Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32342d3234203d3e20383334.roa
File: 34352e36352e3131362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: dc4YSiDnHMmJrzk1Dd+66vbQ6B3zBgjybHduCh0xUh0=
Subject key identifier: 19:80:E7:60:C2:B8:F1:5B:E1:74:45:75:F8:CB:33:91:13:18:75:40
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 3FFFD4BE791C911C4006DE6905F00EB1C871A326
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32342d3234203d3e20383334.roa
Signing time: Mon 27 Apr 2026 08:53:53 +0000
ROA not before: Mon 27 Apr 2026 08:48:53 +0000
ROA not after: Mon 26 Apr 2027 08:53:53 +0000
asID: 834
IP address blocks: 45.65.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ff:d4:be:79:1c:91:1c:40:06:de:69:05:f0:0e:b1:c8:71:a3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Apr 27 08:48:53 2026 GMT
Not After : Apr 26 08:53:53 2027 GMT
Subject: CN=1980E760C2B8F15BE1744575F8CB339113187540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:53:49:12:98:4c:f4:ee:ab:d6:03:c4:1b:
67:b7:82:ae:1e:02:34:3f:bf:d0:e5:78:b5:39:32:
2e:99:fc:c8:e1:db:50:55:03:0b:18:62:85:84:45:
ca:76:c6:2d:cc:a1:10:56:9f:18:26:04:e2:f8:d7:
04:75:4f:b7:5f:1f:38:29:90:a5:0a:75:cf:59:5a:
96:54:4d:78:9b:31:54:19:a4:44:19:7e:80:e4:0c:
ce:39:d6:6f:25:9c:03:65:7e:58:4f:b7:4b:01:60:
6c:3c:c7:b1:e9:17:51:4f:7a:c1:45:eb:15:7c:bd:
6e:ea:04:43:b8:5e:ec:64:61:d9:93:68:e5:f7:73:
54:34:c0:ef:6c:1c:13:8d:77:36:f9:29:de:bf:56:
9a:fd:5b:ab:07:1c:75:32:c7:26:fd:4a:7c:93:29:
d6:3c:11:17:b0:d3:77:15:e2:fe:f9:68:75:d0:a5:
5b:08:53:2c:8e:a4:89:d8:58:00:d9:38:a1:57:ef:
29:f9:af:0f:c3:82:9f:bd:cb:7b:02:57:f6:1f:b6:
9a:78:b9:9e:ef:7c:a2:02:90:93:b7:b6:02:cc:51:
0f:29:4e:69:76:39:65:20:a7:27:c4:c1:fa:74:14:
ce:65:70:5a:7c:cf:d9:4d:ac:77:b9:7b:f6:3c:53:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:80:E7:60:C2:B8:F1:5B:E1:74:45:75:F8:CB:33:91:13:18:75:40
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:15:38:89:aa:97:20:78:9b:f4:15:b7:39:16:d8:e8:8b:98:
cc:f8:77:b2:8c:71:07:6b:17:7e:a2:a1:07:c0:16:d2:ad:10:
54:a6:69:7b:a1:fa:ad:43:65:4e:53:1a:03:f4:ab:ba:73:ff:
58:5b:d9:68:8e:8e:0e:79:8b:d4:e1:b1:15:7c:74:9d:99:3c:
3e:d2:b6:0c:76:eb:d4:10:6c:68:28:53:a6:10:1c:b2:ba:5d:
bc:5c:0e:ea:f3:f7:97:e3:63:e9:5c:c2:16:7e:ea:16:0a:37:
48:9f:11:11:d6:1d:46:5e:90:96:1b:63:c7:b9:3e:8d:89:d7:
36:d4:ae:5b:d3:8a:93:74:6a:16:cb:9c:db:c4:aa:4b:c3:2e:
ea:03:1a:33:3e:1f:f4:f2:d4:ec:db:15:7b:7b:05:ea:09:4f:
13:02:f7:66:f8:cd:54:ac:5c:06:74:c8:ef:c4:78:71:51:2d:
38:39:e2:e7:5e:dc:82:08:84:79:f2:1c:b8:ce:d8:32:d0:64:
d8:c2:b9:e4:85:47:bd:26:af:6d:cc:f7:4f:e2:b7:6d:28:83:
6a:e0:67:9a:f8:f1:1c:f9:c9:92:59:8c:85:5e:ed:6a:ee:6d:
03:07:b6:b1:f4:ee:7b:ec:cb:2c:b3:d3:20:46:0f:87:42:0c:
53:c3:5b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:02:07 2026 by rpki-client