Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e20313533393437.roa
File: 34352e3134392e36302e302f32342d3234203d3e20313533393437.roa (raw, json)
Hash identifier: gSN25HkEtMjIWn0ueMSBP8TgGr3AI8WTv9Ee9qBEEI8=
Subject key identifier: 37:11:3B:29:89:3B:E1:40:D4:04:A2:8A:2A:25:54:C7:19:B7:72:F0
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 2034FCE72EA1981C48FCE9C1DC3159EA80C5FD8D
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e20313533393437.roa
Signing time: Fri 31 Jul 2026 05:50:38 +0000
ROA not before: Fri 31 Jul 2026 05:45:38 +0000
ROA not after: Fri 30 Jul 2027 05:50:38 +0000
asID: 153947
IP address blocks: 45.149.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:34:fc:e7:2e:a1:98:1c:48:fc:e9:c1:dc:31:59:ea:80:c5:fd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Jul 31 05:45:38 2026 GMT
Not After : Jul 30 05:50:38 2027 GMT
Subject: CN=37113B29893BE140D404A28A2A2554C719B772F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:78:85:f9:8c:95:37:14:68:1d:8f:95:0d:ba:
fc:53:28:de:0c:87:49:12:29:85:2c:23:5b:c2:41:
d3:d3:ba:00:48:b6:2a:72:d7:49:a2:26:3f:b8:5f:
14:86:4c:5f:23:ea:04:c6:0d:b6:09:d2:8e:4a:0a:
07:3d:53:8c:c3:c3:22:d9:cb:58:3f:2d:30:16:e9:
ea:2a:6a:c0:66:f9:8e:2e:42:47:83:12:98:f5:88:
80:38:5a:cf:f1:57:d4:55:5e:83:22:77:16:81:75:
9e:f2:28:f8:b4:de:43:6d:e4:f4:8f:2d:c6:20:06:
7a:db:bc:bc:9f:8a:d9:d8:9e:e2:ab:83:d0:f9:50:
60:1f:b7:3c:47:b6:f7:0f:ac:05:f2:b0:11:14:22:
4f:43:2c:8d:cb:38:9b:68:f3:1f:d8:f4:2d:47:df:
e9:e1:67:83:56:40:cf:30:e2:2c:cf:40:4e:fa:58:
bb:d6:91:6c:74:f9:37:03:53:d3:a8:28:51:58:2b:
7d:a6:5e:52:09:06:56:63:1f:3c:b0:b9:44:43:48:
8d:aa:2d:82:81:ab:f5:90:a4:d3:48:fd:7a:13:9a:
62:b5:e2:25:92:df:fe:f8:22:6e:4e:21:1c:ce:8f:
28:2d:24:a2:60:cc:d9:1d:c5:d1:de:4d:34:ca:e9:
f8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:11:3B:29:89:3B:E1:40:D4:04:A2:8A:2A:25:54:C7:19:B7:72:F0
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e20313533393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:37:0f:c8:5c:9d:7b:d3:40:e0:b6:47:27:68:ab:1e:21:dc:
0e:2c:48:2e:71:29:c9:ea:18:58:1b:63:56:18:28:a3:8d:c3:
7c:06:fe:f6:1f:a9:3e:1f:09:35:6d:eb:5a:aa:f6:42:e9:a7:
f1:19:7e:7c:2a:52:76:30:87:d7:48:4b:33:81:86:85:07:a1:
5f:38:29:cb:c5:42:f2:ab:98:f0:b1:b8:27:dd:61:04:50:79:
18:75:13:e0:c1:b6:4c:52:ce:72:c7:2e:02:31:e9:38:bf:db:
85:e3:b3:2e:0d:16:62:f6:39:b3:c4:f2:5b:d7:78:eb:6d:39:
1d:2b:0b:c7:6f:8d:e9:97:82:6c:63:65:78:28:bc:7e:29:48:
d7:40:e4:87:9f:2c:a7:df:90:e7:ea:28:8e:42:a6:21:d1:ef:
c5:f7:06:ae:2d:1e:16:54:9c:87:9a:eb:94:9b:a1:d4:dc:d9:
9c:77:e2:b7:83:07:ea:05:a4:5b:ae:23:d5:85:7b:18:b8:40:
8a:cb:7d:f4:af:56:a2:1d:bf:60:e5:d6:a1:ab:7d:97:a9:87:
75:e2:dc:10:1c:f5:3e:a3:64:14:71:00:b7:56:1e:d6:c5:68:
3f:62:5f:db:9b:79:94:5f:d0:36:04:84:ec:24:4f:a5:2a:56:
6c:ee:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 16:25:02 2026 by rpki-client