Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e20383334.roa
File: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: kKHtz0k6gKz2ynWNxARUHl2rZIM063MQ9IVBvgE6B80=
Subject key identifier: F2:AE:77:27:F2:60:B6:B7:81:28:55:A3:51:E9:D8:C5:98:F4:36:A1
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 50F28C1EAEACAADE93A5BEC66BD48C03379E6CC2
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e20383334.roa
Signing time: Thu 12 Nov 2026 18:50:57 +0000
ROA not before: Thu 12 Nov 2026 18:45:57 +0000
ROA not after: Thu 11 Nov 2027 18:50:57 +0000
asID: 834
IP address blocks: 45.149.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f2:8c:1e:ae:ac:aa:de:93:a5:be:c6:6b:d4:8c:03:37:9e:6c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Nov 12 18:45:57 2026 GMT
Not After : Nov 11 18:50:57 2027 GMT
Subject: CN=F2AE7727F260B6B7812855A351E9D8C598F436A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:75:79:81:3a:51:df:cf:86:99:f6:a8:e4:
bc:e4:d3:3e:fb:02:27:65:f8:67:67:cb:b8:a6:a7:
b4:b5:47:93:54:a2:ce:7f:2b:7d:ac:ec:2a:1a:ac:
29:a6:cc:a1:53:e5:1e:b6:e3:ee:ff:14:19:3e:01:
32:36:fc:97:0a:3d:f5:ef:17:a5:ee:61:23:c2:35:
ab:09:ac:c7:30:64:3c:63:29:73:bd:2c:79:12:f6:
5d:97:1b:e2:9f:0d:22:b5:0f:9d:4e:6e:e8:09:e1:
aa:b6:7c:cb:b3:b1:13:7c:36:fa:3a:47:69:6d:21:
cc:9c:7a:2c:27:b1:80:5f:41:2c:bf:8a:e5:36:ac:
aa:3e:6f:20:f6:66:aa:67:14:04:5d:c8:80:53:94:
39:22:f1:f1:fd:60:79:9b:c0:10:d1:b2:ac:80:09:
ad:4f:07:31:c6:6d:d1:56:8d:c7:8b:82:3d:d9:f7:
85:c5:86:ea:e4:e6:fe:2a:2b:64:37:9c:b9:aa:62:
c1:7b:a9:7c:4a:6a:73:ac:19:7b:0f:23:da:ba:51:
8f:a5:41:3d:2e:ec:97:1e:fa:9b:6b:37:b8:10:79:
da:43:ae:a3:06:26:69:90:84:74:a1:85:35:e6:e6:
b6:3a:73:17:c4:b4:de:d4:f7:4c:a5:79:96:44:d9:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AE:77:27:F2:60:B6:B7:81:28:55:A3:51:E9:D8:C5:98:F4:36:A1
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a9:e8:38:40:df:35:0e:9b:55:70:a5:35:24:00:28:7b:c0:
45:4e:24:ff:64:67:96:9f:bd:23:02:c6:a9:cb:b9:b5:f4:86:
4c:75:fc:b0:45:23:b9:e6:7a:5f:c8:44:fb:44:cc:f2:74:be:
7e:66:f2:cf:4e:11:01:c9:11:66:54:c8:76:26:21:ab:b0:a7:
f3:12:a8:7f:cb:38:ee:e3:71:35:56:0e:e4:c9:10:b5:f8:b9:
74:54:9b:4a:47:e6:ea:06:39:b9:aa:7e:20:5a:4e:6e:4a:37:
03:e3:33:a2:b3:cf:c3:0d:2b:8c:83:ab:56:2b:b8:0e:0f:41:
57:c6:47:fc:d0:6e:5b:dd:01:08:e5:ec:6f:28:fe:ef:5f:7e:
6c:db:c7:a1:ee:2a:ab:1f:69:12:21:bd:36:7f:a7:c3:60:5d:
be:bb:54:f9:c2:95:6b:50:8d:a4:4f:d2:3c:9b:ee:16:3f:7a:
9c:bd:c5:08:13:a5:57:38:83:48:12:a6:8c:0b:68:16:09:48:
e4:b0:93:db:91:9c:63:ef:9b:e5:1b:6e:3e:24:94:36:90:16:
72:b8:4c:3d:ef:1b:f5:a1:c3:fb:67:07:b4:23:14:ad:19:85:
ca:22:86:6a:e4:c9:f3:ff:8a:a5:03:8c:16:c9:9c:28:f9:bf:
7a:a5:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:01:37 2026 by rpki-client