Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36372e302f32342d3234203d3e203633303235.roa
File: 34352e39352e36372e302f32342d3234203d3e203633303235.roa (raw, json)
Hash identifier: LGfw5/6aXnmIWIyfciJRoFtHT0aH9nW9LjnnzdcJt+4=
Subject key identifier: 77:88:11:7F:4E:2C:D2:FF:16:4D:3D:AF:F5:D1:6A:F2:B0:00:B8:71
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 6CEBBF3568527AF45A80BE613161D817A2A20A58
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36372e302f32342d3234203d3e203633303235.roa
Signing time: Tue 03 Mar 2026 14:46:45 +0000
ROA not before: Tue 03 Mar 2026 14:41:45 +0000
ROA not after: Tue 02 Mar 2027 14:46:45 +0000
asID: 63025
IP address blocks: 45.95.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:eb:bf:35:68:52:7a:f4:5a:80:be:61:31:61:d8:17:a2:a2:0a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Mar 3 14:41:45 2026 GMT
Not After : Mar 2 14:46:45 2027 GMT
Subject: CN=7788117F4E2CD2FF164D3DAFF5D16AF2B000B871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:e1:6e:d8:25:52:56:cb:56:3f:98:95:ed:
52:78:a5:91:11:70:a3:fe:bb:1c:0f:0c:65:0d:33:
82:39:be:9c:61:3a:e2:18:8b:58:4a:4f:78:10:1f:
3e:6c:89:93:a6:38:1c:82:88:76:2e:49:b2:3e:97:
c5:43:e2:1b:7c:5f:49:17:3e:4a:18:f3:00:ad:06:
bc:a4:6c:a3:67:ae:17:e5:7d:06:bb:7b:6c:79:cd:
ce:a5:fb:be:08:11:c9:f0:6b:ca:74:80:1a:43:70:
a6:c2:e0:bf:8b:b3:ac:00:c2:74:37:95:49:77:da:
72:0d:81:4a:9c:3e:14:4d:f7:47:2d:d6:4c:f8:69:
aa:75:a1:6e:7d:67:f8:8f:a0:cf:be:4f:15:89:a8:
e1:be:e3:25:bb:ec:36:a2:d4:86:11:87:d2:a5:6d:
62:60:ed:7e:4d:ee:f2:a3:cf:39:5f:24:8f:06:b1:
59:af:dc:69:5c:8b:64:37:67:de:63:11:d4:07:1a:
f8:ae:32:39:58:09:f8:5a:a0:17:b4:15:1c:ff:55:
1d:18:a8:48:a3:78:85:4a:33:7b:e3:b0:99:89:27:
4a:fd:4a:36:cd:b3:73:cd:bc:a7:82:dc:74:6a:3d:
3f:59:b8:a7:d1:1c:72:38:0c:7d:27:8d:14:4b:0f:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:88:11:7F:4E:2C:D2:FF:16:4D:3D:AF:F5:D1:6A:F2:B0:00:B8:71
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36372e302f32342d3234203d3e203633303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6d:ad:3c:c3:11:75:21:b4:33:35:ef:7f:7f:ee:49:24:be:
11:29:34:bb:5d:0f:94:90:26:4f:3d:e2:f3:f0:a8:c2:1d:99:
e0:82:2a:69:82:6c:dd:01:88:e4:d9:12:ac:47:aa:21:25:d1:
a3:33:cd:e6:47:66:d3:2c:77:07:ee:71:d9:51:48:99:c1:27:
88:8d:d0:9d:8b:d6:35:18:a4:22:10:27:1b:e3:ac:89:61:b4:
8e:bd:1a:ec:eb:54:14:f0:66:7a:2c:ce:4e:39:aa:0a:d3:c8:
1f:d7:6f:53:81:c7:12:b4:72:5b:8f:16:69:af:d5:63:d7:9f:
67:fc:13:de:c7:5c:c8:a8:e2:28:27:eb:dc:6d:d9:d6:99:c6:
0a:5a:37:b7:e5:40:78:59:fc:09:9c:d8:e5:36:c7:d5:1e:1a:
96:aa:74:8e:a8:42:84:52:8f:c4:6e:3f:cf:56:8c:1e:cd:68:
c4:90:ba:90:18:f2:fd:35:f2:e4:90:83:93:ba:f8:fa:50:02:
6f:34:72:37:2e:57:62:ec:0d:94:07:26:d9:da:15:c6:69:1a:
58:54:ae:bf:87:a2:bb:d0:a6:bf:fb:10:5d:5a:20:ae:77:e7:
4c:b2:f8:14:88:de:be:81:6e:4e:6d:73:93:28:c9:bd:d3:c1:
6f:6e:ee:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 23:08:27 2026 by rpki-client