Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e20313532363036.roa
File: 34352e36362e3134382e302f32342d3234203d3e20313532363036.roa (raw, json)
Hash identifier: EKOgOzOtGvJuJZn6XL7WpW4xB1wA+9sc389+2dbv3Ag=
Subject key identifier: 04:09:43:D7:37:6C:A6:C0:3D:C8:E8:9B:5F:61:C3:6E:4D:92:CB:C5
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 703657C4E4C0738ED94D16156AD93E554F8E63D6
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e20313532363036.roa
Signing time: Mon 26 Oct 2026 07:03:45 +0000
ROA not before: Mon 26 Oct 2026 06:58:45 +0000
ROA not after: Mon 25 Oct 2027 07:03:45 +0000
asID: 152606
IP address blocks: 45.66.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:36:57:c4:e4:c0:73:8e:d9:4d:16:15:6a:d9:3e:55:4f:8e:63:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 26 06:58:45 2026 GMT
Not After : Oct 25 07:03:45 2027 GMT
Subject: CN=040943D7376CA6C03DC8E89B5F61C36E4D92CBC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:8c:12:89:15:c7:a7:d4:f7:43:88:92:33:
e9:49:34:3c:c4:45:f0:c4:00:61:3c:41:db:da:c9:
f3:e3:5b:76:d2:91:f9:2f:f6:42:72:5e:4b:78:aa:
7a:65:d0:63:eb:22:c5:e5:f1:13:29:e3:f7:3d:82:
a0:44:6b:a2:0e:1b:4b:28:84:b5:5e:f9:59:13:62:
d3:ff:de:d2:e5:e8:f2:d0:39:c4:91:af:7c:38:53:
03:1b:80:6e:bc:f5:6f:e1:e0:65:20:bf:e8:86:a6:
89:fc:a1:43:33:c1:8d:cd:74:c7:15:85:5a:52:64:
8f:c1:22:8c:63:59:be:af:65:ca:03:16:9a:10:be:
5e:88:42:e8:1f:a4:e9:a6:1c:8f:35:e0:5a:6e:57:
28:c1:58:a6:4b:4b:74:1f:67:a0:c7:42:2d:cf:f5:
2a:70:6c:08:0b:f5:4a:4c:a6:bb:88:ef:50:82:75:
b0:67:5b:3d:64:88:e2:66:52:83:e8:21:dc:f4:45:
30:1d:5d:fd:25:a1:73:ff:0c:df:54:af:6e:5b:37:
b7:8c:11:f8:52:fd:f0:57:04:a9:a8:cd:08:e8:20:
9e:ee:e3:0e:72:d2:48:a6:2a:7f:d9:cd:8d:71:81:
49:3f:7b:34:7c:eb:0d:f6:63:df:a8:ed:52:bd:cc:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:09:43:D7:37:6C:A6:C0:3D:C8:E8:9B:5F:61:C3:6E:4D:92:CB:C5
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e20313532363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.148.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:d0:56:07:38:e3:b5:f9:3d:c8:11:4e:e2:d0:71:ff:d7:8f:
e5:ad:8a:f1:a0:d3:0e:a4:8a:78:ab:e4:df:41:2f:93:f7:8b:
cd:bc:55:de:93:15:4d:52:76:dc:4b:c9:fd:60:f7:e1:41:53:
2d:26:1e:e0:1c:b6:21:dc:94:75:d1:78:f5:bc:19:13:f2:a0:
e4:23:df:e5:eb:7a:d4:4d:2b:6f:f5:74:2a:10:a2:34:e0:2e:
00:1e:ae:3c:7c:cb:43:55:80:29:77:04:67:a7:d9:a4:62:df:
6a:c8:19:de:d9:ca:20:d1:45:25:55:3b:35:90:d7:b5:a4:bf:
88:4c:2f:f2:29:eb:55:85:b3:26:05:2b:f6:0b:67:5a:44:ca:
8b:1c:28:f6:a4:b4:ca:43:15:ac:9e:80:05:89:d4:1d:0f:e0:
3b:49:e3:00:eb:4b:cf:fa:0e:09:2c:d4:75:06:76:ae:f4:e3:
d5:b1:75:38:2a:5d:b4:b3:78:38:5a:53:26:8c:34:47:3f:17:
7e:9b:35:a8:f2:0b:ed:63:d9:2f:65:be:51:fd:74:c3:7c:5b:
08:d2:a6:30:ac:e5:97:fb:a2:d5:c1:dd:27:c8:1d:c4:0e:eb:
77:85:62:69:c8:1e:cb:3e:1d:ab:9a:67:d9:c5:38:75:fa:5a:
fe:05:af:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:20 2026 by rpki-client