Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131382e302f32342d3234203d3e20313437323831.roa
File: 34352e36352e3131382e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: JEFu/26eXGSF+wEv3YT3XTzRroGw/kV2yJSqFmx7cnw=
Subject key identifier: 5E:40:FF:3B:73:FA:D9:9B:5C:5A:7F:BE:B6:CA:3B:0B:46:A9:A0:6E
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 2A16C99D4CDD0996AB7EE213C5E86FB84C9B9A4B
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131382e302f32342d3234203d3e20313437323831.roa
Signing time: Mon 14 Sep 2026 02:35:46 +0000
ROA not before: Mon 14 Sep 2026 02:30:46 +0000
ROA not after: Mon 13 Sep 2027 02:35:46 +0000
asID: 147281
IP address blocks: 45.65.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:16:c9:9d:4c:dd:09:96:ab:7e:e2:13:c5:e8:6f:b8:4c:9b:9a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 14 02:30:46 2026 GMT
Not After : Sep 13 02:35:46 2027 GMT
Subject: CN=5E40FF3B73FAD99B5C5A7FBEB6CA3B0B46A9A06E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7c:ec:76:d7:49:96:ec:55:bd:84:27:9d:a7:
3d:d8:23:d4:7a:a7:cd:9b:c8:65:a9:f6:d2:88:ac:
a3:83:00:fb:82:82:15:94:7b:3c:92:d9:e5:1a:ce:
a3:94:29:53:c1:00:3e:b0:11:94:1b:16:d7:4b:69:
78:c1:d4:db:1f:1c:96:32:6d:e2:40:92:e3:f7:99:
2b:4d:38:4b:a8:22:d7:20:85:f6:70:3f:a6:88:cf:
d3:2f:a2:07:b0:bc:df:02:a8:cd:d9:93:96:f6:44:
06:58:71:2f:b0:d4:42:4b:be:88:16:b6:ca:a1:c1:
77:ab:f6:c7:4e:b3:2a:9d:79:9d:f1:9d:16:e6:2e:
dd:21:be:03:ea:eb:ea:2c:19:19:52:81:37:20:89:
28:cf:6f:d6:cf:26:b7:8b:ac:8e:f4:e4:28:60:30:
f1:0f:9f:c7:bc:20:0d:12:c3:48:35:12:89:93:f8:
dd:bb:d9:39:52:98:a5:c1:0c:a4:6b:72:8a:d5:1d:
0c:a3:6d:6b:75:dc:b3:c0:b9:d3:7c:0e:2a:2d:20:
a1:5f:75:47:84:19:7b:a0:aa:65:5a:9d:0b:8a:48:
92:d5:70:fd:2c:fb:6b:cc:e1:2f:18:b3:c1:0a:ee:
9f:a2:d1:fb:0f:8e:4e:4d:f6:36:82:2b:23:33:e2:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:40:FF:3B:73:FA:D9:9B:5C:5A:7F:BE:B6:CA:3B:0B:46:A9:A0:6E
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131382e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.118.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:1c:5d:d0:49:47:dd:47:34:24:09:4f:dc:4b:54:38:99:e2:
90:f5:35:5a:a8:94:be:bf:ab:b6:72:d2:a1:7c:22:90:4f:bb:
12:4d:c0:4b:44:26:03:8f:09:02:c4:84:4a:cc:46:a8:d0:65:
91:f7:eb:7c:51:b2:95:8b:e7:ae:f1:92:43:6b:a6:e9:a5:09:
6c:0f:25:98:39:f1:68:fb:c8:66:47:ba:4e:5b:cf:c3:4d:ea:
f1:8c:34:f3:57:f0:b5:06:7b:83:ce:bb:2f:04:6c:eb:99:ef:
ed:fc:ec:77:d4:17:5d:39:c3:ed:21:ac:b4:47:0a:51:53:c7:
71:c0:b6:36:2b:c8:5f:60:90:02:c0:e9:b4:6b:16:b2:73:ef:
e6:27:d5:ab:84:4f:4b:e1:ff:d0:be:d5:a4:06:70:28:b1:f7:
ae:68:74:77:b2:c9:45:47:56:13:2f:20:ce:08:72:2e:a2:5b:
cd:1e:d9:5a:3d:43:fc:2a:74:da:b6:27:a1:5d:c2:1e:15:88:
b1:26:93:e3:34:30:40:51:dd:f0:a5:54:7e:44:66:fc:86:8e:
48:60:7a:d5:28:ff:8e:a7:10:cb:67:33:75:ba:46:37:b2:3d:
96:69:ae:e2:bc:c4:3f:2b:fa:a2:49:04:0b:90:7a:88:98:70:
35:8c:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 03:14:28 2026 by rpki-client