Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
File: 34352e39352e36362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ZabjKI+iwCL9IjSz3vOL8MpNrlb1kzJPnTQ/ZMYYslc=
Subject key identifier: 9F:AD:EC:36:3B:5B:2F:56:08:19:E2:88:8B:D2:B9:7F:74:DB:33:AC
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 638DE1DE0E68057350C22B34BEBE54860CDA38FD
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
Signing time: Thu 30 Apr 2026 08:09:17 +0000
ROA not before: Thu 30 Apr 2026 08:04:17 +0000
ROA not after: Thu 29 Apr 2027 08:09:17 +0000
asID: 834
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:8d:e1:de:0e:68:05:73:50:c2:2b:34:be:be:54:86:0c:da:38:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Apr 30 08:04:17 2026 GMT
Not After : Apr 29 08:09:17 2027 GMT
Subject: CN=9FADEC363B5B2F560819E2888BD2B97F74DB33AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:01:78:47:ce:ef:44:0d:b0:18:c8:7e:19:50:
02:13:de:64:36:e1:7c:47:cb:9c:0d:15:8a:6b:e5:
92:a6:92:b6:c3:9c:d5:ec:00:a5:8e:7f:57:12:b4:
b0:6e:6e:4e:f2:37:1f:a0:1b:5d:77:0d:dd:7e:22:
02:b1:51:26:87:30:60:c0:cf:d9:4f:c1:38:a2:2f:
fd:b2:01:03:3e:30:64:6a:80:e8:cd:16:b9:26:7f:
c0:43:d4:7e:36:35:f0:43:b0:4d:f0:fc:96:fd:61:
3c:41:58:5f:d8:0d:1b:43:48:63:15:3f:ea:18:72:
e0:b8:2a:49:7c:6a:87:f3:60:df:d1:37:37:e0:b3:
46:df:7a:9e:e5:65:9f:9c:10:11:2d:1b:9f:82:fd:
7f:f1:92:de:9b:f0:b3:1e:38:8c:c1:8b:ec:58:f3:
bc:c9:fa:2c:ca:80:e6:e8:c5:c9:da:a4:e7:b1:fd:
ea:5e:b4:9b:f6:64:13:12:7d:9e:ee:bf:4c:7a:6b:
6d:63:64:30:b3:ae:b5:27:6f:f0:8d:69:f1:3b:22:
fa:d5:e8:af:65:22:a8:9b:2b:c2:0c:88:af:2e:7f:
e9:5a:5c:e0:10:30:b1:4a:c0:7b:88:27:1e:4d:22:
8d:d2:3b:bd:77:da:f9:44:42:e7:c1:bb:db:26:52:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AD:EC:36:3B:5B:2F:56:08:19:E2:88:8B:D2:B9:7F:74:DB:33:AC
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:9e:b6:5f:9c:f8:47:d0:3b:4c:8e:36:06:3d:f2:54:fa:7a:
aa:e9:67:14:f3:50:23:69:53:30:2f:52:82:37:80:c0:f6:44:
8e:7c:af:ff:02:e0:75:4d:91:97:fe:29:c2:ac:bb:cb:99:a5:
a0:f3:c1:c4:ca:fb:bc:bf:4d:e3:dc:38:ed:6e:b9:ba:fe:68:
9a:9e:d0:45:47:39:ff:95:f2:13:dd:25:6c:85:b3:5e:cb:7f:
ea:ba:6a:48:a0:9f:8f:4e:be:7b:65:87:6b:0d:87:d6:ec:0a:
e0:30:11:23:4e:75:d3:25:2d:2f:3e:64:b3:91:1b:b4:22:0d:
fe:c1:3d:0a:97:3b:9b:dc:ab:aa:bb:ec:a3:94:c3:98:85:db:
98:24:94:ce:80:bc:83:e6:92:a5:e0:d7:8b:39:9a:9f:2d:e6:
10:a4:61:d8:4d:e6:90:77:b9:da:bd:57:fb:91:81:6a:c7:aa:
9f:0a:73:c2:7e:3d:f9:d8:a9:1a:63:20:ad:fe:86:c6:2c:5c:
6e:60:60:c8:ef:1f:08:4b:a5:4c:81:1b:30:df:54:ee:b1:f3:
2b:1c:45:46:f8:a5:83:cc:f7:42:ef:e7:2c:86:0b:8c:fe:55:
ef:b0:4a:98:d0:49:12:4c:79:19:30:09:17:fe:96:17:20:f2:
23:36:e5:61
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUY43h3g5oBXNQwis0vr5UhgzaOP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNjA0MzAwODA0MTdaFw0yNzA0MjkwODA5MTdaMDMxMTAvBgNV
BAMTKDlGQURFQzM2M0I1QjJGNTYwODE5RTI4ODhCRDJCOTdGNzREQjMzQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0AXhHzu9EDbAYyH4ZUAIT3mQ2
4XxHy5wNFYpr5ZKmkrbDnNXsAKWOf1cStLBubk7yNx+gG113Dd1+IgKxUSaHMGDA
z9lPwTiiL/2yAQM+MGRqgOjNFrkmf8BD1H42NfBDsE3w/Jb9YTxBWF/YDRtDSGMV
P+oYcuC4Kkl8aofzYN/RNzfgs0bfep7lZZ+cEBEtG5+C/X/xkt6b8LMeOIzBi+xY
87zJ+izKgOboxcnapOex/epetJv2ZBMSfZ7uv0x6a21jZDCzrrUnb/CNafE7IvrV
6K9lIqibK8IMiK8uf+laXOAQMLFKwHuIJx5NIo3SO7132vlEQufBu9smUillAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUn63sNjtbL1YIGeKIi9K5f3TbM6wwHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzkzNTJlMzYzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1fQjANBgkq
hkiG9w0BAQsFAAOCAQEAzZ62X5z4R9A7TI42Bj3yVPp6qulnFPNQI2lTMC9SgjeA
wPZEjnyv/wLgdU2Rl/4pwqy7y5mloPPBxMr7vL9N49w47W65uv5omp7QRUc5/5Xy
E90lbIWzXst/6rpqSKCfj06+e2WHaw2H1uwK4DARI0510yUtLz5ks5EbtCIN/sE9
Cpc7m9yrqrvso5TDmIXbmCSUzoC8g+aSpeDXizmany3mEKRh2E3mkHe52r1X+5GB
aseqnwpzwn49+dipGmMgrf6GxixcbmBgyO8fCEulTIEbMN9U7rHzKxxFRvilg8z3
Qu/nLIYLjP5V77BKmNBJEkx5GTAJF/6WFyDyIzblYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:36:27 2026 by rpki-client