Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131372e302f32342d3234203d3e203136353039.roa
File: 34352e36352e3131372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: RY+hVs3ojfLhQ8EKkvS9mtxlsRvVhR5DL27ol36xE3c=
Subject key identifier: 6B:C0:52:8A:F6:36:73:74:12:74:3C:03:C0:62:1E:6F:4C:BA:26:AE
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 2F39D3B09A8DB622D79C237FF338C092DBF76DF4
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131372e302f32342d3234203d3e203136353039.roa
Signing time: Mon 30 Mar 2026 14:28:59 +0000
ROA not before: Mon 30 Mar 2026 14:23:59 +0000
ROA not after: Mon 29 Mar 2027 14:28:59 +0000
asID: 16509
IP address blocks: 45.65.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Apr 2026 10:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:39:d3:b0:9a:8d:b6:22:d7:9c:23:7f:f3:38:c0:92:db:f7:6d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Mar 30 14:23:59 2026 GMT
Not After : Mar 29 14:28:59 2027 GMT
Subject: CN=6BC0528AF636737412743C03C0621E6F4CBA26AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:c4:45:bb:5d:99:b1:a1:da:2e:f8:c5:2c:
fd:7a:d9:78:42:74:05:f8:58:2e:dc:32:2f:98:f0:
6d:46:a1:da:14:73:97:de:1a:c6:5f:33:8d:fa:1c:
7a:4a:13:35:0c:4a:14:75:83:74:dc:0b:31:88:27:
2e:3c:3e:de:55:7d:fa:83:fd:b2:8e:06:54:db:b4:
ba:65:06:cd:28:d2:59:0a:f3:f2:64:74:3a:7e:14:
bb:f6:52:ad:8d:b5:f3:c4:46:49:2d:15:f3:5c:66:
bf:0a:94:d7:01:8c:78:c2:40:ea:cf:a2:86:f4:25:
78:04:22:d9:91:f0:36:ad:de:e0:7a:46:18:d7:94:
1a:68:88:e0:9b:4b:7a:0c:ed:ae:1e:f0:07:fe:41:
b0:f1:8c:6e:d2:2b:c9:09:b0:fb:d1:51:77:4a:3f:
94:0f:7e:1b:7d:bb:2f:7f:0b:da:99:56:00:21:a4:
4b:c6:ea:8c:51:a5:78:e9:24:55:47:30:53:06:fa:
91:b3:16:98:bb:89:21:8b:bc:c9:19:b3:4d:25:6b:
7f:05:7c:f8:2e:af:6e:ba:b1:2c:eb:e6:4d:52:15:
21:31:93:63:ee:15:e7:71:60:83:1c:a9:df:06:35:
95:dd:9b:94:e7:61:27:b2:95:fa:24:c0:6e:7e:6d:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C0:52:8A:F6:36:73:74:12:74:3C:03:C0:62:1E:6F:4C:BA:26:AE
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131372e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.117.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a0:a4:50:01:b5:bb:5b:43:bc:d7:da:5c:c3:56:9d:d0:4f:
38:30:52:dd:d5:6b:8f:57:31:14:96:2a:02:2a:7f:45:9a:80:
ba:92:4c:5d:e0:c6:de:b6:26:21:80:99:ee:cd:43:1a:1b:8a:
db:08:e5:9b:4c:77:7c:3d:e2:51:ce:85:2a:ee:f5:74:6a:b8:
78:cb:55:62:36:80:e7:76:3b:13:2a:19:66:d3:8d:04:30:f8:
2a:b2:af:65:17:29:0c:fd:86:7f:79:a3:f6:0c:a4:3b:93:dd:
f1:a4:24:d4:89:13:a6:37:e2:cd:fc:37:c6:0a:11:a3:19:e9:
d7:26:39:38:6d:cc:13:75:5b:a8:ac:71:2b:0a:48:a0:c4:58:
82:38:59:60:65:cf:70:dd:82:f7:6c:84:f4:0d:64:b7:5f:1b:
ba:96:5c:6e:5f:73:7a:bc:44:69:36:a7:44:85:35:6f:48:bd:
0f:28:b8:a8:cf:8d:1f:11:0f:1c:bd:71:d7:a2:66:ee:bd:fa:
76:c7:04:17:39:d6:4e:35:26:1f:a5:d8:cc:c6:c5:c6:88:ab:
d5:04:a8:5e:d0:3f:d8:f4:d4:2c:66:23:9b:3f:8c:e3:35:c2:
5f:98:79:53:91:55:31:34:26:c6:8b:1b:7b:dc:4b:f0:27:9d:
84:07:0d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 18:11:17 2026 by rpki-client