Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e203232343237.roa
File: 34352e39352e36362e302f32342d3234203d3e203232343237.roa (raw, json)
Hash identifier: Ame9/2BaJVlSNBlMpu0VEqZNX1QdWkO6sxbhVWys1fI=
Subject key identifier: 0F:11:AD:CF:29:98:97:AA:D6:A5:77:C0:56:65:19:F8:D2:70:0C:7D
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 51D16E4177D124B556705D00CCD15329B5F76801
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e203232343237.roa
Signing time: Tue 09 Sep 2025 06:36:20 +0000
ROA not before: Tue 09 Sep 2025 06:31:20 +0000
ROA not after: Tue 08 Sep 2026 06:36:20 +0000
asID: 22427
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d1:6e:41:77:d1:24:b5:56:70:5d:00:cc:d1:53:29:b5:f7:68:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 9 06:31:20 2025 GMT
Not After : Sep 8 06:36:20 2026 GMT
Subject: CN=0F11ADCF299897AAD6A577C0566519F8D2700C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:d4:79:9e:08:3a:da:8c:db:07:3f:5c:e6:
9d:7f:3f:f1:f8:2d:2f:05:f0:43:0a:bc:86:82:74:
ab:a6:74:3f:7f:20:3c:8f:2a:0b:7b:63:99:2d:ce:
52:d6:d1:f2:75:8b:e2:6b:8c:82:61:a0:d1:8e:60:
dc:19:97:75:c4:11:25:c6:f7:1d:39:c4:5d:00:ba:
25:64:8f:6b:9b:ce:e5:db:5e:d8:f3:50:40:2f:84:
1f:18:78:7d:20:66:c4:a5:a9:5d:7c:9c:99:9d:06:
0a:f7:d8:74:3c:4f:3a:b3:ae:21:62:63:a1:b0:14:
36:84:4f:83:0c:4b:77:90:4e:e7:7f:30:38:99:ab:
9e:d6:37:b6:37:15:78:71:64:bd:f8:95:08:15:aa:
20:d2:3e:d4:90:22:a1:33:ed:ec:4e:a9:0a:53:e5:
e8:4f:c3:8e:6c:21:30:79:e5:b0:ba:a2:be:45:57:
66:13:94:dd:b8:1a:b9:49:7c:58:bf:76:e0:f6:65:
34:08:e1:20:30:0f:40:f1:41:94:3a:7e:bc:95:ea:
0b:5e:6a:cb:34:e8:b0:30:bb:b7:32:06:cb:a1:97:
90:29:03:18:23:07:37:95:1a:d2:a5:43:9f:a1:53:
16:34:15:3c:8f:e3:67:fe:91:bd:44:ad:70:56:02:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:11:AD:CF:29:98:97:AA:D6:A5:77:C0:56:65:19:F8:D2:70:0C:7D
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e203232343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
92:16:f4:1f:96:1e:21:ed:97:e2:74:c7:ed:63:2a:1c:03:82:
af:46:0e:61:3d:e7:75:fe:0d:ea:07:3f:8b:5a:6b:73:60:28:
51:8a:36:10:10:30:c7:83:a3:22:bf:63:84:57:7a:18:17:a5:
f8:5d:95:11:c9:ae:a4:dd:75:5e:a3:ed:7e:6f:6c:f7:57:b2:
be:00:25:ed:6c:a9:3c:2d:58:67:40:65:2d:53:43:61:a7:38:
e4:d4:ee:96:0a:2e:d4:f9:93:a9:47:d7:52:cb:ea:1e:d5:0e:
ea:f6:4c:db:88:8c:66:ff:52:ad:60:07:62:e0:67:45:15:80:
7f:7a:1f:9e:4e:f7:07:99:fc:77:55:84:20:de:ee:cd:db:c0:
e0:ed:3c:26:7d:59:d4:66:96:b9:a6:ba:65:3d:cb:14:95:c8:
cb:66:27:89:dc:23:b5:62:19:17:59:ab:06:ae:75:89:80:aa:
1f:8f:40:93:65:ad:44:74:36:0a:3e:0b:d9:c5:9a:be:66:e9:
96:05:97:39:53:55:84:d4:0e:64:df:a1:b3:67:d7:e9:46:0d:
84:92:2f:8c:03:c5:ff:a0:e1:74:1d:00:dd:1b:b4:b0:cc:cd:
b8:09:87:09:b5:82:42:2f:7d:08:ba:b4:b0:6f:62:39:72:62:
ed:bc:5b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:03:09 2025 by rpki-client