Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e20313432323430.roa
File: 34352e36362e36302e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier: O2zlu9PnS4SC1q+mg3Mn33JIix4GdmXvNYG3utR66a8=
Subject key identifier: 33:2F:DE:79:8D:CF:03:9F:EC:18:52:73:80:63:DE:AE:03:76:4C:33
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 77D12266821E2C2C6902DFF2709711885C1E80C7
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e20313432323430.roa
Signing time: Tue 11 Aug 2026 08:37:28 +0000
ROA not before: Tue 11 Aug 2026 08:32:28 +0000
ROA not after: Tue 10 Aug 2027 08:37:28 +0000
asID: 142240
IP address blocks: 45.66.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:d1:22:66:82:1e:2c:2c:69:02:df:f2:70:97:11:88:5c:1e:80:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Aug 11 08:32:28 2026 GMT
Not After : Aug 10 08:37:28 2027 GMT
Subject: CN=332FDE798DCF039FEC1852738063DEAE03764C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:ca:7a:94:84:c1:29:ba:85:03:99:09:e8:
44:f3:b2:21:da:a6:59:1b:97:94:40:0b:c4:84:a3:
e4:36:63:fc:7d:e2:ff:34:61:2c:a4:74:db:66:0d:
96:47:17:b1:4d:1d:08:23:3f:92:68:46:71:e6:86:
98:69:38:b0:1f:8a:8e:33:6c:32:ac:0e:2c:18:d4:
76:8c:78:34:95:65:1b:95:f2:ac:89:24:97:5c:bc:
51:fc:02:44:f7:f4:7d:e9:f5:fa:ac:db:31:e4:b2:
0d:e2:55:73:ac:b8:43:99:41:d3:25:74:76:2d:a9:
d5:fa:cf:23:0c:c7:68:b5:91:e2:71:6a:2f:be:ac:
ff:6e:e1:3f:ef:3d:76:35:9a:a2:0d:8b:44:68:dc:
d5:6e:ec:9e:da:be:b0:f9:6d:7e:77:17:07:0f:5c:
87:2d:60:1f:e5:11:16:7b:09:db:b2:77:44:e6:8e:
69:30:c8:e2:0f:f1:9d:fb:54:9f:84:dd:ad:bd:f0:
b7:5d:02:93:d2:1b:28:9f:f4:3b:e8:fe:32:f0:50:
67:bc:aa:7f:91:5a:43:0d:34:cf:19:72:9a:c9:15:
83:94:00:9f:cd:a6:e2:36:ce:19:09:22:33:df:b5:
d6:68:84:fa:ef:5c:02:d5:4b:ae:a3:1d:83:c8:ce:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2F:DE:79:8D:CF:03:9F:EC:18:52:73:80:63:DE:AE:03:76:4C:33
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e20313432323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.60.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b2:1b:d9:6b:ca:b8:92:7b:b2:f8:cb:9f:39:13:29:17:c8:
ce:0e:fd:c5:2b:51:15:18:40:02:41:60:44:90:dd:8f:16:63:
5c:45:b5:1f:ac:56:f6:3f:b7:f1:c3:a9:f0:e5:0b:f8:ef:af:
44:d3:bd:f0:fd:8d:16:4b:d2:75:28:a3:0f:52:8d:f4:f0:e6:
bc:bd:7f:b3:d8:97:5c:ce:49:38:70:47:b1:9f:86:e9:56:c6:
ae:ee:d7:6e:75:0e:03:53:88:91:b4:a4:b8:38:ad:4c:d3:c5:
92:a8:bb:50:4f:1e:63:e5:1c:ea:23:93:15:bf:01:a0:18:50:
90:57:c2:9e:97:dd:86:2a:91:1f:44:63:7b:8c:2a:5f:77:00:
09:28:ff:2a:d8:67:ba:10:23:18:8d:a5:07:4c:72:16:61:a2:
c3:5c:91:24:ca:fd:03:86:31:9f:a3:24:bc:4d:df:57:39:25:
09:90:86:7f:42:18:d4:a4:bb:d7:4a:a1:42:94:42:2e:fb:70:
4c:c1:06:69:28:32:a3:d1:ed:f4:96:4e:90:5f:33:33:4e:d5:
86:38:57:b1:65:d1:cd:48:51:24:e7:3d:d5:7b:91:52:77:f7:
44:99:ff:8d:d3:c7:12:e8:36:f8:f1:c8:4b:13:9d:eb:30:10:
0c:31:94:44
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUd9EiZoIeLCxpAt/ycJcRiFwegMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw
YjVkNDgxMDAeFw0yNjA4MTEwODMyMjhaFw0yNzA4MTAwODM3MjhaMDMxMTAvBgNV
BAMTKDMzMkZERTc5OERDRjAzOUZFQzE4NTI3MzgwNjNERUFFMDM3NjRDMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Wsp6lITBKbqFA5kJ6ETzsiHa
plkbl5RAC8SEo+Q2Y/x94v80YSykdNtmDZZHF7FNHQgjP5JoRnHmhphpOLAfio4z
bDKsDiwY1HaMeDSVZRuV8qyJJJdcvFH8AkT39H3p9fqs2zHksg3iVXOsuEOZQdMl
dHYtqdX6zyMMx2i1keJxai++rP9u4T/vPXY1mqINi0Ro3NVu7J7avrD5bX53FwcP
XIctYB/lERZ7Cduyd0TmjmkwyOIP8Z37VJ+E3a298LddApPSGyif9Dvo/jLwUGe8
qn+RWkMNNM8ZcprJFYOUAJ/NpuI2zhkJIjPftdZohPrvXALVS66jHYPIzm2ZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUMy/eeY3PA5/sGFJzgGPergN2TDMwHwYDVR0j
BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi
ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0
ZFNCQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgxYjdmMDgt
ZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvMzQzNTJlMzYzNjJlMzYzMDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMjMyMzQzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1C
PDANBgkqhkiG9w0BAQsFAAOCAQEAFLIb2WvKuJJ7svjLnzkTKRfIzg79xStRFRhA
AkFgRJDdjxZjXEW1H6xW9j+38cOp8OUL+O+vRNO98P2NFkvSdSijD1KN9PDmvL1/
s9iXXM5JOHBHsZ+G6VbGru7XbnUOA1OIkbSkuDitTNPFkqi7UE8eY+Uc6iOTFb8B
oBhQkFfCnpfdhiqRH0Rje4wqX3cACSj/KthnuhAjGI2lB0xyFmGiw1yRJMr9A4Yx
n6MkvE3fVzklCZCGf0IY1KS710qhQpRCLvtwTMEGaSgyo9Ht9JZOkF8zM07VhjhX
sWXRzUhRJOc91XuRUnf3RJn/jdPHEug2+PHISxOd6zAQDDGURA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 14:18:37 2026 by rpki-client