Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e20313339363432.roa
File: 34352e36362e3134382e302f32342d3234203d3e20313339363432.roa (raw, json)
Hash identifier: /GVnDU9j6MFv5cj175X02sce2Nlrcz/y8+CUP3Is03g=
Subject key identifier: B3:EA:84:4C:BD:6F:82:E5:2A:C2:35:E2:08:F8:80:47:CC:C7:8D:7D
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 40AC871E530E5699F1428F12956D23828724CBDB
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e20313339363432.roa
Signing time: Fri 16 Oct 2026 07:55:53 +0000
ROA not before: Fri 16 Oct 2026 07:50:53 +0000
ROA not after: Fri 15 Oct 2027 07:55:53 +0000
asID: 139642
IP address blocks: 45.66.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ac:87:1e:53:0e:56:99:f1:42:8f:12:95:6d:23:82:87:24:cb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 16 07:50:53 2026 GMT
Not After : Oct 15 07:55:53 2027 GMT
Subject: CN=B3EA844CBD6F82E52AC235E208F88047CCC78D7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:bc:45:d1:4d:16:9a:fc:ae:e5:06:d5:1d:
1b:eb:85:c8:34:3f:ab:7f:2d:5d:f1:f6:03:1e:c6:
99:c3:21:f6:a6:4d:2c:a9:94:0b:40:98:fa:40:4e:
4f:89:e0:0b:f7:d4:22:1f:09:dc:33:ec:fc:07:c0:
bf:10:b8:0b:dd:5f:ea:40:1c:bc:46:93:51:5f:93:
cb:3e:bc:f7:1c:9c:79:3b:2c:f8:34:21:99:61:48:
d7:8c:1f:02:cf:d5:ab:3c:23:a5:19:06:00:38:3d:
b6:85:43:56:25:7a:8e:4d:76:35:4b:c9:7f:50:91:
14:e4:f1:69:f7:e8:34:6f:a9:d8:18:3a:f2:1f:da:
ec:38:20:c7:56:96:61:38:9d:a5:5c:de:82:cc:40:
e2:ec:d5:98:52:10:90:ef:28:c8:6b:74:f6:a3:47:
a1:a7:8a:c6:ab:91:3f:c0:0d:12:87:0d:14:d5:93:
ab:b4:8b:09:e8:af:55:f5:77:1d:00:43:51:95:f4:
f9:6a:aa:6b:87:fd:c3:31:9a:6b:11:53:0c:9e:35:
d4:1c:ea:42:a0:ef:66:b7:ec:d0:ac:2b:2e:86:d8:
06:fa:b0:b9:09:6e:b5:98:b6:04:5b:30:0b:25:bf:
8d:e9:30:f9:40:e2:8c:c7:ef:14:6d:02:ac:c2:48:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EA:84:4C:BD:6F:82:E5:2A:C2:35:E2:08:F8:80:47:CC:C7:8D:7D
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e20313339363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.148.0/24
Signature Algorithm: sha256WithRSAEncryption
44:24:96:e6:01:ec:f3:51:04:f2:19:6d:ff:80:f5:8c:14:75:
09:87:c8:ec:a3:fe:8b:f6:d0:92:35:60:f9:31:73:ec:ad:2b:
18:c7:fd:75:f0:e0:3f:67:5d:e3:2e:e6:a9:09:b9:50:8e:a8:
6b:75:8f:4f:fc:78:2a:08:19:2b:60:c8:28:0b:42:32:6c:23:
06:dc:f9:7a:85:69:3f:30:3a:bb:0f:99:f0:85:1b:c4:a5:1a:
85:49:f8:8d:5f:f2:67:c3:4b:e0:07:99:f9:9d:08:29:14:e3:
46:a1:b5:fc:79:00:dd:19:8d:87:47:68:c8:ca:0c:84:a0:9f:
b5:c2:e1:22:f4:b9:a6:f7:cf:93:70:35:4e:53:90:a9:83:7e:
8a:b0:f7:56:ec:c9:69:3c:2c:0e:63:15:35:49:1d:2a:30:6d:
23:d5:03:14:de:51:db:46:49:cd:6f:dd:5d:55:ad:5b:3d:4d:
25:81:78:03:9c:26:d7:7f:e2:cf:c6:42:70:87:5d:5f:79:8c:
39:fd:a1:23:fe:23:33:5a:ae:0c:24:4c:37:a1:d0:8c:87:27:
d5:91:da:86:e3:50:24:93:11:2f:71:95:8f:be:43:36:b3:f2:
42:c3:5e:66:24:86:b5:ae:71:cc:1b:b6:ae:7a:ce:85:a5:91:
07:16:21:d3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQKyHHlMOVpnxQo8SlW0jgocky9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNjEwMTYwNzUwNTNaFw0yNzEwMTUwNzU1NTNaMDMxMTAvBgNV
BAMTKEIzRUE4NDRDQkQ2RjgyRTUyQUMyMzVFMjA4Rjg4MDQ3Q0NDNzhEN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldLxF0U0Wmvyu5QbVHRvrhcg0
P6t/LV3x9gMexpnDIfamTSyplAtAmPpATk+J4Av31CIfCdwz7PwHwL8QuAvdX+pA
HLxGk1Ffk8s+vPccnHk7LPg0IZlhSNeMHwLP1as8I6UZBgA4PbaFQ1Yleo5NdjVL
yX9QkRTk8Wn36DRvqdgYOvIf2uw4IMdWlmE4naVc3oLMQOLs1ZhSEJDvKMhrdPaj
R6GnisarkT/ADRKHDRTVk6u0iwnor1X1dx0AQ1GV9PlqqmuH/cMxmmsRUwyeNdQc
6kKg72a37NCsKy6G2Ab6sLkJbrWYtgRbMAslv43pMPlA4ozH7xRtAqzCSPPlAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUs+qETL1vguUqwjXiCPiAR8zHjX0wHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzQzNTJlMzYzNjJlMzEzNDM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM5MzYzNDMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LUKUMA0GCSqGSIb3DQEBCwUAA4IBAQBEJJbmAezzUQTyGW3/gPWMFHUJh8jso/6L
9tCSNWD5MXPsrSsYx/118OA/Z13jLuapCblQjqhrdY9P/HgqCBkrYMgoC0IybCMG
3Pl6hWk/MDq7D5nwhRvEpRqFSfiNX/Jnw0vgB5n5nQgpFONGobX8eQDdGY2HR2jI
ygyEoJ+1wuEi9Lmm98+TcDVOU5Cpg36KsPdW7MlpPCwOYxU1SR0qMG0j1QMU3lHb
RknNb91dVa1bPU0lgXgDnCbXf+LPxkJwh11feYw5/aEj/iMzWq4MJEw3odCMhyfV
kdqG41AkkxEvcZWPvkM2s/JCw15mJIa1rnHMG7aues6FpZEHFiHT
-----END CERTIFICATE-----
Generated at Sun Oct 18 20:57:27 2026 by rpki-client