Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131392e302f32342d3234203d3e203634323637.roa
File: 34352e36352e3131392e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: Is9A+1cftZE2IVOj9yUZf/e2lpmVnH6aOYb2rTY3xRo=
Subject key identifier: D4:FF:66:17:19:CF:D5:76:19:F2:8D:7C:9C:2F:D9:C6:F6:55:55:8F
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 2B7AE5B050A90DBEC28CDF0EAA9CC1EF6ADD5261
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131392e302f32342d3234203d3e203634323637.roa
Signing time: Tue 19 Aug 2025 16:58:03 +0000
ROA not before: Tue 19 Aug 2025 16:53:03 +0000
ROA not after: Tue 18 Aug 2026 16:58:03 +0000
asID: 64267
IP address blocks: 45.65.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7a:e5:b0:50:a9:0d:be:c2:8c:df:0e:aa:9c:c1:ef:6a:dd:52:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 19 16:53:03 2025 GMT
Not After : Aug 18 16:58:03 2026 GMT
Subject: CN=D4FF661719CFD57619F28D7C9C2FD9C6F655558F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:d7:9f:17:22:73:16:cf:b7:d0:26:7f:b5:
31:94:93:3a:97:f7:32:f4:4c:6f:c4:78:5c:6a:14:
49:75:90:35:85:f9:e0:e8:a5:61:a1:f7:0c:6d:9e:
93:a5:da:22:18:83:63:4e:20:d0:cd:6c:a7:5d:56:
a3:8c:16:1f:d4:c6:1e:79:1b:7c:90:59:17:ee:3e:
1d:07:d2:d9:ad:26:d7:d8:8f:51:04:8d:ad:2b:5e:
e9:09:7a:67:1a:b8:d9:55:43:62:e1:d8:d3:c8:06:
cc:ee:2f:9f:8a:97:6a:2f:d4:c0:a1:7d:e5:5e:0f:
f0:b0:ef:af:a6:39:b2:e9:2f:3c:59:68:d8:b7:79:
2f:31:70:62:b0:b2:88:9c:62:1d:fb:66:6d:dc:fa:
3d:79:08:0c:93:46:f5:80:7e:53:e9:6a:e0:46:bb:
e3:16:8c:0b:83:24:17:07:09:a7:21:53:b5:55:37:
23:a8:11:54:80:5c:b3:fc:e6:6e:57:7c:7b:4d:5e:
a6:30:37:b6:14:e2:1f:73:5a:95:86:34:2c:a1:a4:
4e:9f:fc:5a:f5:0f:45:b7:05:ec:32:15:8e:5a:c0:
67:1f:91:a7:30:e9:14:4b:a5:41:d7:96:a6:b9:4f:
91:11:02:79:1b:08:d4:56:60:f4:e8:0d:c2:58:6b:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:66:17:19:CF:D5:76:19:F2:8D:7C:9C:2F:D9:C6:F6:55:55:8F
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131392e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.119.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:47:48:07:2a:bc:e6:42:e7:87:ff:a2:4f:70:71:f7:a5:b2:
db:bf:07:1b:26:93:0f:cf:52:63:71:e6:ee:61:55:29:c7:5f:
16:10:46:ac:51:7d:05:15:98:4b:a4:61:b6:4e:22:e7:05:5c:
84:7b:17:32:8f:b1:80:8d:08:5f:8c:e6:6f:ed:39:01:16:df:
f5:47:6c:94:00:07:39:24:16:31:2b:a5:3c:39:2e:25:a8:d3:
60:32:5f:79:c3:c8:5c:68:43:5e:26:98:e5:5f:94:89:b1:f4:
4f:10:78:f8:3a:6c:51:86:93:c8:fd:d1:57:4b:f8:0a:4f:b2:
4d:d6:bd:fc:05:3b:de:bf:60:16:ba:ca:1d:13:a3:1f:77:27:
ab:1d:43:09:36:c3:f6:12:04:b0:d8:57:31:89:a8:f3:fc:6f:
d5:34:b0:46:2a:29:95:9d:c5:d3:1d:05:ec:f1:62:10:7b:c5:
f5:1f:f9:46:66:6c:e0:92:81:b6:e9:53:bc:c5:d3:38:36:2d:
0f:b3:6b:c0:51:4a:00:dd:73:d5:cc:92:b7:db:48:6a:66:96:
a6:bd:11:f4:7b:17:43:f0:67:d4:74:39:f3:ce:a0:cc:10:a6:
1f:07:64:66:de:94:bb:e6:7d:5d:ae:66:59:d6:4e:d9:2f:04:
bf:3e:3a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:41:49 2025 by rpki-client