Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e362e302f32342d3234203d3e20313532363938.roa
File: 34352e3135302e362e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier: 0f0g57ANaSNWFblr3Xq7rc9QFWRViCaK3NBWvI9WBjA=
Subject key identifier: FF:5F:68:B1:F4:7E:DE:8D:95:D0:70:00:2A:65:CB:01:3E:B5:89:96
Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial: 4AC5207F51131A383309CAACB54A96DDD1EBB9F4
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e362e302f32342d3234203d3e20313532363938.roa
Signing time: Tue 11 Aug 2026 13:47:57 +0000
ROA not before: Tue 11 Aug 2026 13:42:57 +0000
ROA not after: Tue 10 Aug 2027 13:47:57 +0000
asID: 152698
IP address blocks: 45.150.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c5:20:7f:51:13:1a:38:33:09:ca:ac:b5:4a:96:dd:d1:eb:b9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Validity
Not Before: Aug 11 13:42:57 2026 GMT
Not After : Aug 10 13:47:57 2027 GMT
Subject: CN=FF5F68B1F47EDE8D95D070002A65CB013EB58996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:0b:48:cf:ce:3f:b7:dc:4d:8d:16:14:ea:
b0:46:8f:96:08:5d:51:dc:5b:58:70:9b:9d:54:74:
09:a2:24:77:73:c4:3d:47:36:bb:b3:ba:10:4f:e0:
0c:d5:15:d1:21:29:c7:8c:90:f8:00:cb:c5:7e:e0:
eb:87:64:46:da:bb:8d:3b:f4:73:0c:ab:6e:a2:f4:
85:ba:77:ac:20:50:5b:0a:42:38:cc:be:ea:2b:a4:
4c:40:fd:6d:eb:40:e6:83:dc:45:dd:32:f4:2b:0c:
13:e6:29:4c:4a:a7:49:52:5d:ba:a1:1c:d5:ea:26:
da:bd:b0:b8:f2:47:f6:2b:58:d2:df:0e:96:ec:fc:
41:98:44:49:ab:f9:0b:5a:2c:f3:45:c1:0b:50:ec:
38:23:2f:57:73:3f:6f:a4:4a:3e:f7:f4:45:66:2a:
1f:4a:c9:e6:39:cb:f7:eb:49:fa:38:00:00:2c:9e:
6a:4f:24:86:f0:e8:b4:7e:f6:50:c7:14:3f:55:6a:
65:d6:17:9a:37:f5:f7:31:0e:0a:f1:f0:b3:3e:c2:
a1:92:f4:34:ef:a9:a7:60:17:84:07:57:68:8b:37:
03:64:9b:c4:88:a0:93:9b:b5:8f:b2:b9:37:8c:5a:
0c:35:a5:45:21:68:05:95:8a:69:92:67:18:6f:1c:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5F:68:B1:F4:7E:DE:8D:95:D0:70:00:2A:65:CB:01:3E:B5:89:96
X509v3 Authority Key Identifier:
keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e362e302f32342d3234203d3e20313532363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.6.0/24
Signature Algorithm: sha256WithRSAEncryption
08:27:d4:65:c1:02:05:bb:78:03:3f:08:10:29:e3:d3:dd:c8:
82:b3:95:5f:1f:e0:93:2e:ef:f0:66:29:61:7f:17:bb:28:80:
6d:a3:10:28:ec:a9:18:3e:fc:de:a5:2b:63:5e:64:01:67:68:
8a:04:33:a0:d7:7c:aa:a5:8e:7d:ec:cc:15:1e:03:50:0e:88:
1b:86:92:f2:46:b0:fd:33:0c:c7:34:cd:5b:61:f9:c6:91:e9:
8d:df:c3:5a:f3:d1:fe:f1:42:a5:29:2a:b5:68:5a:01:07:88:
78:cd:37:67:9a:69:85:42:1f:27:38:fc:29:9b:7a:f2:84:53:
4c:4c:9e:54:f1:15:8e:61:29:c0:29:1a:94:ae:82:ae:bc:d7:
82:4a:5c:c8:9d:92:3c:29:92:85:1e:e2:eb:b2:ba:81:74:3b:
0c:01:f9:ab:b2:2c:70:77:b8:82:9f:5f:90:a6:bc:1a:b3:af:
2c:d6:44:83:a1:55:96:54:08:9b:a9:b9:57:73:f9:ae:ac:c9:
f9:c1:f4:41:7f:94:7c:fa:64:df:f0:79:43:96:c7:5c:05:52:
88:af:90:19:b3:fb:2b:b8:11:52:3d:35:c5:99:20:21:be:c9:
5d:16:d2:d6:ec:90:36:0f:e4:66:29:27:53:23:c2:e2:f6:85:
1a:e1:86:c0
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUSsUgf1ETGjgzCcqstUqW3dHrufQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh
MmU2ZmVmZTAeFw0yNjA4MTExMzQyNTdaFw0yNzA4MTAxMzQ3NTdaMDMxMTAvBgNV
BAMTKEZGNUY2OEIxRjQ3RURFOEQ5NUQwNzAwMDJBNjVDQjAxM0VCNTg5OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0wtIz84/t9xNjRYU6rBGj5YI
XVHcW1hwm51UdAmiJHdzxD1HNruzuhBP4AzVFdEhKceMkPgAy8V+4OuHZEbau407
9HMMq26i9IW6d6wgUFsKQjjMvuorpExA/W3rQOaD3EXdMvQrDBPmKUxKp0lSXbqh
HNXqJtq9sLjyR/YrWNLfDpbs/EGYREmr+QtaLPNFwQtQ7DgjL1dzP2+kSj739EVm
Kh9KyeY5y/frSfo4AAAsnmpPJIbw6LR+9lDHFD9VamXWF5o39fcxDgrx8LM+wqGS
9DTvqadgF4QHV2iLNwNkm8SIoJObtY+yuTeMWgw1pUUhaAWVimmSZxhvHAztAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU/19osfR+3o2V0HAAKmXLAT61iZYwHwYDVR0j
BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl
MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM
bV92NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYt
N2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZlMDMxLzAvMzQzNTJlMzEzNTMwMmUzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjM2MzkzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2W
BjANBgkqhkiG9w0BAQsFAAOCAQEACCfUZcECBbt4Az8IECnj093IgrOVXx/gky7v
8GYpYX8XuyiAbaMQKOypGD783qUrY15kAWdoigQzoNd8qqWOfezMFR4DUA6IG4aS
8kaw/TMMxzTNW2H5xpHpjd/DWvPR/vFCpSkqtWhaAQeIeM03Z5pphUIfJzj8KZt6
8oRTTEyeVPEVjmEpwCkalK6CrrzXgkpcyJ2SPCmShR7i67K6gXQ7DAH5q7IscHe4
gp9fkKa8GrOvLNZEg6FVllQIm6m5V3P5rqzJ+cH0QX+UfPpk3/B5Q5bHXAVSiK+Q
GbP7K7gRUj01xZkgIb7JXRbS1uyQNg/kZiknUyPC4vaFGuGGwA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:30:47 2026 by rpki-client