Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31312e302f32342d3234203d3e20323131343135.roa
File: 34352e38382e31312e302f32342d3234203d3e20323131343135.roa (raw, json)
Hash identifier: Lv90AxGqJ2ODlaP4/g0fqr8Ly4ObvdMzjs0Xp1VucLw=
Subject key identifier: 65:F7:83:DF:C0:2D:B9:12:D2:A4:43:79:94:C0:C4:26:6D:89:5D:8A
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 3CFF9CDA43DF7C0A49839B20FEF46CB4E73AC607
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31312e302f32342d3234203d3e20323131343135.roa
Signing time: Mon 27 Jul 2026 10:49:15 +0000
ROA not before: Mon 27 Jul 2026 10:44:15 +0000
ROA not after: Mon 26 Jul 2027 10:49:15 +0000
asID: 211415
IP address blocks: 45.88.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 09:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:ff:9c:da:43:df:7c:0a:49:83:9b:20:fe:f4:6c:b4:e7:3a:c6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jul 27 10:44:15 2026 GMT
Not After : Jul 26 10:49:15 2027 GMT
Subject: CN=65F783DFC02DB912D2A4437994C0C4266D895D8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:da:2e:ec:55:23:16:67:58:fd:42:d1:82:
ba:1d:5b:b7:06:ed:b9:bf:26:c1:ce:28:6d:f6:b1:
0d:f7:6a:9f:e9:6e:c0:ab:41:18:e0:74:54:90:48:
66:75:33:7b:0d:a1:31:33:97:d7:c7:7c:23:16:4e:
00:ad:80:2a:32:83:62:00:8d:ac:42:2b:34:4c:5d:
4c:46:4f:28:bf:f6:25:d3:cc:3f:a8:c2:83:29:cd:
ee:68:a8:c6:30:29:ca:9c:6b:8a:05:e7:20:de:b4:
28:12:a5:bc:d0:1b:95:a5:6a:15:5a:1d:6c:7f:ab:
ee:de:46:58:71:e2:9b:9f:ec:20:d2:7c:57:39:51:
c2:b5:24:63:7b:1d:ad:6e:32:9a:a6:c7:ee:98:01:
f5:99:e4:c3:53:98:e3:22:18:2d:44:17:81:8c:98:
01:6a:8a:9a:14:f8:6f:b0:eb:02:37:a1:28:40:34:
eb:cd:12:51:97:a8:46:04:c1:ed:85:7f:02:73:e2:
14:e3:de:d5:43:fe:c4:3a:6e:34:6d:3b:ab:12:5c:
32:62:92:b5:34:50:1d:a1:7c:83:a2:e4:1f:27:1f:
3e:77:e0:91:79:69:dc:60:81:74:57:58:83:d6:33:
7f:91:e4:3b:a8:b9:41:4c:01:9d:68:95:93:e2:41:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F7:83:DF:C0:2D:B9:12:D2:A4:43:79:94:C0:C4:26:6D:89:5D:8A
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31312e302f32342d3234203d3e20323131343135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.11.0/24
Signature Algorithm: sha256WithRSAEncryption
23:51:c6:f6:2a:7c:a6:b4:34:39:d3:12:b2:2d:4e:ca:3f:2b:
a0:20:bc:1c:76:07:36:b8:49:1d:79:52:ae:10:65:c0:e1:5d:
d4:12:d6:88:1b:c5:68:3f:3a:0e:1e:9a:bd:f4:b9:0a:ae:9c:
f9:62:5a:9c:20:aa:a8:81:5b:73:87:a3:2d:39:08:16:80:ba:
64:4d:5f:7c:ff:1f:9f:24:e6:00:9c:ea:91:cd:85:1d:d5:9e:
04:61:ab:71:a5:ae:3c:29:b3:24:c0:0f:24:39:0b:53:91:b8:
14:27:43:d8:c1:32:13:63:54:a0:5b:52:95:25:7c:dc:b8:b0:
02:11:55:14:e1:a9:c5:75:58:61:53:32:16:9a:25:72:04:8d:
55:c7:9a:6e:f4:20:e9:43:49:3c:b3:28:07:dc:04:73:0c:58:
43:17:22:df:cd:a9:29:50:6f:9b:d6:74:0a:c9:5e:fe:c7:05:
f1:f5:e6:37:1b:6b:2e:2d:7e:3a:8c:e0:08:12:ae:8b:4f:44:
73:37:09:3c:7e:9d:72:95:e8:4a:da:6c:fd:14:90:dd:3f:74:
52:5c:55:8a:ec:cf:b0:5c:97:08:0d:01:7e:0a:50:ed:46:58:
14:59:60:d3:1d:af:b8:7a:51:25:77:9b:a4:a4:1e:0b:49:ab:
7f:9b:33:d3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUPP+c2kPffApJg5sg/vRstOc6xgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNjA3MjcxMDQ0MTVaFw0yNzA3MjYxMDQ5MTVaMDMxMTAvBgNV
BAMTKDY1Rjc4M0RGQzAyREI5MTJEMkE0NDM3OTk0QzBDNDI2NkQ4OTVEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzNou7FUjFmdY/ULRgrodW7cG
7bm/JsHOKG32sQ33ap/pbsCrQRjgdFSQSGZ1M3sNoTEzl9fHfCMWTgCtgCoyg2IA
jaxCKzRMXUxGTyi/9iXTzD+owoMpze5oqMYwKcqca4oF5yDetCgSpbzQG5WlahVa
HWx/q+7eRlhx4puf7CDSfFc5UcK1JGN7Ha1uMpqmx+6YAfWZ5MNTmOMiGC1EF4GM
mAFqipoU+G+w6wI3oShANOvNElGXqEYEwe2FfwJz4hTj3tVD/sQ6bjRtO6sSXDJi
krU0UB2hfIOi5B8nHz534JF5adxggXRXWIPWM3+R5DuouUFMAZ1olZPiQRszAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUZfeD38AtuRLSpEN5lMDEJm2JXYowHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzgzODJlMzEzMTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTM0MzEzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1Y
CzANBgkqhkiG9w0BAQsFAAOCAQEAI1HG9ip8prQ0OdMSsi1Oyj8roCC8HHYHNrhJ
HXlSrhBlwOFd1BLWiBvFaD86Dh6avfS5Cq6c+WJanCCqqIFbc4ejLTkIFoC6ZE1f
fP8fnyTmAJzqkc2FHdWeBGGrcaWuPCmzJMAPJDkLU5G4FCdD2MEyE2NUoFtSlSV8
3LiwAhFVFOGpxXVYYVMyFpolcgSNVceabvQg6UNJPLMoB9wEcwxYQxci382pKVBv
m9Z0Csle/scF8fXmNxtrLi1+OozgCBKui09EczcJPH6dcpXoStps/RSQ3T90UlxV
iuzPsFyXCA0BfgpQ7UZYFFlg0x2vuHpRJXebpKQeC0mrf5sz0w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 23:20:58 2026 by rpki-client