Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20383334.roa
File: 34352e3134382e3134322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1bjRArPZsV36muAtUkbjRCqiAuC4/WkAREYOWhuA4/0=
Subject key identifier: 8F:E0:90:FA:2D:09:4A:1E:AE:00:C7:38:D9:A1:74:45:BF:78:35:2B
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 018045381C59E50BDB099FC17221F8EC78E0B9B4
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20383334.roa
Signing time: Sun 25 Oct 2026 08:12:39 +0000
ROA not before: Sun 25 Oct 2026 08:07:39 +0000
ROA not after: Sun 24 Oct 2027 08:12:39 +0000
asID: 834
IP address blocks: 45.148.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:80:45:38:1c:59:e5:0b:db:09:9f:c1:72:21:f8:ec:78:e0:b9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 25 08:07:39 2026 GMT
Not After : Oct 24 08:12:39 2027 GMT
Subject: CN=8FE090FA2D094A1EAE00C738D9A17445BF78352B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:9f:16:ba:ac:5d:86:85:c8:a6:4e:a0:db:
5b:67:37:01:34:3a:80:87:4a:d3:71:17:59:e0:9f:
d6:13:51:31:7e:76:6a:a5:11:8f:f5:c4:53:0b:f5:
48:03:d8:b9:cb:82:d6:20:a0:20:1b:88:89:9c:5d:
5b:21:ca:24:75:58:e6:53:67:72:ff:9a:f0:40:d1:
03:9d:16:ee:04:7b:74:03:88:40:ef:ec:d6:b2:56:
3f:7b:99:2e:da:84:16:e6:1d:79:a6:67:84:dc:ef:
6c:a6:ae:ca:c4:22:f5:3d:1f:a4:47:f6:e1:ee:f1:
35:b2:fa:0d:56:5a:75:b8:7c:c5:7f:ee:bf:96:d4:
fb:45:50:7b:6c:79:c8:ab:22:02:1d:64:2a:74:ad:
0f:f2:f1:3f:c1:c1:fd:09:72:31:22:f5:21:e9:95:
c1:3c:7b:3c:bd:42:00:e8:0c:e9:a2:69:e1:25:98:
a2:f1:0b:89:3b:d6:cc:5e:bb:c2:36:48:ce:36:d9:
b0:5d:3d:e2:cb:dc:aa:b7:9b:9b:e0:d9:88:ff:69:
13:a3:c3:9e:45:9b:66:56:93:94:7a:fe:82:e4:a8:
96:62:73:f5:c4:57:be:46:c6:c2:55:53:e5:ea:1a:
b9:3b:a6:43:f3:e3:21:cf:6d:39:92:9d:70:c8:1f:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E0:90:FA:2D:09:4A:1E:AE:00:C7:38:D9:A1:74:45:BF:78:35:2B
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.142.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:8b:b8:27:80:1f:69:0d:2b:da:be:8a:88:dc:52:5f:db:63:
12:3d:4f:3f:a5:c3:e9:85:2a:b5:5f:39:be:08:20:95:f6:98:
85:36:43:21:0c:4f:04:92:6b:e5:57:c9:75:86:c6:2e:55:d8:
79:f2:a3:34:e5:4b:17:3c:d1:00:5c:0e:9f:df:47:61:61:6f:
af:f7:a7:9f:17:49:94:51:f9:cf:3b:5d:ba:44:f6:a3:33:47:
03:1c:74:fe:ac:6c:ee:c2:cb:62:b5:d0:1e:49:ec:13:08:cb:
09:48:75:84:3d:0c:85:01:d4:31:ec:f1:e3:8a:a8:34:41:dc:
13:23:1c:0c:06:92:29:10:8e:51:81:33:12:b2:84:9f:c2:6e:
d3:ba:70:72:89:8a:95:11:53:e1:2a:52:32:be:ea:56:5c:1d:
7b:69:c8:c3:c7:02:79:00:60:20:89:12:a1:59:b8:a3:97:e1:
4f:7a:5f:a1:76:76:6f:85:75:be:f1:97:c9:31:a2:d6:7a:8c:
74:fc:b4:81:16:5c:df:22:70:dd:8c:b4:c9:b7:71:6f:66:04:
a2:9d:38:f5:8e:da:82:0c:1f:21:7e:ab:79:f3:1e:10:2f:77:
8d:43:b2:75:32:c0:4b:1a:8e:1f:a0:21:99:57:99:2f:4f:ce:
0c:c7:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:04:44 2026 by rpki-client