Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131382e302f32332d3234203d3e20383334.roa
File: 34352e36352e3131382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: OdBouuBiFXX8/od7q4L7/xF8HuPGJ+Wo9PCSonUMaPo=
Subject key identifier: 74:B5:38:26:58:89:86:F4:52:F8:71:65:D0:2A:53:46:AE:9D:CD:D9
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 5F2C749C2451617BD2C5198B806710FD2E9FD489
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131382e302f32332d3234203d3e20383334.roa
Signing time: Thu 15 Oct 2026 06:57:16 +0000
ROA not before: Thu 15 Oct 2026 06:52:16 +0000
ROA not after: Thu 14 Oct 2027 06:57:16 +0000
asID: 834
IP address blocks: 45.65.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2c:74:9c:24:51:61:7b:d2:c5:19:8b:80:67:10:fd:2e:9f:d4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 15 06:52:16 2026 GMT
Not After : Oct 14 06:57:16 2027 GMT
Subject: CN=74B53826588986F452F87165D02A5346AE9DCDD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:3d:ef:31:58:ce:f0:e5:0b:f2:0b:47:63:
42:41:d5:b0:3f:93:89:cf:1a:cc:3d:48:70:da:84:
06:af:7f:65:2d:47:d1:c7:fa:d6:d6:03:51:9d:61:
6b:fa:2f:91:3a:6b:47:c8:0c:51:33:2d:e8:f3:17:
f0:54:c3:c2:3e:ea:87:6d:46:75:3b:d8:7c:fc:41:
5a:45:a4:72:dd:e4:a7:0a:83:54:39:20:13:db:dc:
49:6b:13:ea:3e:a6:23:25:5c:a9:02:d6:af:e2:6a:
3b:69:f8:c0:82:8e:ed:bd:ad:49:dd:2e:0f:c8:f0:
d4:2d:79:b8:6f:1a:dd:67:11:5a:b9:47:c8:ae:61:
b2:64:ed:24:ec:14:5e:39:a4:b5:d7:52:c1:2f:0a:
06:75:c1:3a:12:b6:94:60:f7:5f:af:8b:7e:7b:f0:
9a:a0:44:c8:bd:56:87:42:03:da:03:c7:60:d4:c2:
14:b5:b9:97:4a:bc:86:ac:ab:66:8c:2f:31:30:1d:
cd:49:81:b5:16:df:c7:20:fc:3b:11:c5:b8:0c:69:
ba:1a:cb:e0:63:60:42:ae:ed:96:77:0b:3e:0d:5c:
26:ba:fe:31:b7:de:ab:80:79:00:f3:ee:ac:f6:ee:
9e:8a:fa:8d:c6:48:77:eb:26:15:40:73:4f:07:a9:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B5:38:26:58:89:86:F4:52:F8:71:65:D0:2A:53:46:AE:9D:CD:D9
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.118.0/23
Signature Algorithm: sha256WithRSAEncryption
25:3d:a2:20:3a:f2:ef:ea:5f:7d:91:bf:37:2c:fe:fa:d5:a2:
66:72:22:18:5e:6f:cd:8b:0e:9d:3b:c7:e1:1f:8c:10:7d:66:
f2:ce:df:03:f9:7e:ec:21:05:49:a3:95:09:12:45:26:e5:3f:
00:61:26:e1:30:6a:a0:da:7e:56:10:05:4c:f5:45:9e:7f:72:
6b:81:fe:98:c2:3a:12:f1:ef:42:44:65:a6:62:db:7f:eb:e4:
6e:02:35:52:e3:c5:66:8e:da:d7:6f:40:13:76:04:d5:a1:e8:
33:10:87:1d:32:27:ed:9b:a1:f9:af:9b:45:81:d3:64:fe:21:
2e:fb:6e:2f:28:05:d1:1c:b7:6d:23:99:c5:d5:97:0e:b7:1d:
63:a2:2e:3a:88:a6:26:57:44:ee:1c:e0:27:cd:33:17:e2:ac:
7d:3a:02:76:aa:bd:d1:61:dd:13:d2:3f:3c:ad:2d:d8:dc:51:
98:4e:30:5a:bf:84:6d:4d:98:e2:32:97:84:ca:e8:5e:f0:41:
16:4a:b8:54:84:7a:8b:53:6d:22:66:2f:06:af:d3:d5:49:eb:
5b:b9:7d:99:90:af:92:14:40:e6:9b:83:e6:ce:19:13:67:c2:
2f:b0:43:db:16:49:3d:1e:2e:12:df:f8:1e:9f:52:27:7b:78:
4a:1c:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:19 2026 by rpki-client