Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137332e302f32342d3234203d3e20343032323134.roa
File: 34352e382e3137332e302f32342d3234203d3e20343032323134.roa (raw, json)
Hash identifier: hRMpZt50rHA/kNyP9JTpxG/2+AVVgI2kmc0YKSYBUlY=
Subject key identifier: B6:34:A6:9D:FF:4F:52:A8:9F:69:42:4B:CD:7B:BD:FB:36:A4:3B:34
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 1F1CD1C562FE437EEECA8EFDE01FE9CFCD72DA66
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137332e302f32342d3234203d3e20343032323134.roa
Signing time: Fri 17 Apr 2026 05:54:32 +0000
ROA not before: Fri 17 Apr 2026 05:49:32 +0000
ROA not after: Fri 16 Apr 2027 05:54:32 +0000
asID: 402214
IP address blocks: 45.8.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1c:d1:c5:62:fe:43:7e:ee:ca:8e:fd:e0:1f:e9:cf:cd:72:da:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Apr 17 05:49:32 2026 GMT
Not After : Apr 16 05:54:32 2027 GMT
Subject: CN=B634A69DFF4F52A89F69424BCD7BBDFB36A43B34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:b8:28:ff:17:b2:d5:58:0e:aa:b9:4e:34:
b1:c1:f6:de:6e:e8:5d:0e:fa:87:95:56:c5:96:93:
17:05:0d:63:34:22:37:c6:78:ce:43:fb:d7:23:a3:
a7:45:6a:c9:a0:65:86:a5:6a:6a:9b:40:78:42:ae:
9f:27:a8:0c:e9:fd:7f:c8:6d:55:c0:63:a0:3f:04:
98:12:df:81:69:f2:df:5d:6c:eb:15:ea:6f:d1:82:
f9:6c:3d:ba:3d:02:43:d5:25:1c:16:64:05:4c:7e:
00:60:15:5a:6c:a9:a0:7b:65:99:02:43:06:0d:97:
9b:e2:4b:3b:ea:75:23:45:23:53:36:fa:49:f3:3d:
62:d5:50:06:c5:e1:c2:e2:ea:85:f4:e2:52:4b:51:
0c:b0:84:46:71:2f:0b:81:a9:36:c9:fa:01:7a:41:
2d:8e:bd:f2:e4:36:15:d2:a7:f1:9b:1f:75:98:dc:
44:f7:f3:f3:b6:fa:39:30:fc:6f:34:9d:f8:05:9e:
f7:b8:98:15:92:9a:14:42:68:ce:84:53:a8:72:06:
b6:1a:ee:1f:49:c3:2c:ac:6c:17:2f:a2:9d:e2:99:
72:5d:c0:30:7a:23:4d:c7:ed:cc:b3:f8:a3:e6:29:
c3:13:d7:aa:5c:73:ee:d7:8d:37:23:5c:3e:32:cf:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:34:A6:9D:FF:4F:52:A8:9F:69:42:4B:CD:7B:BD:FB:36:A4:3B:34
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137332e302f32342d3234203d3e20343032323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.173.0/24
Signature Algorithm: sha256WithRSAEncryption
76:18:b9:7e:7c:b8:c2:97:72:cb:8f:ed:f6:b6:d3:fd:1e:32:
4d:3d:51:9b:cf:21:f7:de:3f:41:99:2d:f2:d3:c4:58:9e:5f:
06:14:21:db:9e:5f:04:e0:ab:87:22:6b:eb:27:f6:ea:ce:6c:
47:66:81:af:a5:4b:a6:93:91:10:bd:61:e8:85:0f:7d:8a:68:
5a:d9:31:1e:87:12:93:a1:25:8d:6a:85:1d:f0:85:c8:0a:0d:
1a:38:0f:81:12:cb:21:26:af:02:bd:a4:f5:f8:1c:05:2c:d3:
80:50:e2:4a:d5:8a:c5:5d:6f:1c:d4:22:28:35:c9:eb:1a:e6:
7d:97:3c:05:bf:cb:98:59:04:ff:24:3b:ca:d9:6a:fd:95:01:
af:10:5e:95:fd:b1:03:6a:55:34:4e:24:5e:3e:ac:bf:3d:21:
d8:6a:d0:03:96:ac:99:15:a2:ae:77:0c:1e:9f:0f:bd:0c:b7:
f5:6f:4a:f8:d6:f0:20:68:07:25:d8:18:23:e0:48:52:91:41:
ea:69:3a:66:99:ab:25:b5:35:2a:89:f9:66:1a:e9:53:0c:e4:
dd:08:6f:6a:33:c2:a4:ab:c0:9b:8f:c7:9b:19:a9:5b:7b:c6:
ff:b4:e1:95:a4:00:f3:c1:5c:75:45:56:df:ca:36:24:d1:73:
05:b2:ff:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:18 2026 by rpki-client