Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e20323038343833.roa
File: 34352e3135352e3135392e302f32342d3234203d3e20323038343833.roa (raw, json)
Hash identifier: ilBIMrHhv5fJxR68Q3ScyrY/e5bE+4XoF9/6ix8lnYc=
Subject key identifier: 8A:D7:30:85:C1:F1:34:F2:71:1B:7E:30:73:0A:FC:19:C4:7C:32:EF
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 456CE96988A45420DA1DEA506163D5467460822D
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e20323038343833.roa
Signing time: Mon 01 Jun 2026 13:47:20 +0000
ROA not before: Mon 01 Jun 2026 13:42:20 +0000
ROA not after: Mon 31 May 2027 13:47:20 +0000
asID: 208483
IP address blocks: 45.155.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 07:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6c:e9:69:88:a4:54:20:da:1d:ea:50:61:63:d5:46:74:60:82:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jun 1 13:42:20 2026 GMT
Not After : May 31 13:47:20 2027 GMT
Subject: CN=8AD73085C1F134F2711B7E30730AFC19C47C32EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:3e:11:28:85:ea:b5:b9:e4:dc:1d:7d:cf:
52:52:8c:2d:f1:d0:06:a6:73:29:27:90:39:97:00:
58:13:5d:10:ac:5c:9d:2f:ca:73:78:c5:7e:a5:f0:
17:80:7e:ae:c7:42:3a:88:52:6f:03:60:d5:d6:17:
3e:62:1b:ee:36:14:7b:af:a5:0a:24:49:72:e3:f7:
3d:d6:8a:65:ec:dd:fa:5f:af:9e:d8:75:cd:a8:41:
5e:4a:b6:9f:97:0d:2f:21:b9:e3:ec:3a:88:d7:88:
9a:9e:b6:10:43:2f:69:d2:df:7b:a4:14:a9:2d:98:
87:50:e4:15:e2:62:8c:9a:87:cb:8b:6e:28:25:4c:
81:10:75:e4:52:38:3e:45:74:93:95:af:d7:43:63:
3e:bc:47:a2:ac:92:d6:8d:55:b9:40:90:8d:f0:00:
07:43:35:ac:e8:ac:f5:99:4a:49:2b:c7:d4:37:8f:
16:7e:d3:d0:e7:c5:90:5e:c2:0b:ae:9a:6b:8c:68:
5f:85:4e:d0:45:aa:55:c0:20:ce:9e:18:c9:0e:e0:
c1:3c:53:3b:3d:ff:fe:fa:31:e5:2b:7d:6c:63:ff:
2a:df:8a:7e:9a:5a:7b:ab:14:4f:92:9d:ba:cc:a9:
b0:36:99:ce:0c:5f:85:17:e0:14:8b:a8:98:bf:a0:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D7:30:85:C1:F1:34:F2:71:1B:7E:30:73:0A:FC:19:C4:7C:32:EF
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e20323038343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.159.0/24
Signature Algorithm: sha256WithRSAEncryption
97:49:a3:6e:b9:6d:41:d9:9b:2f:4b:39:a2:3d:83:b2:c1:74:
fc:e9:4c:0d:29:53:45:bb:3b:c8:93:08:1b:c8:c7:42:f0:26:
f8:65:c7:5f:ea:a2:7f:13:45:d5:cf:b0:4b:af:fe:e7:11:e0:
a2:dc:e9:18:50:a7:7c:9c:c1:40:38:21:ce:3a:5d:d5:bb:56:
c9:25:5f:6b:1e:ca:91:c5:e4:b1:69:af:d9:be:c3:bd:b0:e1:
ca:4e:fa:e9:2a:d3:e5:0c:05:17:0b:1d:ca:10:ad:b3:bb:76:
f6:ac:c2:97:54:2f:45:b7:a2:d0:b0:bf:1c:8c:93:c6:b5:61:
18:c1:aa:5f:83:eb:58:96:f1:5c:a7:d0:a2:26:e2:1e:47:0f:
83:3d:bf:ab:0d:13:f7:7e:e7:cb:46:bd:0f:e8:b1:32:06:f8:
11:af:cf:07:af:32:82:91:c1:14:a2:4f:3d:11:c5:c5:1a:84:
0b:07:4a:e7:02:05:b8:11:90:07:20:a9:38:4f:72:c1:be:15:
43:a8:99:3d:98:ef:68:71:18:ea:20:25:18:5a:24:44:2d:e8:
3f:28:e8:c5:4f:14:02:a7:40:64:c2:a5:5d:56:47:cb:f7:de:
da:60:8c:42:78:6e:b1:ab:a6:ad:29:de:ab:ea:71:bd:2f:54:
a3:0c:48:ce
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIURWzpaYikVCDaHepQYWPVRnRggi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNjA2MDExMzQyMjBaFw0yNzA1MzExMzQ3MjBaMDMxMTAvBgNV
BAMTKDhBRDczMDg1QzFGMTM0RjI3MTFCN0UzMDczMEFGQzE5QzQ3QzMyRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ID4RKIXqtbnk3B19z1JSjC3x
0AamcyknkDmXAFgTXRCsXJ0vynN4xX6l8BeAfq7HQjqIUm8DYNXWFz5iG+42FHuv
pQokSXLj9z3WimXs3fpfr57Ydc2oQV5Ktp+XDS8huePsOojXiJqethBDL2nS33uk
FKktmIdQ5BXiYoyah8uLbiglTIEQdeRSOD5FdJOVr9dDYz68R6KsktaNVblAkI3w
AAdDNazorPWZSkkrx9Q3jxZ+09DnxZBewguummuMaF+FTtBFqlXAIM6eGMkO4ME8
Uzs9//76MeUrfWxj/yrfin6aWnurFE+SnbrMqbA2mc4MX4UX4BSLqJi/oAt3AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUitcwhcHxNPJxG34wcwr8GcR8Mu8wHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzEzNTM1MmUzMTM1
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzgzNDM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtm58wDQYJKoZIhvcNAQELBQADggEBAJdJo265bUHZmy9LOaI9g7LBdPzpTA0p
U0W7O8iTCBvIx0LwJvhlx1/qon8TRdXPsEuv/ucR4KLc6RhQp3ycwUA4Ic46XdW7
VsklX2seypHF5LFpr9m+w72w4cpO+ukq0+UMBRcLHcoQrbO7dvaswpdUL0W3otCw
vxyMk8a1YRjBql+D61iW8Vyn0KIm4h5HD4M9v6sNE/d+58tGvQ/osTIG+BGvzwev
MoKRwRSiTz0RxcUahAsHSucCBbgRkAcgqThPcsG+FUOomT2Y72hxGOogJRhaJEQt
6D8o6MVPFAKnQGTCpV1WR8v33tpgjEJ4brGrpq0p3qvqcb0vVKMMSM4=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:03:58 2026 by rpki-client