Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e20383334.roa
File: 34352e36362e36302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: atjmZHyN0fpnZVZKw7T2mpLloOaroEYoclDUcL8HXvA=
Subject key identifier: 74:95:BB:8E:4D:F3:0F:48:A3:0D:7E:37:91:F9:74:69:E3:E0:0D:E0
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 6D20C8F846520828370B19A67D1ECC8FD9CC3A62
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e20383334.roa
Signing time: Mon 15 Jun 2026 00:06:00 +0000
ROA not before: Mon 15 Jun 2026 00:01:00 +0000
ROA not after: Mon 14 Jun 2027 00:06:00 +0000
asID: 834
IP address blocks: 45.66.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 23:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:20:c8:f8:46:52:08:28:37:0b:19:a6:7d:1e:cc:8f:d9:cc:3a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Jun 15 00:01:00 2026 GMT
Not After : Jun 14 00:06:00 2027 GMT
Subject: CN=7495BB8E4DF30F48A30D7E3791F97469E3E00DE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:fc:e3:6e:ed:34:8d:66:b6:9d:32:81:be:
42:1c:b2:61:34:4b:b9:7c:05:45:83:d9:84:30:9d:
f8:1b:6d:30:1b:5a:b1:9d:b7:7c:db:3a:a0:fc:bf:
3d:04:8c:2e:5b:e4:c0:ac:e6:ef:4a:ce:10:fc:dd:
83:1c:ec:2a:bb:4a:aa:b3:82:32:82:ca:56:0e:d7:
a1:f8:33:43:92:2c:28:18:22:3a:b2:59:37:09:2f:
46:72:28:f0:c6:7d:7a:78:36:5e:c2:93:29:48:a5:
24:e0:72:fa:50:b5:84:3f:3f:f3:4c:ce:b4:35:1b:
e3:14:17:d2:0e:7c:65:d4:1e:5e:1a:a3:d8:8a:2d:
bd:8c:0f:d2:9e:58:7f:65:15:85:e3:47:78:df:18:
0a:11:cb:14:47:41:b2:08:b9:df:55:40:37:ef:4c:
74:7a:7a:df:37:aa:d5:1f:e2:c9:b7:be:b4:61:ed:
d9:7b:2c:59:21:c9:c9:2e:8f:e2:e8:83:43:f7:7a:
94:5a:a1:b8:d3:74:48:c4:72:ad:1d:1e:a0:c2:9c:
86:14:c4:00:67:a4:d0:f3:06:35:98:ed:40:03:da:
ba:c6:d2:0b:8c:15:4d:cd:29:ee:7d:34:6a:04:2c:
ab:4f:77:11:91:5c:68:9d:f6:15:3e:e0:00:cf:12:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:95:BB:8E:4D:F3:0F:48:A3:0D:7E:37:91:F9:74:69:E3:E0:0D:E0
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.60.0/24
Signature Algorithm: sha256WithRSAEncryption
26:36:25:24:b9:3d:4c:1f:2d:92:2b:47:e4:ef:14:1a:7e:a2:
fe:da:72:53:67:4b:98:69:cc:f3:ba:50:fe:89:a4:5e:2b:f2:
d8:3d:7d:3d:cf:56:cd:26:e3:14:ee:3f:f1:f3:3f:32:e9:98:
e2:07:ea:1f:99:4d:b9:c4:40:0e:20:11:d5:dc:db:6e:9f:78:
29:a6:91:ed:86:28:fe:f6:4d:eb:39:59:27:4b:e5:c3:53:d5:
bf:a1:f0:bf:6c:b1:5c:ce:a1:7a:52:c7:19:25:9c:db:1b:7a:
67:bc:91:74:53:60:32:4a:37:f9:75:93:8a:39:77:0d:99:9b:
54:78:c5:9f:71:fa:2a:3c:91:ce:54:70:7c:ba:e2:d4:0b:81:
a0:15:a0:bc:31:90:7e:4b:f1:7f:f7:43:c4:49:c8:a0:e3:8b:
0f:2d:1e:4c:3b:59:27:fa:38:ba:d9:4d:c3:d8:fa:1a:93:ae:
8d:ae:58:bb:5d:51:6a:e8:3e:33:4d:7b:71:c6:b9:19:6f:1a:
94:de:21:7b:9b:90:0c:0b:74:95:c1:5a:a9:a9:e4:27:5b:27:
45:17:86:22:cf:7b:bd:90:60:b3:04:b7:17:09:b5:bd:7b:85:
51:17:86:4e:85:48:54:68:d6:29:68:75:f4:ba:dc:c8:62:ef:
35:3c:2c:87
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUbSDI+EZSCCg3CxmmfR7Mj9nMOmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw
YjVkNDgxMDAeFw0yNjA2MTUwMDAxMDBaFw0yNzA2MTQwMDA2MDBaMDMxMTAvBgNV
BAMTKDc0OTVCQjhFNERGMzBGNDhBMzBEN0UzNzkxRjk3NDY5RTNFMDBERTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/vzjbu00jWa2nTKBvkIcsmE0
S7l8BUWD2YQwnfgbbTAbWrGdt3zbOqD8vz0EjC5b5MCs5u9KzhD83YMc7Cq7Sqqz
gjKCylYO16H4M0OSLCgYIjqyWTcJL0ZyKPDGfXp4Nl7CkylIpSTgcvpQtYQ/P/NM
zrQ1G+MUF9IOfGXUHl4ao9iKLb2MD9KeWH9lFYXjR3jfGAoRyxRHQbIIud9VQDfv
THR6et83qtUf4sm3vrRh7dl7LFkhyckuj+Log0P3epRaobjTdEjEcq0dHqDCnIYU
xABnpNDzBjWY7UAD2rrG0guMFU3NKe59NGoELKtPdxGRXGid9hU+4ADPEgpLAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUdJW7jk3zD0ijDX43kfl0aePgDeAwHwYDVR0j
BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi
ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0
ZFNCQS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgxYjdmMDgt
ZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvMzQzNTJlMzYzNjJlMzYzMDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1CPDANBgkq
hkiG9w0BAQsFAAOCAQEAJjYlJLk9TB8tkitH5O8UGn6i/tpyU2dLmGnM87pQ/omk
Xivy2D19Pc9WzSbjFO4/8fM/MumY4gfqH5lNucRADiAR1dzbbp94KaaR7YYo/vZN
6zlZJ0vlw1PVv6Hwv2yxXM6helLHGSWc2xt6Z7yRdFNgMko3+XWTijl3DZmbVHjF
n3H6KjyRzlRwfLri1AuBoBWgvDGQfkvxf/dDxEnIoOOLDy0eTDtZJ/o4utlNw9j6
GpOuja5Yu11Raug+M017cca5GW8alN4he5uQDAt0lcFaqankJ1snRReGIs97vZBg
swS3Fwm1vXuFUReGToVIVGjWKWh19LrcyGLvNTwshw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:52 2026 by rpki-client