Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
File: 34352e39352e36362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9W6AYYpbQ7Kax/Y1pqCqW4LWKKYI7vCeHOrRaz3C4tU=
Subject key identifier: 17:F4:03:E1:1F:45:51:2E:60:84:6F:D3:4D:39:99:16:03:09:DB:9A
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 33269985A9409971CA204D1984D2B3FD18BCBB36
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
Signing time: Thu 15 Oct 2026 18:41:38 +0000
ROA not before: Thu 15 Oct 2026 18:36:38 +0000
ROA not after: Thu 14 Oct 2027 18:41:38 +0000
asID: 834
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:26:99:85:a9:40:99:71:ca:20:4d:19:84:d2:b3:fd:18:bc:bb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 15 18:36:38 2026 GMT
Not After : Oct 14 18:41:38 2027 GMT
Subject: CN=17F403E11F45512E60846FD34D3999160309DB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:3c:72:90:9f:84:8b:16:9f:07:4c:0f:9b:
48:90:c7:bc:32:3f:1e:0a:fd:15:b6:72:dd:1b:51:
95:ec:10:ca:5b:e1:ed:fb:86:b0:c3:d9:12:ea:f8:
65:34:df:4c:a7:ff:68:d5:1f:81:e0:ff:5d:fb:b9:
a6:5b:13:d8:e1:0a:90:82:64:f2:a4:83:c2:21:e5:
0e:37:d0:7f:7a:d6:83:dc:63:e6:98:85:43:aa:9f:
dd:c6:cc:56:6a:da:bf:8c:79:90:35:23:b9:c8:6f:
0a:ff:1a:a6:0f:e4:a3:25:29:78:67:4e:55:60:ea:
f3:ee:06:80:44:e1:73:73:47:37:71:3d:98:da:89:
75:2b:d6:a0:6c:d9:45:f1:29:81:70:f6:94:e7:09:
4b:76:ee:ef:87:19:3e:a1:b6:71:28:5b:ff:40:ee:
71:29:06:1e:a0:71:f6:be:31:e9:44:2a:1b:91:bb:
ea:65:19:bd:65:dc:b5:80:b9:57:e8:42:03:25:23:
10:8a:75:8c:73:89:0b:94:d3:c6:d5:a5:b7:0d:b4:
4d:0e:84:65:8d:9f:60:fa:21:53:68:e3:1a:4b:54:
72:dc:57:4f:29:46:38:d3:bb:12:aa:39:69:c6:26:
77:99:d0:0a:b2:97:8e:f0:c4:15:3e:50:5f:64:cd:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F4:03:E1:1F:45:51:2E:60:84:6F:D3:4D:39:99:16:03:09:DB:9A
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:6d:10:fc:86:09:16:5a:f9:1d:57:49:fd:40:3f:1b:d6:48:
25:cd:3e:bf:69:3d:57:79:43:63:7d:5e:60:e7:0d:56:74:38:
af:a0:09:f1:c7:b4:02:f6:fe:f8:bc:11:d1:d4:42:2b:b9:76:
f3:0d:91:f2:12:71:6c:24:99:1a:5c:e8:52:cf:9f:17:79:5f:
2a:2f:15:89:96:63:2e:d2:97:61:73:69:fb:f7:e0:4f:c7:fc:
98:50:00:a4:46:bb:be:07:3b:aa:96:46:39:6a:d9:d4:73:29:
63:eb:33:a6:f0:da:02:41:88:50:bc:01:07:a0:f9:25:42:d8:
be:21:96:e7:96:f6:48:b5:5a:19:d8:b9:88:6c:65:03:27:7d:
7c:1d:e0:5d:18:0b:a4:ed:21:5d:ac:f1:53:76:5c:bb:74:c1:
57:2e:75:5c:22:62:ff:34:ea:79:b8:cb:82:41:88:dc:ef:e6:
2f:fc:8e:06:45:aa:7b:46:6c:75:32:a9:ab:18:89:a2:da:32:
02:d4:6c:c3:82:2e:5c:51:05:6a:f6:f3:42:94:ff:11:bb:c5:
da:c5:7b:9a:e6:76:84:a9:34:19:37:18:02:1e:03:53:3d:19:
cc:eb:e7:56:61:ec:4b:9e:f6:5e:22:da:10:54:91:e5:d9:0b:
96:14:3a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:04:18 2026 by rpki-client