a3:61:27:c8:87:9f:fb:ec:12:18:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C9:54:9B:25:4A:3B:14:E9:04:D4:28:26:80:D3:BF:B6:E7:34:CA
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136332e302f32342d3234203d3e203338313336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.163.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3c:88:87:cd:08:e1:84:e0:8a:f7:b6:2e:c9:7f:8b:e4:63:
23:83:38:38:b4:db:77:23:c7:e9:51:a8:c1:84:2c:c7:20:be:
cf:9c:61:49:11:75:d3:de:5a:a2:36:91:e4:f5:05:47:57:fc:
89:e6:8b:48:a1:0f:a4:6a:91:de:3e:9e:c8:ad:68:ab:8f:26:
35:87:b0:b7:f3:a6:77:53:45:3a:99:bc:cb:78:f9:ae:96:f4:
c4:2d:3d:9f:7d:2c:74:9b:dc:35:27:23:22:4d:07:43:ec:1c:
27:59:47:a2:24:e7:31:6c:d8:9f:c8:57:e0:69:e5:a6:ee:ae:
cd:aa:4b:bf:7e:e1:c4:fe:02:07:b6:51:58:e1:f2:dc:c3:cf:
d9:2b:3f:5a:43:94:1d:7a:c8:4c:50:db:83:fb:0b:49:06:c1:
bf:72:1a:9b:3a:6e:74:bd:88:e6:8d:54:49:18:dd:57:7e:fb:
d0:7c:06:ca:33:d5:e0:f3:ac:d4:14:0b:1c:4c:47:a6:e1:cd:
42:df:87:fc:7c:3d:ef:26:78:ce:b4:bc:39:cc:5b:4e:32:90:
5e:d3:55:8e:f5:b3:fd:68:1f:b4:7f:e8:7c:e7:bc:13:e1:6d:
2c:38:d0:73:16:1a:83:ae:67:24:63:a9:9f:05:8d:52:10:84:
2f:41:8f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:45 2026 by rpki-client