Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
File: 34352e39352e36362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jR7wZCmFM4nHGJ8CLT981xPbhZy/XwgsaIYa9n3WFnQ=
Subject key identifier: CA:4A:B3:C1:68:2E:58:31:29:71:83:F2:AD:2B:84:F9:1E:80:CA:6F
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 032B820111CAFA2FD6124467C9FDAC78141F517E
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
Signing time: Mon 07 Sep 2026 19:45:47 +0000
ROA not before: Mon 07 Sep 2026 19:40:47 +0000
ROA not after: Mon 06 Sep 2027 19:45:47 +0000
asID: 834
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 10:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:2b:82:01:11:ca:fa:2f:d6:12:44:67:c9:fd:ac:78:14:1f:51:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 7 19:40:47 2026 GMT
Not After : Sep 6 19:45:47 2027 GMT
Subject: CN=CA4AB3C1682E5831297183F2AD2B84F91E80CA6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:9e:18:a1:9a:49:80:60:77:40:1a:64:50:
31:a0:fb:2f:44:5c:7f:0b:c3:66:11:fa:7c:89:f0:
b1:7b:45:57:cf:80:f7:be:49:d5:08:fe:af:2c:0a:
d2:64:b7:28:88:6b:b1:ba:fa:fa:6e:c0:e2:bc:47:
9b:37:65:03:a8:fe:1e:cf:33:6b:8d:fd:15:a5:1a:
c6:f4:49:5c:ef:2a:a6:54:78:9e:27:62:8b:0a:3e:
a7:df:66:14:ed:3c:28:21:ca:4c:33:1f:67:2b:e7:
ad:c2:4c:a7:be:b3:91:5a:be:b0:60:1a:29:de:b1:
e8:cf:9d:03:ba:f4:01:46:dd:f5:f3:5d:03:e8:73:
08:b7:32:f7:06:e9:34:d3:0b:d7:1b:f3:ad:5d:f9:
a1:77:a0:70:3b:1d:ac:39:29:97:d7:b8:22:a9:3b:
4b:ee:98:e7:71:d3:c9:d8:b0:e9:d4:73:b5:3e:01:
d4:c4:28:8b:79:32:be:df:15:e1:9b:de:52:9f:c1:
3a:31:8c:ff:c7:5a:57:90:b4:91:4f:fa:36:c1:e0:
9a:49:c9:c6:c7:3d:db:a9:c4:a8:0c:31:dd:8b:f0:
1d:cb:5f:1d:b8:42:c2:06:7f:b8:d0:b9:52:cd:51:
e9:22:c4:67:da:62:42:79:5a:fb:5b:fa:73:ab:9a:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4A:B3:C1:68:2E:58:31:29:71:83:F2:AD:2B:84:F9:1E:80:CA:6F
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0f:26:40:4f:56:02:e0:56:53:cf:9b:32:9c:62:46:dd:3d:
3d:e3:a5:5a:e2:a5:c0:75:d6:dd:50:9a:92:21:95:ff:f5:48:
53:f1:71:7f:ed:ef:a6:18:f2:82:33:b8:a9:1e:69:be:90:ba:
aa:64:09:ab:ba:cb:2e:6e:69:e9:0c:ae:a8:9e:9f:65:57:ed:
11:bc:60:90:90:cc:9d:d8:b1:4e:32:2b:03:4b:e4:e3:1f:f5:
b6:33:20:bb:c1:9e:51:77:3e:f4:ae:0e:c8:76:2d:fe:73:d4:
53:13:a3:97:68:87:6f:ee:d6:45:f4:75:ee:2f:d1:cd:b3:e7:
8e:47:9a:88:b6:63:19:8e:be:cd:aa:98:20:91:89:f1:50:f9:
f0:ea:c3:ca:b7:89:12:b7:14:2b:6b:00:6f:ab:fd:c6:9c:1b:
c1:13:b2:0d:77:b8:9e:5f:db:0d:2c:c4:5d:c7:f3:88:e7:9b:
60:51:96:70:d8:5f:36:51:de:17:3c:e3:d4:93:c8:34:2f:77:
9d:65:4f:48:e3:5d:52:94:35:be:19:85:7b:d3:d2:70:34:ff:
67:0a:77:05:6e:ae:9c:1c:5b:69:56:7f:38:23:c7:df:ff:df:
bd:1c:b6:50:23:3d:ab:bb:a7:27:af:91:33:2d:4c:f9:0e:7f:
fa:f3:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 01:52:42 2026 by rpki-client