Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e20323038393035.roa
File: 34352e38382e31302e302f32342d3234203d3e20323038393035.roa (raw, json)
Hash identifier: cUN7o9vRpd9j0ImXfDIC6WPJtHT47mPAg7mY8xr8CIM=
Subject key identifier: 1C:00:FD:4F:2F:B9:48:C3:BF:C4:36:0B:40:56:5A:B0:F8:C3:A1:02
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 4C383A9BC38F4337D52FC7D800ACDE903FD9876A
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e20323038393035.roa
Signing time: Fri 30 Oct 2026 15:49:39 +0000
ROA not before: Fri 30 Oct 2026 15:44:39 +0000
ROA not after: Fri 29 Oct 2027 15:49:39 +0000
asID: 208905
IP address blocks: 45.88.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:38:3a:9b:c3:8f:43:37:d5:2f:c7:d8:00:ac:de:90:3f:d9:87:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 30 15:44:39 2026 GMT
Not After : Oct 29 15:49:39 2027 GMT
Subject: CN=1C00FD4F2FB948C3BFC4360B40565AB0F8C3A102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7c:3e:61:64:a1:53:7e:c2:3c:f5:f1:3f:d1:
0e:d8:0a:1d:7a:ac:bc:8d:b2:9d:9f:9b:3b:e8:79:
01:ae:e0:52:28:d8:ca:da:d8:b2:6b:ad:3f:55:07:
ca:19:27:af:cb:d1:e7:0c:a0:09:26:a3:ff:c2:d1:
12:c6:85:e8:4c:17:cf:89:02:43:5d:59:ec:4d:4e:
aa:28:17:c7:75:47:fc:9f:7f:f9:fd:29:2f:4b:63:
31:c1:83:85:11:2f:2e:d1:6e:5f:f4:09:69:99:9e:
25:6b:6d:c6:96:c6:b0:90:39:a4:85:82:c8:0a:51:
39:38:bf:1f:00:b6:fd:52:1f:2b:c6:e8:19:42:56:
2e:6f:37:0e:fd:0e:98:66:a8:6e:44:91:47:0a:77:
fa:1c:16:eb:3d:2d:27:40:c6:c9:85:67:35:75:f8:
8b:5d:ae:bf:a1:84:74:41:f0:cb:fd:0d:b5:7e:0f:
78:4a:42:ae:38:35:07:ad:69:d7:89:8d:1c:7d:ff:
55:9c:c6:17:5e:c4:4e:2c:5c:0e:32:11:a4:ed:49:
41:c2:d8:65:76:20:af:d6:18:f3:77:b4:35:57:5a:
b4:26:9a:dd:9e:16:3b:1c:1c:cb:c6:64:a1:ec:8b:
fc:25:b9:40:24:f8:aa:cb:a9:f4:ac:f4:83:a3:0d:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:00:FD:4F:2F:B9:48:C3:BF:C4:36:0B:40:56:5A:B0:F8:C3:A1:02
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e20323038393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:0f:66:b8:c0:ba:60:9d:82:65:c4:67:9e:df:01:41:91:5e:
24:9c:f8:1e:30:27:52:fd:8a:b9:d9:dc:3d:8a:3c:dc:29:e1:
65:f6:19:b0:57:43:03:b8:4f:d4:5c:94:b4:fa:0b:3d:9f:de:
e7:7d:6a:99:7c:00:85:48:dc:3f:b3:50:2d:46:74:68:e9:8f:
6b:a5:91:91:69:98:ab:9b:b5:35:71:0e:dd:5f:05:ee:c8:c0:
26:42:e4:ab:a5:e1:c5:40:d8:4d:74:29:ed:4a:19:9c:61:e9:
83:87:e4:7a:21:fe:74:18:98:c1:38:da:a0:a6:3d:5e:50:4d:
b2:80:de:43:d8:14:85:82:e7:d4:fb:52:eb:d7:4d:bf:84:98:
df:52:d4:1b:3c:29:64:57:7d:23:a2:8b:6a:4d:21:16:4b:ca:
b6:cc:8c:9b:44:44:60:4b:ad:0d:46:2f:02:c9:2b:1e:bb:98:
8d:65:0c:58:6b:4b:ac:ca:e0:1d:38:a5:5f:3e:c1:9b:29:23:
e3:2a:f7:cb:05:a4:a9:c4:e9:2e:54:66:47:8b:bd:84:0a:69:
6e:dd:1c:e5:b4:99:0a:f9:e5:21:4d:14:55:3a:1a:f5:42:f7:
64:76:65:e9:5b:6e:3b:ec:0a:38:5f:47:6e:7f:4d:c5:29:37:
85:ab:76:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:04:47 2026 by rpki-client