Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e2039323934.roa
File: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (raw, json)
Hash identifier: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=
Subject key identifier: E8:EA:F1:A7:2A:AA:F6:57:50:C8:06:02:2B:9F:CD:86:6B:F4:05:A8
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 5FDA635420DF296C2518653266700CD9E90B7ED7
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e2039323934.roa
Signing time: Thu 06 Nov 2025 05:41:55 +0000
ROA not before: Thu 06 Nov 2025 05:36:55 +0000
ROA not after: Thu 05 Nov 2026 05:41:55 +0000
asID: 9294
IP address blocks: 45.13.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 18:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:da:63:54:20:df:29:6c:25:18:65:32:66:70:0c:d9:e9:0b:7e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Nov 6 05:36:55 2025 GMT
Not After : Nov 5 05:41:55 2026 GMT
Subject: CN=E8EAF1A72AAAF65750C806022B9FCD866BF405A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:09:28:97:2e:e3:63:08:6e:22:7d:b6:c9:
e8:20:0a:21:0c:b8:16:22:18:09:f5:e8:76:9d:f6:
ab:da:67:d7:78:a0:ba:20:9f:50:df:1f:41:ea:74:
7a:66:47:22:c7:e7:7a:41:fb:26:88:66:ef:20:92:
b0:f4:f0:81:84:b4:05:9d:32:5c:3a:a1:c3:5b:9f:
82:b8:5f:08:90:3a:17:22:7b:f0:71:de:c0:58:ba:
3f:bf:35:78:0a:90:c6:02:61:85:38:64:1a:2e:3b:
00:5f:bb:86:81:5b:20:85:2d:87:fd:09:92:ac:e4:
74:c3:6a:f4:d9:f3:15:13:e8:86:aa:ab:7d:67:76:
e9:51:95:ce:6b:88:ba:93:aa:92:38:e8:38:2a:6c:
b0:b9:62:39:e8:24:c5:25:05:c5:f4:94:e2:fb:c7:
ac:6a:45:1e:ee:a2:1e:e5:84:cf:2c:48:64:f1:2f:
23:26:e9:c9:d2:40:6b:64:9c:d1:53:92:6f:ea:47:
3a:78:9f:b3:4c:01:24:9a:ef:e5:ac:dd:f8:46:7c:
4b:d8:c4:61:8d:b3:69:a1:59:3c:1d:82:43:87:83:
d9:bd:21:3f:dc:84:13:8b:9a:ab:ae:63:0c:69:bf:
c6:3b:bd:3d:15:58:47:3c:d5:b4:37:5d:ba:53:fb:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EA:F1:A7:2A:AA:F6:57:50:C8:06:02:2B:9F:CD:86:6B:F4:05:A8
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e2039323934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.150.0/24
Signature Algorithm: sha256WithRSAEncryption
53:6a:12:92:f6:d1:2e:7f:01:0a:eb:24:71:f5:2d:8e:3b:a6:
18:cd:10:b5:ec:e2:05:11:ee:e5:ab:4b:19:fa:e2:f6:5e:10:
f6:ac:cc:e8:ae:48:fd:5c:85:d8:06:2e:4b:ef:e2:fb:df:09:
14:85:9f:60:8e:58:61:42:43:05:c2:87:a8:11:75:f2:e6:af:
65:9b:70:e5:75:48:af:e1:56:07:e5:17:ce:ea:be:bc:6a:27:
a1:15:df:9b:a6:9a:7e:ed:ab:a8:5a:b5:d5:ac:6b:bc:f9:a2:
a9:de:47:23:23:c2:48:8d:69:16:f2:a2:8f:d9:2b:f9:9c:38:
83:81:00:f3:30:c3:c2:23:c4:fa:e6:d8:8c:c9:da:65:34:77:
fe:0f:20:23:27:73:0d:5a:53:64:f2:93:ed:f0:fb:a9:76:39:
83:a2:9a:2d:30:06:82:3c:3d:60:5a:8f:fb:55:b5:b8:32:c6:
6f:1f:14:cd:95:20:31:aa:04:ce:85:f8:00:64:72:09:b6:97:
93:4b:f6:7f:b5:bb:a7:67:73:63:b6:49:7a:f4:93:16:d4:ae:
b1:e2:46:04:3f:2e:a4:12:c7:d5:30:53:e0:41:fd:3d:be:67:
d4:8f:97:0b:41:99:04:83:e9:b3:d2:e3:23:c1:cf:4d:97:fa:
ab:38:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 10:25:01 2025 by rpki-client