Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20323033333830.roa
File: 34352e39352e36362e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: wKj/fmu4B8ikTrSloedfOy/8iwbrcoQ+enfE9wU5EnE=
Subject key identifier: 65:B7:8D:D5:D1:DE:95:D2:44:68:A3:72:86:3F:AD:10:5E:BF:BE:C3
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 36A40E3DDCBB55D4D835E7BAC26B6319FDFEB162
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20323033333830.roa
Signing time: Sun 09 Aug 2026 07:59:06 +0000
ROA not before: Sun 09 Aug 2026 07:54:06 +0000
ROA not after: Sun 08 Aug 2027 07:59:06 +0000
asID: 203380
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a4:0e:3d:dc:bb:55:d4:d8:35:e7:ba:c2:6b:63:19:fd:fe:b1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 9 07:54:06 2026 GMT
Not After : Aug 8 07:59:06 2027 GMT
Subject: CN=65B78DD5D1DE95D24468A372863FAD105EBFBEC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:4c:f5:75:fe:e1:be:d7:81:7e:20:f1:7b:
f7:af:dd:06:a7:f5:c8:b6:06:1c:ef:e0:0a:a6:a8:
4a:e7:30:db:07:1c:ee:35:7f:da:c2:7b:9e:4e:d8:
2a:82:bc:a9:d8:06:99:49:cf:41:ec:09:13:e6:d2:
85:c0:04:04:a0:19:bc:a7:06:c4:7a:c7:04:9a:41:
61:c3:9d:e8:83:85:d7:a6:6e:c7:d4:2d:5b:57:0a:
2c:61:96:5f:a0:d5:bb:86:d6:86:0b:d6:14:87:a6:
ca:2c:f5:54:ad:b0:04:09:9c:86:0a:84:a3:82:96:
4c:f9:1b:86:e3:19:2f:db:88:74:f4:0d:0d:ed:a9:
7a:1e:67:32:e5:04:85:54:68:5b:97:90:5d:a7:43:
58:bb:2d:a5:1b:3b:25:aa:86:40:21:ba:c7:93:59:
db:88:c4:f4:66:20:b3:cb:f4:1e:ed:02:7c:16:6e:
c0:1f:89:8f:be:a3:ac:8e:ab:4e:a0:0d:ea:93:08:
11:45:62:a8:19:e8:28:d5:4f:5d:99:1a:c4:f1:ad:
98:a5:b9:ef:1c:a0:e2:5e:90:7c:a4:e5:32:1e:4b:
fa:74:e0:53:17:fd:e7:c6:83:dc:1f:19:25:40:3b:
9b:96:9b:1c:c8:6c:16:58:f1:de:8c:af:9e:14:5b:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:8D:D5:D1:DE:95:D2:44:68:A3:72:86:3F:AD:10:5E:BF:BE:C3
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
77:65:ca:2d:f5:ad:2e:3e:25:96:3a:de:1e:e3:b9:71:ba:ab:
a5:35:cd:3c:4c:3c:7b:82:f0:ef:55:ba:6e:15:ec:9d:58:9b:
7b:84:ce:72:2a:0e:f2:83:3f:34:e8:de:d7:05:5a:00:6f:bb:
ae:67:65:ac:14:9b:dc:68:48:46:eb:e8:e5:96:9c:27:ed:bd:
79:8b:fe:fa:64:27:4b:43:19:72:ae:11:bd:fb:57:db:f9:ee:
68:a1:d9:cf:6f:72:85:c2:53:2c:f1:c2:a4:ec:8a:a6:33:03:
b5:e4:ce:f1:9d:df:9a:28:39:c2:bd:a8:4f:1a:9a:83:6e:74:
a3:73:94:a1:d2:55:71:22:fb:c6:c1:75:6d:bd:d9:40:3f:e6:
39:f3:07:3e:bb:5a:90:b3:a7:c1:c5:8a:97:f2:41:89:56:1a:
82:2b:6c:10:41:9d:82:7a:ae:7b:b8:30:3b:fe:23:06:c9:82:
86:d7:86:19:03:20:e5:b5:b9:bd:51:c6:09:2d:e4:41:46:fc:
aa:20:8b:bd:63:a9:e4:78:a8:fb:d9:86:3c:1b:58:ac:c1:31:
31:ce:73:e5:8c:f7:0d:89:af:c6:b9:1a:92:dc:fe:51:f3:c1:
7d:7d:8e:47:34:db:d3:ae:b8:f2:45:e5:5a:73:78:57:1a:7f:
07:27:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:06 2026 by rpki-client