Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234332e302f32342d3234203d3e2035353131.roa
File: 34352e38362e3234332e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier: a5V61ckFIuwC3KHna58Ln8Ce0B5ruqqSFmXCCjCXnW0=
Subject key identifier: 14:2A:CB:32:1D:FB:60:FE:42:E1:0B:5C:F2:4B:9D:9D:43:92:C7:73
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 5075813070BA1018D3D16E81045A671A8AC2677A
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234332e302f32342d3234203d3e2035353131.roa
Signing time: Fri 20 Mar 2026 11:49:30 +0000
ROA not before: Fri 20 Mar 2026 11:44:30 +0000
ROA not after: Fri 19 Mar 2027 11:49:30 +0000
asID: 5511
IP address blocks: 45.86.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:75:81:30:70:ba:10:18:d3:d1:6e:81:04:5a:67:1a:8a:c2:67:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Mar 20 11:44:30 2026 GMT
Not After : Mar 19 11:49:30 2027 GMT
Subject: CN=142ACB321DFB60FE42E10B5CF24B9D9D4392C773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:61:68:d3:3b:11:df:8c:0f:2b:16:a7:6a:
f7:89:00:a5:c5:79:d3:54:ce:53:ab:f1:c5:fe:9d:
31:69:bb:7a:76:15:1f:0f:ba:eb:ee:ab:37:68:dd:
34:2e:00:32:c1:35:b7:d4:cc:47:a0:99:8b:42:5c:
13:17:11:26:c3:f6:5c:93:a6:db:ed:a1:25:b8:24:
92:a9:1e:c1:d7:0c:38:2f:5a:f9:ff:d6:a3:6d:18:
76:1f:9c:60:55:9a:86:39:bc:9d:13:4d:d5:21:ae:
15:d7:86:85:3b:e8:53:1a:47:e0:51:6c:02:21:d4:
b0:a3:e8:73:e9:cf:19:3a:16:8d:f4:4b:a0:56:46:
37:f0:03:d2:92:a9:81:95:f5:04:d9:fa:c9:54:68:
25:29:76:7c:3e:0a:e0:5f:87:d1:5b:7e:2f:91:d4:
7b:1a:06:48:aa:36:69:d0:ed:7d:eb:94:90:df:fb:
21:17:2a:38:40:7a:1d:44:72:ec:54:f5:c3:ea:25:
2f:08:00:8c:65:f1:c7:94:e4:78:0d:20:91:7c:6d:
bd:da:5d:24:61:3a:37:f1:79:3d:72:12:28:d4:b2:
3e:76:ad:1c:3c:77:67:24:f6:4d:59:17:1e:4c:8c:
56:3b:e1:ba:99:4b:3b:b6:3f:af:98:bb:fe:05:44:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2A:CB:32:1D:FB:60:FE:42:E1:0B:5C:F2:4B:9D:9D:43:92:C7:73
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234332e302f32342d3234203d3e2035353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.243.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:e7:03:fc:75:28:22:75:40:9b:35:33:58:c4:af:0a:2e:b7:
5a:6d:84:1f:bc:b3:b4:55:af:d0:f9:0b:08:0d:1d:af:70:9d:
2b:04:d2:26:f7:b9:3c:40:90:07:38:4d:50:dd:03:71:e2:e5:
7f:da:99:93:c4:c1:ff:80:48:ae:a7:9a:99:9e:23:ba:1b:c4:
ed:32:d7:8f:64:ce:af:a6:41:f9:32:37:f5:78:69:db:c1:2b:
20:0e:a6:86:ca:69:c4:b6:be:6d:c4:61:ad:a1:af:c9:bb:1b:
ce:ff:86:2b:ad:fa:cf:09:00:54:f2:bb:da:14:18:b5:0c:46:
f7:be:7f:43:5d:fd:db:ce:86:94:e0:72:a9:92:7e:1a:fb:4f:
b8:e4:6e:ff:a8:c2:bb:45:22:eb:d3:ee:13:1d:e5:7c:45:7d:
15:de:0c:e0:51:9f:0e:af:84:63:2a:69:b2:72:ca:09:f5:0d:
a8:ee:89:72:c7:81:f8:d4:ee:e3:6c:95:78:75:50:8c:38:98:
48:1a:a9:15:64:c4:fc:b9:db:2b:a6:f1:2a:cd:7e:92:ac:a3:
3f:4c:d9:3f:f5:64:2c:a7:33:de:e3:ed:e5:3b:ea:6d:32:7a:
63:46:07:8a:35:81:f0:07:8b:ae:55:3e:19:57:80:23:37:3b:
29:11:10:f0
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUUHWBMHC6EBjT0W6BBFpnGorCZ3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0
MWFjZWJiODAeFw0yNjAzMjAxMTQ0MzBaFw0yNzAzMTkxMTQ5MzBaMDMxMTAvBgNV
BAMTKDE0MkFDQjMyMURGQjYwRkU0MkUxMEI1Q0YyNEI5RDlENDM5MkM3NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSGFo0zsR34wPKxanaveJAKXF
edNUzlOr8cX+nTFpu3p2FR8Puuvuqzdo3TQuADLBNbfUzEegmYtCXBMXESbD9lyT
ptvtoSW4JJKpHsHXDDgvWvn/1qNtGHYfnGBVmoY5vJ0TTdUhrhXXhoU76FMaR+BR
bAIh1LCj6HPpzxk6Fo30S6BWRjfwA9KSqYGV9QTZ+slUaCUpdnw+CuBfh9Fbfi+R
1HsaBkiqNmnQ7X3rlJDf+yEXKjhAeh1EcuxU9cPqJS8IAIxl8ceU5HgNIJF8bb3a
XSRhOjfxeT1yEijUsj52rRw8d2ck9k1ZFx5MjFY74bqZSzu2P6+Yu/4FRK2HAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUFCrLMh37YP5C4Qtc8kudnUOSx3MwHwYDVR0j
BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz
YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH
czY3Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt
ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzgzNjJlMzIzNDMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTMxMzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtVvMw
DQYJKoZIhvcNAQELBQADggEBANPnA/x1KCJ1QJs1M1jErwout1pthB+8s7RVr9D5
CwgNHa9wnSsE0ib3uTxAkAc4TVDdA3Hi5X/amZPEwf+ASK6nmpmeI7obxO0y149k
zq+mQfkyN/V4advBKyAOpobKacS2vm3EYa2hr8m7G87/hiut+s8JAFTyu9oUGLUM
Rve+f0Nd/dvOhpTgcqmSfhr7T7jkbv+owrtFIuvT7hMd5XxFfRXeDOBRnw6vhGMq
abJyygn1DajuiXLHgfjU7uNslXh1UIw4mEgaqRVkxPy52yum8SrNfpKsoz9M2T/1
ZCynM97j7eU76m0yemNGB4o1gfAHi65VPhlXgCM3OykREPA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:39 2026 by rpki-client