Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36332e302f32342d3234203d3e20323134343833.roa
File: 34352e3134392e36332e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: mQg7Rad/kKZcSLKWUMcvftwu7Gok/Q3zJLvicbmuesI=
Subject key identifier: 26:11:B4:39:4C:3B:CE:31:C1:60:EE:B1:6A:9A:AB:06:5C:4D:32:A1
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 56492D5E982E47883DC63F6B358414BEAAA53BFF
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36332e302f32342d3234203d3e20323134343833.roa
Signing time: Thu 03 Sep 2026 05:30:35 +0000
ROA not before: Thu 03 Sep 2026 05:25:35 +0000
ROA not after: Thu 02 Sep 2027 05:30:35 +0000
asID: 214483
IP address blocks: 45.149.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:25:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:49:2d:5e:98:2e:47:88:3d:c6:3f:6b:35:84:14:be:aa:a5:3b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Sep 3 05:25:35 2026 GMT
Not After : Sep 2 05:30:35 2027 GMT
Subject: CN=2611B4394C3BCE31C160EEB16A9AAB065C4D32A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:51:c1:cc:aa:36:3a:37:d6:15:f8:6e:86:
0c:c2:c8:90:99:0a:2d:2f:dd:b7:e9:60:70:3c:49:
5b:a5:15:e6:25:35:f5:72:bf:96:ca:89:f2:34:e4:
6a:b1:42:39:36:c6:1b:63:47:4a:5a:51:4f:a1:a6:
0d:61:c9:7b:67:0f:9b:9d:67:53:8d:11:85:c3:73:
c8:6f:c7:9a:e0:34:bb:e3:4b:15:a1:b6:f9:bb:73:
71:e1:54:5e:15:4c:49:92:08:c2:fe:4b:ab:56:0f:
89:eb:be:51:64:7f:b0:7f:3b:13:c9:f8:fc:4c:6d:
df:24:ab:15:af:dd:a7:45:ab:52:d6:47:a6:8b:41:
7b:66:21:32:3d:17:2e:e6:02:59:c0:09:71:b9:5a:
e8:f5:e5:aa:e8:53:da:fc:b8:7e:87:18:89:6f:50:
c6:e8:78:c9:aa:d7:1b:b8:9c:c7:e9:2d:1e:a6:a7:
a7:3e:7a:01:75:ae:ed:6d:5d:ed:c5:93:a8:a7:c7:
f9:ad:ae:b2:b6:32:6d:b1:82:ce:93:6b:6a:fc:b6:
31:9f:a9:86:a6:af:43:e0:8d:a3:94:3b:55:a1:43:
2c:64:32:26:69:c0:d4:a6:71:97:fb:24:ff:56:5a:
bb:b0:4d:35:38:f6:ec:34:6d:28:40:7b:1a:ad:e3:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:11:B4:39:4C:3B:CE:31:C1:60:EE:B1:6A:9A:AB:06:5C:4D:32:A1
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36332e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e1:27:f5:66:4f:92:5c:95:9e:7d:c4:84:ff:0d:94:b5:42:
c8:17:96:08:fd:3d:95:3f:25:7e:34:31:7a:69:65:54:61:54:
1d:35:4e:65:4d:0b:64:0d:a4:67:dd:a6:b5:38:ab:9f:98:42:
23:84:30:70:61:66:71:68:b2:6f:2f:70:1f:03:d3:13:c3:fc:
7f:1b:6d:63:e9:ff:29:78:46:f3:f3:20:72:2f:e4:d7:fd:04:
84:ca:cc:36:9e:4d:f0:b3:5f:1f:21:b2:b0:dc:6a:b1:0d:e6:
81:b7:5b:7d:b1:86:d5:96:73:bf:78:27:9f:12:1d:52:3d:63:
37:70:ee:34:23:46:97:14:64:e1:59:58:bd:05:3c:b6:30:22:
67:b4:c4:48:76:3b:46:52:df:d3:16:cb:40:20:78:4e:de:cb:
67:99:7b:22:75:b3:d4:2a:ab:56:d3:a4:9d:38:f9:da:a2:ac:
d6:df:c8:48:96:96:b8:cb:38:b8:8f:bf:c4:70:11:bb:2a:24:
cf:08:6f:b4:e5:29:3a:2f:62:ba:4a:f3:71:f2:94:41:81:be:
de:93:ca:eb:7d:f1:b3:44:da:1a:82:e4:83:1c:87:79:d4:0e:
07:46:3a:16:75:bb:4a:37:49:b8:f9:1e:20:3e:9b:53:a1:a1:
34:a1:2d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:29:56 2026 by rpki-client