Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32342d3234203d3e203536363535.roa
File: 34352e36352e3131362e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier: B4V9KT8TOSBrqjG4YUKJQxng2FjARDGJuF0jIu/cAq8=
Subject key identifier: EA:6C:4F:31:53:54:30:B7:FC:DD:21:66:C6:A0:2D:FD:6D:F9:AA:66
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 76D1FE9107AA8C166C3F82937AA70DE8D6945475
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32342d3234203d3e203536363535.roa
Signing time: Tue 18 Aug 2026 12:11:30 +0000
ROA not before: Tue 18 Aug 2026 12:06:30 +0000
ROA not after: Tue 17 Aug 2027 12:11:30 +0000
asID: 56655
IP address blocks: 45.65.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 08:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d1:fe:91:07:aa:8c:16:6c:3f:82:93:7a:a7:0d:e8:d6:94:54:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 18 12:06:30 2026 GMT
Not After : Aug 17 12:11:30 2027 GMT
Subject: CN=EA6C4F31535430B7FCDD2166C6A02DFD6DF9AA66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:0f:ad:4d:4f:62:c5:02:af:3a:37:b6:8a:
03:c1:f5:b1:82:3f:e9:86:25:7b:a7:52:63:b1:b8:
c1:97:06:fe:81:77:03:6b:56:26:06:03:ca:df:76:
44:a3:ac:64:cb:e9:c8:d1:fe:e2:75:d7:b4:42:71:
ba:2d:4f:af:cb:32:a8:e5:00:be:81:a1:c5:27:25:
7f:76:4c:5c:aa:16:ba:62:fa:c9:d5:7a:e6:d5:a1:
ca:50:0f:aa:2d:f9:3e:35:73:d3:b0:af:fb:48:2c:
a8:fc:4c:77:c0:ec:a5:56:11:c7:75:f1:5d:0f:91:
69:c6:8b:3c:0c:51:53:21:a7:ee:a0:93:00:aa:3a:
02:1c:bf:e0:0f:45:2e:50:5b:5e:50:36:a8:4a:57:
2d:f1:ac:36:22:2e:c4:91:4c:1a:bf:71:94:ff:bc:
df:25:34:9d:cd:a1:f7:07:71:95:ad:66:b8:d1:42:
81:39:1f:89:5e:4d:f3:5c:da:ce:aa:04:45:c2:80:
74:91:64:14:ec:19:5d:c5:7b:07:58:a4:c2:9f:2a:
62:4b:ab:7f:4b:f5:e1:41:c5:ca:37:7f:c1:9d:24:
de:2e:a0:b6:dd:33:3e:64:2e:8a:fa:38:1c:40:dc:
38:78:df:a0:e5:95:12:be:85:81:cd:0b:8a:a7:90:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6C:4F:31:53:54:30:B7:FC:DD:21:66:C6:A0:2D:FD:6D:F9:AA:66
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32342d3234203d3e203536363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:65:74:1d:2c:4f:4a:89:ad:21:e1:f4:ae:51:14:91:e4:c7:
d8:0f:f4:9e:76:6f:f0:b1:fb:bb:9f:79:c2:4e:8c:f9:6c:30:
68:6c:a4:a8:c5:04:ce:6b:91:ea:62:63:73:26:db:45:be:18:
d9:9e:b4:85:1b:6b:b1:3e:5b:84:03:76:3d:3e:bc:d4:ae:b4:
d0:d8:63:20:bf:d2:ff:44:2b:7b:67:f5:ee:90:24:dc:6e:a7:
92:cb:a5:29:f1:c1:aa:9b:e7:2a:49:c7:08:d5:13:c8:40:40:
10:fa:23:81:90:22:58:4e:5a:aa:81:fa:4e:47:ad:aa:18:73:
38:30:30:82:52:c3:0f:49:4c:f9:1f:ef:34:50:5b:02:bd:6c:
31:91:d7:94:63:63:26:4b:a8:9b:cc:87:bd:0b:6c:b0:ef:ab:
21:14:59:66:b0:2d:e2:21:b1:69:b6:ed:d2:d6:5f:70:fe:8b:
5e:3c:6d:45:42:ee:7d:35:7c:04:18:ac:b1:05:a7:92:e7:9b:
45:f6:34:83:35:a8:35:a7:12:4e:15:ec:db:44:31:91:9a:98:
23:a5:49:30:b8:40:d1:15:64:16:1c:81:e2:bb:f6:5a:b2:33:
53:de:d3:d6:f1:0a:6e:0c:32:e9:bb:a3:d2:fe:33:7c:58:db:
f6:6a:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:34:04 2026 by rpki-client