Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa
File: 34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa (raw, json)
Hash identifier: zgGogM+qScD7d85ZF42zwboByqu52VU6wbBhgFYaNlY=
Subject key identifier: 4A:D8:11:0A:EC:0D:C8:BC:82:D8:28:A0:43:83:3B:EB:08:3C:D0:7F
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 7AEBC1BDB6B06FC962A120816798D732B5FC7C12
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa
Signing time: Sat 10 Oct 2026 15:49:36 +0000
ROA not before: Sat 10 Oct 2026 15:44:36 +0000
ROA not after: Sat 09 Oct 2027 15:49:36 +0000
asID: 212477
IP address blocks: 45.149.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:eb:c1:bd:b6:b0:6f:c9:62:a1:20:81:67:98:d7:32:b5:fc:7c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Oct 10 15:44:36 2026 GMT
Not After : Oct 9 15:49:36 2027 GMT
Subject: CN=4AD8110AEC0DC8BC82D828A043833BEB083CD07F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:55:f1:0d:c7:b3:50:2a:c0:af:60:f2:40:88:
8c:bc:ee:18:8b:77:c6:73:1b:56:ec:e8:88:54:00:
ac:7d:8c:a7:45:b4:4e:65:66:e2:b5:b7:6f:85:49:
00:b4:af:68:53:6c:94:e4:ac:9a:11:28:29:82:1e:
ca:20:53:b4:3f:89:9a:f2:eb:d9:82:b9:cc:90:a4:
43:23:24:f4:be:ec:f2:a6:89:f0:8d:ff:b2:b5:ea:
75:58:3d:1a:94:6c:f9:7e:12:95:2f:03:b7:81:48:
6e:27:c9:e1:a9:53:a3:51:3d:8d:72:2e:36:a7:3d:
b5:9a:76:cd:c9:1d:e1:a5:b2:3e:77:35:0f:74:43:
18:ed:a9:43:32:ad:21:e5:fe:b8:67:af:d0:47:18:
8b:8b:98:62:c5:bc:80:1b:c7:64:8b:66:75:32:a6:
54:98:7c:c9:ee:f5:b6:a2:74:9b:b3:43:36:d7:f0:
22:a2:78:69:ef:15:99:47:2a:aa:2a:dd:6f:33:db:
ba:92:d3:10:85:9a:aa:f5:02:1c:f6:a1:72:52:d9:
21:67:a5:58:50:d1:24:ec:70:b9:2f:05:36:91:3f:
09:b2:fe:10:92:6a:05:b8:4d:2e:34:f1:21:e0:01:
0f:79:7e:b6:6d:96:e8:11:36:00:27:bf:9d:ae:71:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D8:11:0A:EC:0D:C8:BC:82:D8:28:A0:43:83:3B:EB:08:3C:D0:7F
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:42:01:13:b6:1e:be:45:2e:24:e4:49:8d:93:10:19:5d:55:
b8:4b:d6:dd:37:f8:a2:85:9a:22:bc:aa:f7:3f:40:cf:e0:b5:
c3:fd:fc:a8:b8:44:a1:7f:2e:c0:5c:b1:f5:a2:1a:3f:b7:d3:
51:55:18:3d:1f:13:31:27:08:45:85:4e:fe:55:b1:df:34:db:
f8:9f:58:ec:19:6a:9f:ab:07:13:72:55:2a:77:a1:a7:09:01:
cf:a3:bc:ca:28:70:e8:ab:65:67:9d:b3:d6:7b:23:f8:7b:33:
bc:bf:b7:0c:f8:78:22:b3:d8:84:32:60:c1:fd:77:3b:bd:2b:
ef:23:94:84:e8:96:06:79:a2:bd:f9:b7:2f:9b:f7:a2:53:c3:
69:7d:0d:6e:ba:67:48:0b:f9:38:0b:ee:ad:cc:ab:30:bb:8a:
a8:c2:8f:5e:30:9e:8e:29:d1:bf:d0:06:aa:ee:6d:d4:65:c2:
2d:2b:66:96:e6:36:3c:ea:26:1a:8f:06:fa:e9:b6:d2:3c:f7:
58:94:c5:06:f4:18:d0:00:99:18:42:bd:aa:41:9a:38:9b:82:
69:bb:4e:8f:d9:e6:71:de:b6:a3:a5:85:a2:35:40:9a:5f:a4:
1b:00:04:fc:28:be:0a:f7:78:8f:f8:9f:8a:1b:29:c7:cd:a9:
6b:b4:51:0d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUeuvBvbawb8lioSCBZ5jXMrX8fBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4
YjJlZGVlNDAeFw0yNjEwMTAxNTQ0MzZaFw0yNzEwMDkxNTQ5MzZaMDMxMTAvBgNV
BAMTKDRBRDgxMTBBRUMwREM4QkM4MkQ4MjhBMDQzODMzQkVCMDgzQ0QwN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiVfENx7NQKsCvYPJAiIy87hiL
d8ZzG1bs6IhUAKx9jKdFtE5lZuK1t2+FSQC0r2hTbJTkrJoRKCmCHsogU7Q/iZry
69mCucyQpEMjJPS+7PKmifCN/7K16nVYPRqUbPl+EpUvA7eBSG4nyeGpU6NRPY1y
LjanPbWads3JHeGlsj53NQ90QxjtqUMyrSHl/rhnr9BHGIuLmGLFvIAbx2SLZnUy
plSYfMnu9baidJuzQzbX8CKieGnvFZlHKqoq3W8z27qS0xCFmqr1Ahz2oXJS2SFn
pVhQ0STscLkvBTaRPwmy/hCSagW4TS408SHgAQ95frZtlugRNgAnv52ucXynAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUStgRCuwNyLyC2CigQ4M76wg80H8wHwYDVR0j
BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3
OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z
dTN1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt
ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzQzNTJlMzEzNDM5MmUzMTM1
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzNDM3Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtlZowDQYJKoZIhvcNAQELBQADggEBAE1CARO2Hr5FLiTkSY2TEBldVbhL1t03
+KKFmiK8qvc/QM/gtcP9/Ki4RKF/LsBcsfWiGj+301FVGD0fEzEnCEWFTv5Vsd80
2/ifWOwZap+rBxNyVSp3oacJAc+jvMoocOirZWeds9Z7I/h7M7y/twz4eCKz2IQy
YMH9dzu9K+8jlITolgZ5or35ty+b96JTw2l9DW66Z0gL+TgL7q3MqzC7iqjCj14w
no4p0b/QBqrubdRlwi0rZpbmNjzqJhqPBvrpttI891iUxQb0GNAAmRhCvapBmjib
gmm7To/Z5nHetqOlhaI1QJpfpBsABPwovgr3eI/4n4obKcfNqWu0UQ0=
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:25:59 2026 by rpki-client