Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131392e302f32342d3234203d3e203536363535.roa
File: 34352e36352e3131392e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier: FvnHiBEELzPoSVWs0vLAoR87EdNsekKrNbq6VZuhBVc=
Subject key identifier: CB:12:3C:1C:8E:A8:68:2F:D5:DD:FD:22:3B:8B:ED:93:5E:90:B4:FC
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 64B0CAECB9DD5A8B1B787F488CA42EEE5AE1E479
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131392e302f32342d3234203d3e203536363535.roa
Signing time: Tue 18 Aug 2026 12:11:27 +0000
ROA not before: Tue 18 Aug 2026 12:06:27 +0000
ROA not after: Tue 17 Aug 2027 12:11:27 +0000
asID: 56655
IP address blocks: 45.65.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 08:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b0:ca:ec:b9:dd:5a:8b:1b:78:7f:48:8c:a4:2e:ee:5a:e1:e4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 18 12:06:27 2026 GMT
Not After : Aug 17 12:11:27 2027 GMT
Subject: CN=CB123C1C8EA8682FD5DDFD223B8BED935E90B4FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:e9:a0:28:76:17:2b:6d:3c:17:fd:d5:7f:
6a:93:10:7e:cf:59:96:c5:59:9d:65:dc:be:3f:f7:
94:07:11:f6:72:27:c3:8e:be:56:a2:7e:52:24:c8:
c8:82:c9:3d:ca:5b:99:5a:3a:64:6c:56:8b:52:75:
46:18:79:56:41:b5:2c:3c:a7:99:3a:ec:2f:40:f3:
3a:a6:14:dd:ed:ef:50:00:5f:f4:49:4a:c1:24:87:
86:1b:de:76:9e:e2:05:5d:f5:22:5b:a9:7a:c1:70:
b1:10:eb:85:4f:a2:42:fc:03:03:77:ac:9d:13:c8:
1c:35:16:be:00:77:84:19:8e:64:78:ce:02:02:7c:
b2:91:ab:a7:44:77:93:f4:33:1c:b6:41:b6:95:0d:
62:23:cb:6e:1c:7e:98:26:3c:9a:a3:80:18:8f:4e:
5c:95:4e:51:44:42:c6:40:a1:91:57:61:7d:ca:1f:
5e:3b:07:ef:a0:aa:65:c1:65:a7:70:28:62:e0:54:
69:7f:b8:10:53:e7:2f:5b:11:3c:cf:72:11:b8:d0:
6a:98:bf:31:91:80:2d:61:6d:3f:1d:4e:2c:db:72:
0c:a5:06:50:be:af:31:ab:b4:45:36:a9:98:1f:93:
59:ef:9d:ef:a5:80:97:34:94:9c:22:4b:94:75:7c:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:12:3C:1C:8E:A8:68:2F:D5:DD:FD:22:3B:8B:ED:93:5E:90:B4:FC
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131392e302f32342d3234203d3e203536363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.119.0/24
Signature Algorithm: sha256WithRSAEncryption
00:98:d5:9f:a5:9e:34:cf:ac:96:ab:41:1b:a2:76:f1:01:da:
5e:c7:ea:4b:14:54:45:53:1a:40:87:17:44:e7:e1:a2:01:c2:
09:0c:ec:cd:93:57:0e:91:7c:28:35:cf:3f:a7:8d:39:a7:99:
d0:c6:98:fd:fd:a4:59:8f:d7:60:93:81:19:5a:7f:aa:75:18:
74:31:29:8f:e3:03:7d:62:65:8e:ab:d3:be:af:0f:20:d0:59:
e5:7c:b4:da:b7:71:4c:95:b6:a1:aa:78:42:dd:6e:9f:17:aa:
9e:18:c1:f1:17:20:a5:0a:28:21:89:c0:65:7b:4f:b4:6c:f1:
44:d8:a6:85:b7:a6:12:8c:1a:9d:d6:0d:16:2a:61:5c:bf:99:
9a:2f:69:f1:f5:d7:44:e2:52:f5:46:a2:e4:42:32:dc:4d:8f:
d3:62:a7:11:34:02:2e:cf:c4:d6:fe:90:20:a6:cc:db:2a:e4:
17:1c:a5:64:9a:2a:38:2b:8f:e7:8d:ef:d0:0d:2d:f4:ac:17:
d8:4d:e0:0b:c3:fb:f4:bc:4c:2d:29:11:95:de:38:c5:e5:d4:
11:2c:9f:17:1c:39:4c:16:70:fd:d9:5a:cb:28:cb:a8:ec:e0:
00:4e:88:49:65:15:a0:3d:09:b6:99:4c:fd:4b:b1:5f:a9:e7:
8c:48:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:36:52 2026 by rpki-client