Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32342d3234203d3e20313530323933.roa
File: 34352e36352e3131362e302f32342d3234203d3e20313530323933.roa (raw, json)
Hash identifier: /j+8OtteiuBCZIvL+Pc+NDoThUxl9zXgcoCpGu6lUlI=
Subject key identifier: 5D:6F:47:48:6A:D8:D0:8A:9D:04:9A:47:30:F3:3B:E0:7B:2A:DF:19
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 2AF523D5F05869FA56359251732DF4D8002AE515
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32342d3234203d3e20313530323933.roa
Signing time: Fri 27 Mar 2026 09:14:00 +0000
ROA not before: Fri 27 Mar 2026 09:09:00 +0000
ROA not after: Fri 26 Mar 2027 09:14:00 +0000
asID: 150293
IP address blocks: 45.65.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f5:23:d5:f0:58:69:fa:56:35:92:51:73:2d:f4:d8:00:2a:e5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Mar 27 09:09:00 2026 GMT
Not After : Mar 26 09:14:00 2027 GMT
Subject: CN=5D6F47486AD8D08A9D049A4730F33BE07B2ADF19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:9a:47:33:c9:0e:4e:4e:55:dc:45:b1:00:
ea:85:b0:09:53:55:97:c9:85:b5:24:3b:3f:5a:89:
bd:af:3d:54:68:88:70:0a:1d:2c:6b:8c:0e:47:53:
7c:1d:77:e8:03:05:c0:b9:1a:5b:c0:9b:21:48:4b:
22:de:2f:3e:92:86:2b:33:51:45:3a:0b:02:35:24:
1f:9f:76:5b:c1:14:85:d4:17:36:fc:a1:93:03:1e:
3b:10:f3:d0:cf:4d:55:19:39:81:b1:56:32:8f:58:
a2:b7:c3:79:48:24:a4:a4:44:35:64:70:d3:40:55:
43:d7:b3:14:f7:06:63:0a:56:bf:b6:bd:7b:d0:f1:
c0:70:c7:9d:6a:c9:09:f2:25:50:74:c4:45:77:28:
a8:a7:e8:f6:af:97:f1:23:cc:cc:d7:f9:c9:eb:a4:
f1:29:c7:df:2a:fd:53:cc:d9:86:16:04:aa:ab:65:
93:93:1a:2c:35:d0:25:31:4b:d0:f5:2e:59:f3:ff:
96:61:03:7d:1a:33:ec:d3:2f:c3:0e:dc:96:cb:c1:
4a:f2:ec:58:dd:ed:4a:5c:7f:e6:c4:a4:47:39:b1:
94:b3:3c:d1:7f:98:2d:7a:53:e7:fa:6b:16:89:3f:
df:13:84:52:c4:d7:bd:0c:1d:45:39:b9:69:53:3e:
39:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6F:47:48:6A:D8:D0:8A:9D:04:9A:47:30:F3:3B:E0:7B:2A:DF:19
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32342d3234203d3e20313530323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/24
Signature Algorithm: sha256WithRSAEncryption
99:00:1d:07:2c:62:6e:1c:2d:26:04:17:e1:41:b7:ac:91:70:
4a:03:4e:9b:c0:4c:1d:63:af:be:36:9e:6c:61:3e:2c:88:33:
c3:a7:6d:da:e2:da:db:03:03:bc:be:0e:05:64:6f:ec:5a:06:
46:65:c7:a7:ac:c4:7d:41:2f:7c:ed:01:d4:5a:4d:73:f3:91:
b6:70:18:b7:6b:22:b9:24:97:c8:5b:6d:c3:9b:27:5e:0c:d8:
7f:7e:d1:c2:77:b1:a0:44:7f:42:d8:dd:5d:15:80:ef:90:3e:
3f:75:c9:ba:af:d8:22:f3:b5:f2:79:2e:5a:bf:70:fc:2d:7a:
15:00:43:be:63:0a:60:71:99:d7:c5:1c:4b:06:a5:2e:46:22:
9f:fd:ba:e6:0e:a7:37:d6:b7:16:b1:01:6c:12:eb:9f:d5:ac:
07:cf:13:5d:7a:3d:71:2a:f4:e2:48:42:60:28:a3:7c:be:a9:
9a:9a:f0:5b:59:6f:09:9b:42:2f:b6:f3:63:27:6b:0b:f9:a3:
04:04:b8:a6:06:f7:93:af:21:e3:b0:9c:cd:cf:cd:18:82:0a:
36:1d:46:39:4f:db:95:0e:6a:8b:14:01:82:49:19:c2:ee:ac:
1a:08:a7:42:25:35:35:42:fe:a6:ad:d2:d1:e5:eb:2a:b0:7e:
90:79:9a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:33:39 2026 by rpki-client