Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20343032303732.roa
File: 34352e39352e36362e302f32342d3234203d3e20343032303732.roa (raw, json)
Hash identifier: Z+yzXN63oxqsmKOlruIHOdnj7JoXSEBlD4+oAbSst+4=
Subject key identifier: 47:C1:F9:96:A3:3D:96:8A:C8:F0:1D:8C:29:7F:AE:10:58:8B:92:05
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 08DB93EA1705861D7C4AFA9F58F24ACC6B82941C
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20343032303732.roa
Signing time: Wed 16 Sep 2026 05:18:16 +0000
ROA not before: Wed 16 Sep 2026 05:13:16 +0000
ROA not after: Wed 15 Sep 2027 05:18:16 +0000
asID: 402072
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:db:93:ea:17:05:86:1d:7c:4a:fa:9f:58:f2:4a:cc:6b:82:94:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 16 05:13:16 2026 GMT
Not After : Sep 15 05:18:16 2027 GMT
Subject: CN=47C1F996A33D968AC8F01D8C297FAE10588B9205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:94:71:ff:91:01:7a:4f:ae:5a:69:41:4b:
33:c3:2d:ed:1f:17:c5:10:3e:c7:7a:e3:66:e1:fa:
6c:6f:11:96:6c:5e:ed:53:13:87:75:8f:2c:86:f8:
d1:d1:1b:23:c6:9d:d5:2c:34:a9:84:5e:c2:58:8d:
db:8d:28:c0:a4:e1:d1:5b:0b:e6:6a:1c:66:5d:ab:
c6:a3:e3:69:83:78:17:0b:7c:a1:0e:89:0f:7f:28:
dd:14:c8:01:25:80:49:10:4e:d5:2d:98:d3:dd:1f:
d1:a6:0f:1d:69:17:3f:26:98:a9:05:52:e1:63:0c:
f0:17:ab:ca:66:3e:b4:b6:e6:71:b5:43:49:e6:8b:
2e:b0:1f:98:a6:c8:9e:9a:24:d8:db:68:14:00:f0:
d7:c4:07:6f:52:83:f9:e8:f5:ae:50:40:44:ce:33:
72:6b:9b:04:1f:6b:f5:5b:f2:2f:89:f0:64:d3:80:
1e:65:8b:83:2a:83:2e:b1:5e:f6:5e:77:7c:35:b8:
fe:d8:fc:56:77:fb:db:5b:07:3d:20:b1:7d:04:42:
f0:70:53:a3:a2:7a:7f:f6:9e:8b:93:9f:21:35:6d:
36:3c:cf:34:8d:09:32:29:30:69:6f:5b:a3:f4:a7:
0e:1f:4b:b5:d5:d7:54:2f:0a:28:27:5e:f8:4f:57:
cf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C1:F9:96:A3:3D:96:8A:C8:F0:1D:8C:29:7F:AE:10:58:8B:92:05
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20343032303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:ea:48:76:19:00:86:66:43:32:d4:40:e4:8e:3b:68:2b:62:
66:2b:82:9b:09:87:74:69:b8:b6:16:a4:30:ed:3f:d0:63:75:
02:cc:ab:e3:eb:7e:8d:92:fc:c3:93:65:a9:e1:ac:cf:19:4c:
c6:be:27:2b:36:a3:15:6e:be:bf:19:61:ef:b9:89:14:48:e7:
28:60:30:2d:2b:f5:7d:f4:e6:14:e9:24:db:ab:7d:4f:06:43:
12:c7:bf:07:1c:34:f5:c7:8c:b6:aa:6f:9f:b8:16:97:c0:cf:
66:c3:4a:98:ec:f1:34:f6:47:b4:94:0d:1c:cd:c1:e0:d2:59:
29:f4:cb:c7:a0:42:e8:b5:1f:75:05:1f:4d:ec:94:01:0b:31:
6d:3c:bb:3c:97:0d:72:91:46:a2:54:13:7a:40:65:d3:ef:7b:
26:e0:de:82:cc:ff:3f:76:39:d2:0c:30:d2:6e:5e:b4:12:7c:
b6:aa:2a:13:5c:87:73:d0:9b:b1:fd:8c:2d:ce:a7:59:6f:b9:
73:59:87:6f:6f:da:52:0c:2c:d0:ae:12:17:f9:c8:76:57:9a:
58:2e:3a:07:d2:a0:10:ba:44:6d:c9:15:c8:6c:35:79:0a:98:
13:57:c7:41:3c:9a:02:05:c4:e4:17:bf:1a:17:94:53:41:07:
d7:22:f8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 03:14:28 2026 by rpki-client