Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e203536363535.roa
File: 34352e3134392e36322e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier: r8RebyDBX1c2EfsDM5lJBeFHvHiWokHApPKdAlvBbeQ=
Subject key identifier: 06:F4:D4:72:11:CA:8A:FB:B1:8C:EF:2A:A7:65:DA:78:71:D9:46:D3
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 2634F2C07D3D12B8BE32F947A0A8388EBDADC2FE
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e203536363535.roa
Signing time: Mon 17 Aug 2026 22:08:00 +0000
ROA not before: Mon 17 Aug 2026 22:03:00 +0000
ROA not after: Mon 16 Aug 2027 22:08:00 +0000
asID: 56655
IP address blocks: 45.149.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:34:f2:c0:7d:3d:12:b8:be:32:f9:47:a0:a8:38:8e:bd:ad:c2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Aug 17 22:03:00 2026 GMT
Not After : Aug 16 22:08:00 2027 GMT
Subject: CN=06F4D47211CA8AFBB18CEF2AA765DA7871D946D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:e4:f7:d1:5f:a6:d1:e2:27:48:03:82:26:
c6:98:3c:b2:f8:fe:0e:b3:87:ba:56:7e:67:bc:a1:
4d:34:50:79:fe:29:76:ea:49:4d:2d:29:0a:76:5a:
33:59:99:b8:60:58:91:d1:8c:f4:fa:69:52:e6:c2:
24:10:1a:4e:85:4e:4d:b7:12:c3:80:70:be:8d:fa:
09:f5:1f:ab:6c:72:4d:c4:e7:8c:1c:99:e3:9a:4b:
bc:54:3a:c6:8a:21:b4:c5:fe:b0:87:1e:15:a3:57:
e0:e9:6d:80:f6:31:72:8f:80:6b:86:c8:a1:5d:c0:
4f:19:ae:c0:b0:62:3c:45:f2:a6:5c:1d:cb:e2:40:
5c:41:2b:76:c6:8d:c9:76:d0:b8:a4:16:3b:f4:b1:
13:88:36:5a:a8:f2:f6:eb:a9:3d:74:7e:26:f0:b3:
26:59:90:37:ed:10:46:50:c9:7e:90:bb:50:50:26:
6c:85:7d:04:c6:f3:da:4b:a7:5d:8e:14:71:46:ce:
bf:c6:6d:43:3c:ed:f5:fd:28:f8:45:56:eb:49:56:
99:a2:35:49:e9:e3:f8:b9:cc:ee:8e:d7:cf:94:16:
2a:06:3e:41:33:ac:dc:fb:7c:b9:98:09:fb:39:04:
ce:6f:0b:a4:46:40:17:a3:e9:a4:4a:bf:df:37:16:
d4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F4:D4:72:11:CA:8A:FB:B1:8C:EF:2A:A7:65:DA:78:71:D9:46:D3
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e203536363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b8:12:a8:83:aa:cf:1b:a4:92:21:f6:36:13:e6:00:c8:ea:
56:44:8e:07:7e:f7:c3:37:18:c4:4f:88:4f:c6:f1:02:71:64:
ea:c3:3c:32:aa:22:28:24:a0:0b:b3:34:81:ea:08:27:ed:c3:
2e:1e:21:64:d3:d5:6e:8a:f3:d0:d9:b4:85:10:af:b0:e0:60:
b6:52:60:cc:05:7f:40:b6:80:00:e1:df:a9:cd:61:03:68:4c:
36:34:93:21:35:6f:1e:f9:f5:76:25:da:af:7a:2d:44:81:21:
ed:d1:35:05:c1:d4:68:12:74:7d:e3:cf:93:d4:64:ef:3e:fe:
63:d6:88:b4:6b:08:11:1f:73:72:6d:79:f4:cb:9e:8a:20:53:
dd:20:4a:26:9e:97:02:ac:d2:91:ae:77:22:de:c3:0a:1c:a9:
49:ba:c4:d3:bb:2b:cb:1b:ba:d4:76:47:d5:85:87:f5:fe:d0:
1e:08:79:5a:fa:af:3f:d6:7b:b4:98:f2:81:f2:8e:9e:a5:7c:
76:85:8c:88:a9:59:76:b9:ab:4a:bb:89:75:7d:67:30:2a:81:
4d:f5:f3:aa:eb:73:46:a1:b1:c4:57:fb:38:cd:76:5e:cc:a4:
51:a9:6a:d0:82:6b:cd:45:5e:59:55:b8:b6:4f:08:91:98:6a:
1a:f7:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 16:25:04 2026 by rpki-client