Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e20313337383937.roa
File: 34352e36362e3134382e302f32342d3234203d3e20313337383937.roa (raw, json)
Hash identifier: e52/ZEZkONe0FdPltQje0PDwVIXr7SAsT9P6KKB1QMg=
Subject key identifier: 34:AF:1A:CF:A1:A8:11:8B:E6:61:55:12:4C:69:37:BE:97:D1:78:EA
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 263A1CEE3F948FE62749CD06171FC2C824796533
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e20313337383937.roa
Signing time: Wed 15 Jul 2026 12:00:56 +0000
ROA not before: Wed 15 Jul 2026 11:55:56 +0000
ROA not after: Wed 14 Jul 2027 12:00:56 +0000
asID: 137897
IP address blocks: 45.66.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:3a:1c:ee:3f:94:8f:e6:27:49:cd:06:17:1f:c2:c8:24:79:65:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 15 11:55:56 2026 GMT
Not After : Jul 14 12:00:56 2027 GMT
Subject: CN=34AF1ACFA1A8118BE66155124C6937BE97D178EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:6f:bb:89:e8:02:f2:81:b6:77:99:0c:05:
5d:0d:11:e7:11:45:fa:b2:b9:82:17:43:a7:05:de:
6a:e7:b6:41:ec:8f:a7:3a:6d:78:b7:d6:24:01:14:
f4:39:f4:85:48:ee:fb:9c:93:a1:a5:12:e2:16:03:
32:be:7d:a2:df:70:c1:6c:e2:52:e8:dc:d1:e1:69:
33:e6:38:8f:f2:c0:a6:51:29:1f:07:3c:dd:f7:32:
b6:4b:39:6e:d7:09:d3:23:09:2b:d7:b9:bd:45:f4:
6c:4c:12:63:d5:6f:b4:56:97:99:ea:50:1e:c6:95:
23:f1:74:94:75:24:ad:2a:53:61:91:6c:0b:46:9d:
7c:53:34:fa:3f:58:6a:79:9c:da:64:32:66:75:59:
71:58:62:0e:4d:f6:ff:a7:91:e8:64:12:7a:6f:6f:
0e:14:d5:bd:b8:7f:99:44:ea:f6:e8:77:9e:8b:2c:
0d:bd:39:fc:e3:6e:02:89:3f:76:df:1f:e6:fd:78:
c3:b3:84:0a:55:4f:8d:84:7f:c7:f3:f4:3d:d7:97:
ac:55:c5:79:aa:a1:1f:d6:7d:fc:bb:c9:19:9d:86:
0d:7e:62:9d:35:ba:26:48:9a:ab:ad:64:4b:d3:73:
3a:f5:0c:0e:9d:58:67:ee:af:f8:c2:d4:fc:95:8a:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AF:1A:CF:A1:A8:11:8B:E6:61:55:12:4C:69:37:BE:97:D1:78:EA
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e20313337383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.148.0/24
Signature Algorithm: sha256WithRSAEncryption
55:29:36:2f:95:53:af:e4:f6:cc:cb:56:66:ad:e0:13:1b:3d:
6d:b3:f6:37:87:7a:8d:fd:ce:37:fb:a9:3f:4a:67:5e:b6:4b:
60:51:eb:02:b2:a7:58:c1:31:c6:7e:ab:55:35:36:41:b6:d7:
51:15:18:c9:3a:c4:16:1d:90:df:ba:82:25:c6:33:4b:07:30:
6b:9b:a7:76:9a:00:7b:15:3e:c3:35:3b:fc:8c:41:66:b1:ff:
e7:e3:89:35:3a:ec:56:82:37:83:69:a9:57:57:bb:b9:9f:c1:
1a:64:78:79:b5:21:c7:ba:71:72:a8:75:a1:fc:0b:86:54:85:
2c:ad:75:87:d5:cb:46:ac:ff:9b:c1:ea:2a:68:4d:c9:56:1e:
37:52:7c:de:99:9a:dd:f1:27:04:51:d1:66:81:0f:04:2f:68:
84:aa:e3:95:46:4a:ee:d7:86:4c:f0:f6:e5:fd:eb:0e:6c:b4:
12:64:1b:93:d9:8a:46:33:04:c0:38:09:2e:c5:5d:f2:9f:92:
d5:36:f7:f4:b9:60:19:7a:c0:0f:6d:4f:11:27:5d:a2:b0:50:
c1:fe:88:d0:94:02:3b:01:a9:81:73:6c:b1:12:29:2e:ee:07:
54:a7:b6:8e:5c:74:06:fa:69:9a:c3:a1:bf:21:82:18:5b:ec:
c0:c3:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:10 2026 by rpki-client