Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa
File: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier: V4JNlPHt9GYe6uHPs4b02Df/splFF1TrehGP4K2WsXQ=
Subject key identifier: F5:BE:D8:BF:2C:B7:04:01:BA:67:7F:39:42:E9:70:1F:6D:D9:1D:AB
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 251C1136B677364AA467DF71961FC975E3CDFC33
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa
Signing time: Fri 24 Apr 2026 17:47:06 +0000
ROA not before: Fri 24 Apr 2026 17:42:06 +0000
ROA not after: Fri 23 Apr 2027 17:47:06 +0000
asID: 265919
IP address blocks: 45.149.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1c:11:36:b6:77:36:4a:a4:67:df:71:96:1f:c9:75:e3:cd:fc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Apr 24 17:42:06 2026 GMT
Not After : Apr 23 17:47:06 2027 GMT
Subject: CN=F5BED8BF2CB70401BA677F3942E9701F6DD91DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fa:12:28:e8:9b:ea:75:f0:45:e4:ce:e4:dc:
0b:7d:fc:4e:ef:b6:3f:68:ee:aa:92:9d:70:be:b1:
65:70:38:3f:08:ef:e6:31:ad:85:9a:7a:c6:8c:f3:
f8:6f:73:a5:c0:3c:b3:c9:20:b7:6b:88:83:8e:cf:
ed:83:f5:d0:75:63:2d:d0:e7:3b:12:9b:c8:9e:da:
ca:25:86:56:92:58:86:18:10:bc:69:09:4a:40:f2:
c5:c5:67:14:b4:be:bc:4d:3c:86:76:29:f3:f0:4a:
6c:3b:bf:1b:3a:25:63:df:6d:21:70:48:6a:95:91:
61:07:3d:22:87:79:6b:5d:5b:3c:f6:59:da:81:88:
dd:40:75:ec:72:bc:d8:88:1b:74:4b:62:5c:f6:42:
0b:88:9a:e4:10:da:57:b9:54:43:d6:9c:06:f0:72:
a9:74:69:ef:e4:bf:cc:78:a5:61:14:9f:ba:2c:db:
5a:ad:6c:02:f6:13:e0:d3:6a:24:c0:b0:28:db:ae:
84:59:7b:d8:9b:8c:bf:de:9e:45:78:88:c1:ec:b9:
17:fd:63:43:3c:73:3b:db:eb:77:a7:96:14:61:13:
76:39:ac:70:eb:d0:38:a0:41:2d:c5:ff:46:04:38:
26:75:85:09:f3:1d:43:07:b8:c1:67:4e:9a:5b:f8:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BE:D8:BF:2C:B7:04:01:BA:67:7F:39:42:E9:70:1F:6D:D9:1D:AB
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
11:4c:b9:3c:c8:fa:3a:a2:70:0b:bc:78:ad:ff:3e:70:74:cd:
66:7d:a6:59:d7:28:dd:4e:0e:df:53:69:04:b7:15:f2:71:7b:
8e:68:be:47:f0:1f:82:ca:3b:1b:db:25:98:25:e4:6c:ea:16:
b1:ed:54:e6:06:b6:81:31:2c:db:a8:93:7e:18:82:c9:3c:3c:
36:f5:54:ed:e4:76:9e:2d:dc:27:9e:3e:1a:c2:68:b4:af:fb:
7a:1b:23:ea:1b:d7:3c:c4:b5:97:80:84:e9:29:ce:72:c7:6d:
e8:20:63:95:55:24:cf:f0:5a:0c:06:8c:90:b3:31:96:71:21:
87:a2:40:20:eb:2f:1b:b8:2c:1d:ef:c4:ee:5d:66:0e:24:d4:
61:47:54:bb:74:82:85:32:e2:a0:dc:15:cb:b2:56:2c:c0:88:
8a:b1:76:dc:ed:d4:e5:58:a6:fb:78:97:4f:91:d5:eb:06:71:
35:66:f0:fd:1f:e8:ab:7c:dd:58:6d:ff:d4:ce:79:51:85:8b:
a9:ba:1b:ba:3d:73:8c:9b:de:47:b1:b1:03:f4:7c:2e:f7:33:
8f:e6:af:14:d8:05:ab:49:b0:c0:90:20:70:c3:4f:0a:9f:6d:
48:d1:a7:a1:86:80:64:3f:bd:22:ce:38:f1:3a:98:3a:dd:75:
1b:f8:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:09:22 2026 by rpki-client