Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234322e302f32342d3234203d3e203531313032.roa
File: 34352e38362e3234322e302f32342d3234203d3e203531313032.roa (raw, json)
Hash identifier: Ksc/7iZ5eJk4P2moWWZOCznlFWUCsH8ngZ94pujJa78=
Subject key identifier: A1:50:AA:0B:2C:4F:60:BC:EB:BF:E9:31:D0:36:B4:56:59:2E:AC:42
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 53BC009903DD9E2B0FFA684B2CBF6FEBC589CED8
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234322e302f32342d3234203d3e203531313032.roa
Signing time: Sun 08 Mar 2026 09:28:46 +0000
ROA not before: Sun 08 Mar 2026 09:23:46 +0000
ROA not after: Sun 07 Mar 2027 09:28:46 +0000
asID: 51102
IP address blocks: 45.86.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:bc:00:99:03:dd:9e:2b:0f:fa:68:4b:2c:bf:6f:eb:c5:89:ce:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Mar 8 09:23:46 2026 GMT
Not After : Mar 7 09:28:46 2027 GMT
Subject: CN=A150AA0B2C4F60BCEBBFE931D036B456592EAC42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:8b:ef:41:f3:c1:f7:48:c2:5b:35:b1:df:
60:ed:90:2a:aa:48:54:1a:29:c7:07:32:ae:64:93:
e2:5b:64:ab:77:1e:60:66:a7:53:2b:e7:7b:89:32:
01:27:a9:08:89:94:80:02:e7:15:55:57:da:8b:a2:
69:fb:b3:a3:6e:85:dc:6e:bb:70:93:08:ce:75:93:
20:e3:1f:37:a7:b8:50:e8:b0:22:fc:13:a6:04:83:
9d:12:9e:21:df:88:7d:2b:9b:74:8c:ba:38:9e:af:
b1:35:0f:60:c5:97:c6:3f:16:40:36:d9:34:95:65:
0e:c1:3b:10:ab:a3:d8:e1:f3:30:65:87:ae:b4:01:
7e:d1:04:52:09:97:06:d2:1d:b6:7a:f7:8f:d5:e8:
b2:b8:5c:59:b4:6a:1b:c0:23:2e:3f:13:44:c4:f2:
5c:21:8a:36:12:81:73:8d:02:80:69:97:01:e8:45:
89:e2:e6:db:0c:22:1f:cd:ff:47:34:52:94:42:18:
b8:bd:ab:d6:64:0a:4a:15:73:87:5b:dc:2d:91:4a:
48:e9:82:16:7a:56:42:29:af:d6:9b:2f:72:82:a1:
02:4f:92:d8:22:12:32:20:75:95:80:ea:f1:1f:41:
18:4e:60:b7:5b:0d:6f:f6:0d:0e:b0:d2:39:94:1b:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:50:AA:0B:2C:4F:60:BC:EB:BF:E9:31:D0:36:B4:56:59:2E:AC:42
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234322e302f32342d3234203d3e203531313032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.242.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:4b:24:db:40:6f:a5:50:50:bf:fc:0c:64:37:af:cf:dd:15:
04:77:b3:d4:37:c2:b7:e7:07:5d:a6:f6:45:91:14:a8:18:19:
0f:c4:97:57:44:aa:cb:8e:19:0f:4d:3c:a0:d2:10:3d:a9:6e:
3e:2e:0b:9b:de:30:3d:07:a0:bd:d3:a3:0e:94:36:f9:30:d3:
3e:fb:41:2c:38:63:09:e6:8c:14:4c:fd:83:24:f0:01:3e:fe:
3d:39:dc:06:8f:e9:ea:79:7c:bf:23:5c:2d:7d:90:2e:06:b8:
1c:4b:60:06:2b:e3:46:5d:76:f6:95:64:bf:fe:a8:0a:7e:f5:
43:30:0d:e8:33:3b:fd:37:20:7e:e3:d2:3f:ca:8b:33:9d:55:
ff:51:d1:06:22:9d:01:1f:56:ff:2b:b2:8a:ba:7d:cf:56:9b:
05:21:da:f9:57:90:9c:26:94:4c:f9:34:07:93:2b:fc:b7:7e:
0c:16:1b:c4:69:75:ce:b4:c1:ed:88:79:96:e2:fa:a6:7f:04:
2d:cc:e3:9b:ef:38:5f:e4:c7:7d:30:cc:b8:38:41:06:56:7f:
6f:a9:a4:72:46:e4:a8:18:e6:76:0b:5a:42:4d:72:d7:29:0b:
ec:40:a0:53:3d:40:97:0a:95:17:cb:06:64:ff:ac:0a:ce:1b:
a2:ed:8b:5c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUU7wAmQPdnisP+mhLLL9v68WJztgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0
MWFjZWJiODAeFw0yNjAzMDgwOTIzNDZaFw0yNzAzMDcwOTI4NDZaMDMxMTAvBgNV
BAMTKEExNTBBQTBCMkM0RjYwQkNFQkJGRTkzMUQwMzZCNDU2NTkyRUFDNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQI4vvQfPB90jCWzWx32DtkCqq
SFQaKccHMq5kk+JbZKt3HmBmp1Mr53uJMgEnqQiJlIAC5xVVV9qLomn7s6Nuhdxu
u3CTCM51kyDjHzenuFDosCL8E6YEg50SniHfiH0rm3SMujier7E1D2DFl8Y/FkA2
2TSVZQ7BOxCro9jh8zBlh660AX7RBFIJlwbSHbZ694/V6LK4XFm0ahvAIy4/E0TE
8lwhijYSgXONAoBplwHoRYni5tsMIh/N/0c0UpRCGLi9q9ZkCkoVc4db3C2RSkjp
ghZ6VkIpr9abL3KCoQJPktgiEjIgdZWA6vEfQRhOYLdbDW/2DQ6w0jmUGzRhAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUoVCqCyxPYLzrv+kx0Da0VlkurEIwHwYDVR0j
BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz
YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH
czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt
ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzgzNjJlMzIzNDMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMTMxMzAzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1W
8jANBgkqhkiG9w0BAQsFAAOCAQEAzksk20BvpVBQv/wMZDevz90VBHez1DfCt+cH
Xab2RZEUqBgZD8SXV0Sqy44ZD008oNIQPaluPi4Lm94wPQegvdOjDpQ2+TDTPvtB
LDhjCeaMFEz9gyTwAT7+PTncBo/p6nl8vyNcLX2QLga4HEtgBivjRl129pVkv/6o
Cn71QzAN6DM7/TcgfuPSP8qLM51V/1HRBiKdAR9W/yuyirp9z1abBSHa+VeQnCaU
TPk0B5Mr/Ld+DBYbxGl1zrTB7Yh5luL6pn8ELczjm+84X+THfTDMuDhBBlZ/b6mk
ckbkqBjmdgtaQk1y1ykL7ECgUz1AlwqVF8sGZP+sCs4bou2LXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:39 2026 by rpki-client