Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20313432323430.roa
File: 34352e3134382e3134322e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier: MX4+h13RW7tGuijnH3XmhwBFG1/jLtvYlIgUhJ671Ls=
Subject key identifier: C9:AE:25:47:4E:23:0B:89:22:05:B3:53:69:86:8A:7A:79:3D:28:71
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 0DAC44C4BA417997475F3BF8FADEDB6E74723A1B
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20313432323430.roa
Signing time: Fri 14 Aug 2026 14:47:58 +0000
ROA not before: Fri 14 Aug 2026 14:42:58 +0000
ROA not after: Fri 13 Aug 2027 14:47:58 +0000
asID: 142240
IP address blocks: 45.148.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 08:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ac:44:c4:ba:41:79:97:47:5f:3b:f8:fa:de:db:6e:74:72:3a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 14 14:42:58 2026 GMT
Not After : Aug 13 14:47:58 2027 GMT
Subject: CN=C9AE25474E230B892205B35369868A7A793D2871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:9c:cc:c7:7c:ef:9f:46:a9:46:51:4f:b9:
4a:5a:4a:d1:db:80:12:f1:17:9b:1a:f3:0f:23:51:
45:0b:e8:7a:7b:e6:b8:57:c3:37:33:63:9b:5d:43:
68:ad:84:e3:f1:cf:97:42:7f:e1:dd:30:b6:2a:8e:
4b:3c:9b:58:16:26:36:97:39:02:29:ea:98:c3:34:
a1:6a:e1:3e:9d:e3:ab:f3:e0:63:01:a2:5f:1a:2c:
5a:99:5c:67:d4:bb:5a:28:2f:89:8b:b5:97:8a:8d:
a4:0e:04:45:74:ba:7e:c9:ec:eb:e6:3b:50:14:c6:
62:80:1b:55:d5:ff:94:62:7d:ab:32:27:6c:e6:b2:
34:cd:6c:2a:8e:5d:e6:a6:a9:a7:23:91:e2:3c:6d:
c3:b7:eb:9f:04:ca:48:de:aa:25:bf:1c:48:2f:08:
df:d9:19:4e:95:64:47:71:77:6c:e3:5d:6c:6e:1d:
1c:72:9e:c9:7d:74:a4:23:ed:53:ad:db:44:8d:13:
b2:6e:2f:22:fb:6a:16:be:a2:20:e3:57:6d:72:2b:
a7:8f:39:89:ed:7c:4d:df:c8:84:63:17:30:9d:e0:
b0:38:4f:85:c1:38:ee:54:84:c7:d5:68:2c:d2:3b:
24:6f:70:be:97:fa:69:0e:4f:00:6d:4e:40:f5:c5:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:25:47:4E:23:0B:89:22:05:B3:53:69:86:8A:7A:79:3D:28:71
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20313432323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.142.0/24
Signature Algorithm: sha256WithRSAEncryption
36:64:12:a2:bc:d1:f0:37:0d:72:ee:be:da:7d:9f:99:95:b4:
17:b8:b7:79:d5:9d:63:e4:99:3d:55:b0:bf:91:98:12:73:4d:
64:3b:ac:97:3b:89:28:e6:d4:2e:4f:b5:a1:44:3e:31:1d:16:
55:cd:85:5a:ae:3e:f6:98:b5:19:a8:05:af:b0:9d:19:d7:23:
28:81:d7:05:02:8d:0b:7d:5b:0c:ce:50:88:f1:51:b7:8c:8e:
12:ec:5d:87:39:45:cc:d5:84:d4:b8:80:ed:06:4b:99:a3:02:
a0:57:10:91:2f:c8:6d:ab:9d:27:a8:44:3e:fb:a4:4c:cb:97:
d4:8d:09:96:2d:42:c7:02:29:f7:de:d8:d9:e3:eb:6b:12:2a:
49:a3:54:8d:ec:d5:46:b4:3f:64:36:fa:2c:9e:91:58:6f:31:
02:90:9a:bd:a5:83:80:6f:c9:d1:74:03:ba:a6:b9:86:c2:c1:
c4:e6:65:d0:1a:ff:08:52:47:69:d8:3d:da:c3:d9:94:fc:37:
1d:de:54:82:85:d7:61:6b:e9:d1:ca:ea:84:14:14:0c:73:9c:
b8:36:e5:5b:36:fa:da:92:5b:8c:03:84:e2:89:ac:22:3d:89:
52:64:12:ae:f5:e0:fc:23:1d:b9:ee:31:0c:c6:20:22:8d:47:
5b:f2:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:37:34 2026 by rpki-client