Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e20383334.roa
File: 34352e36362e3134382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4ngDhksS2uEuXuhs7cPQIbZMRxA7R6St+xLfFbBMUMc=
Subject key identifier: C3:AF:AA:A3:8C:38:C3:AE:C0:06:68:34:79:ED:FA:83:E5:BC:41:5F
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 20BE741EF12A4CD61AB3FA655BB21439ED05DC77
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e20383334.roa
Signing time: Mon 08 Jun 2026 00:02:43 +0000
ROA not before: Sun 07 Jun 2026 23:57:43 +0000
ROA not after: Mon 07 Jun 2027 00:02:43 +0000
asID: 834
IP address blocks: 45.66.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 02:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:be:74:1e:f1:2a:4c:d6:1a:b3:fa:65:5b:b2:14:39:ed:05:dc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jun 7 23:57:43 2026 GMT
Not After : Jun 7 00:02:43 2027 GMT
Subject: CN=C3AFAAA38C38C3AEC006683479EDFA83E5BC415F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:74:52:a4:15:90:bc:ff:d4:53:fa:8d:f9:
f0:b3:a9:ff:8b:8a:08:cf:12:7d:62:36:6b:4d:51:
8d:ae:f1:ef:ee:58:2d:a6:18:5d:7e:31:30:57:f2:
ef:d7:5b:4d:7d:e4:a1:45:23:3c:c0:9e:41:90:0f:
23:7b:3f:2e:6b:97:48:76:b7:a0:7e:fa:0d:78:30:
49:91:e6:23:3d:e2:bf:d2:d7:8f:c6:94:1d:4d:91:
35:75:2f:b9:a5:83:a1:67:08:e4:df:14:b1:89:31:
27:99:d5:3e:a7:33:3b:8f:6e:f2:6f:0c:8e:6b:2d:
b8:c5:65:0c:8a:7b:8b:8d:44:93:49:b6:f2:ab:50:
41:78:98:58:cd:e1:96:3b:d8:d3:af:d6:40:54:7f:
48:01:91:bb:7c:ec:e9:24:83:0f:e9:81:2c:a6:21:
be:bb:48:26:6b:23:d9:9a:80:e3:85:f3:7f:c4:aa:
53:bd:d4:0a:23:3e:68:8f:93:92:4c:f3:d1:92:63:
27:76:0d:68:b0:86:ee:e4:ce:78:39:a2:b5:53:73:
de:ef:ae:da:3e:d7:45:81:1e:85:18:a0:e7:5c:ec:
c7:4c:82:79:78:e0:77:99:86:8c:da:06:7f:10:60:
87:0a:79:66:cd:9d:11:2a:34:42:6c:81:42:e8:0e:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AF:AA:A3:8C:38:C3:AE:C0:06:68:34:79:ED:FA:83:E5:BC:41:5F
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.148.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:8f:71:d1:50:cc:0d:94:37:8e:7d:c5:bf:72:76:d9:83:43:
76:b6:c2:1f:ef:01:23:ee:7c:ae:2b:1d:7d:23:58:df:14:ea:
c1:07:dd:04:3c:27:f8:22:39:f9:89:89:df:ee:db:c5:15:25:
c4:96:8b:79:b0:e3:6e:4e:6c:ce:b1:af:83:e8:50:91:df:6d:
e4:ee:37:68:2e:01:25:2f:ea:00:74:c9:25:33:db:e3:a7:4e:
eb:2b:2a:b5:24:34:d4:5b:ef:2d:9a:ac:09:e5:fb:89:d4:29:
6c:29:f3:80:53:b8:c9:80:58:cb:7a:78:7a:75:32:cf:99:96:
d9:5f:9b:9b:4a:0b:2b:4f:dc:48:61:e5:b0:77:27:38:31:e1:
27:43:45:43:e7:dc:f3:ff:e9:4b:34:f8:29:f2:26:56:75:a0:
55:c1:da:b1:e6:e1:ec:6a:da:05:19:73:10:10:5b:fb:c9:fb:
b5:9f:a5:be:68:96:90:50:ef:62:9d:f9:23:0f:4e:5c:18:c3:
ba:e9:c5:2b:7d:ef:05:ac:ee:f0:90:d7:f8:cc:7e:f5:d4:12:
30:18:f9:0b:19:f2:a8:23:93:b3:8d:2a:a0:b7:f8:9e:26:d8:
6f:35:fc:fe:34:c1:0b:63:48:b2:2a:70:57:3a:78:7c:d4:2c:
cf:3c:94:19
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUIL50HvEqTNYas/plW7IUOe0F3HcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNjA2MDcyMzU3NDNaFw0yNzA2MDcwMDAyNDNaMDMxMTAvBgNV
BAMTKEMzQUZBQUEzOEMzOEMzQUVDMDA2NjgzNDc5RURGQTgzRTVCQzQxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIsXRSpBWQvP/UU/qN+fCzqf+L
igjPEn1iNmtNUY2u8e/uWC2mGF1+MTBX8u/XW0195KFFIzzAnkGQDyN7Py5rl0h2
t6B++g14MEmR5iM94r/S14/GlB1NkTV1L7mlg6FnCOTfFLGJMSeZ1T6nMzuPbvJv
DI5rLbjFZQyKe4uNRJNJtvKrUEF4mFjN4ZY72NOv1kBUf0gBkbt87Okkgw/pgSym
Ib67SCZrI9magOOF83/EqlO91AojPmiPk5JM89GSYyd2DWiwhu7kzng5orVTc97v
rto+10WBHoUYoOdc7MdMgnl44HeZhozaBn8QYIcKeWbNnREqNEJsgULoDnVdAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUw6+qo4w4w67ABmg0ee36g+W8QV8wHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzQzNTJlMzYzNjJlMzEzNDM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUKUMA0G
CSqGSIb3DQEBCwUAA4IBAQC8j3HRUMwNlDeOfcW/cnbZg0N2tsIf7wEj7nyuKx19
I1jfFOrBB90EPCf4Ijn5iYnf7tvFFSXElot5sONuTmzOsa+D6FCR323k7jdoLgEl
L+oAdMklM9vjp07rKyq1JDTUW+8tmqwJ5fuJ1ClsKfOAU7jJgFjLenh6dTLPmZbZ
X5ubSgsrT9xIYeWwdyc4MeEnQ0VD59zz/+lLNPgp8iZWdaBVwdqx5uHsatoFGXMQ
EFv7yfu1n6W+aJaQUO9infkjD05cGMO66cUrfe8FrO7wkNf4zH711BIwGPkLGfKo
I5OzjSqgt/ieJthvNfz+NMELY0iyKnBXOnh81CzPPJQZ
-----END CERTIFICATE-----
Generated at Mon Jun 8 16:58:54 2026 by rpki-client