Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e203230363438.roa
File: 34352e3134382e3134302e302f32342d3234203d3e203230363438.roa (raw, json)
Hash identifier: e6tDXaybQW5UmskVtMfDSsYmJ7p9HSw7TaF970AadHw=
Subject key identifier: 56:3B:54:1B:64:3F:42:26:60:A7:A0:31:33:41:1C:5F:0D:A0:8F:54
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 6CFA385F00B66F75BCE81F5EA05B6761644331A8
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e203230363438.roa
Signing time: Tue 23 Sep 2025 08:28:25 +0000
ROA not before: Tue 23 Sep 2025 08:23:25 +0000
ROA not after: Tue 22 Sep 2026 08:28:25 +0000
asID: 20648
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fa:38:5f:00:b6:6f:75:bc:e8:1f:5e:a0:5b:67:61:64:43:31:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 23 08:23:25 2025 GMT
Not After : Sep 22 08:28:25 2026 GMT
Subject: CN=563B541B643F422660A7A03133411C5F0DA08F54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:41:eb:5c:3d:66:b9:05:d8:77:2d:c7:bd:
9b:3b:4c:c2:ab:d5:40:48:b7:9b:be:14:d6:2c:b8:
51:6d:96:8e:5a:f3:0a:f9:61:98:7f:89:52:ad:6e:
29:a7:88:d0:28:b0:71:5f:de:91:17:b3:3a:f4:0f:
cd:82:88:16:71:51:08:a2:eb:9c:ce:ab:9f:58:ed:
e2:10:c0:46:11:a3:5f:19:12:75:d9:21:6e:c5:5e:
98:28:aa:38:af:43:17:03:29:b3:03:a3:93:72:3c:
08:09:8e:2a:63:f7:59:91:15:ab:22:10:e6:21:f9:
e9:b1:65:54:17:9b:88:a2:02:68:1f:29:ab:e7:cf:
b1:3c:7d:58:17:f2:05:af:68:cc:af:e9:fc:20:ce:
32:bf:52:dd:c7:f9:47:2d:8a:f9:82:eb:ce:ac:92:
61:d6:0c:c2:e6:53:b8:7a:23:0f:ad:35:a5:61:14:
19:49:0e:8c:11:66:88:d8:5e:55:d5:ff:ae:cd:00:
aa:75:b4:86:2d:cc:6a:80:3f:58:cf:97:e2:b5:68:
ea:b5:88:a8:86:4a:46:db:66:77:46:43:05:c6:33:
30:24:3b:67:6e:e6:02:5f:f4:b8:21:66:68:9e:3e:
9a:6b:78:34:6a:6d:a4:a0:c4:98:38:b0:fc:5f:75:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3B:54:1B:64:3F:42:26:60:A7:A0:31:33:41:1C:5F:0D:A0:8F:54
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e203230363438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:52:d5:bc:c5:63:c2:80:a9:8b:a9:8a:12:8a:d5:b8:99:e4:
2b:d2:b3:bb:46:6b:54:32:a9:81:96:e3:99:6e:e9:4e:db:94:
8b:b8:40:69:90:7e:9d:4d:cd:fe:40:62:61:1c:4d:af:71:47:
f5:34:f4:fa:8e:dd:96:fd:4f:55:83:5b:ec:c4:87:cb:f6:ce:
c0:c4:2b:a1:3c:b9:f7:f4:2e:74:fb:4e:dd:f9:b0:1f:28:b7:
76:05:76:ed:49:27:cd:64:b1:69:59:e1:71:a9:57:b9:01:8b:
6d:f5:ad:76:58:64:19:e5:bb:cf:22:6b:4e:a5:9a:ad:73:30:
bf:61:c1:51:01:d8:f1:1a:f8:ef:24:48:1d:27:22:df:f3:c8:
84:da:bb:83:85:7a:90:ec:0e:eb:30:9a:84:b7:a2:eb:8c:1a:
4b:99:8d:4b:49:16:3f:49:2b:b9:75:91:1c:99:2d:a4:2a:95:
7b:f1:76:66:f8:cc:82:1c:c4:bf:3a:78:b8:ad:7e:49:6e:b5:
c3:b6:d9:24:54:94:53:af:4a:4f:ad:b9:dc:1b:3c:da:46:8c:
ef:01:6d:6c:71:0a:0e:5c:50:30:30:83:6c:a2:72:69:e6:f6:
e8:43:0f:b9:9d:c7:2d:9c:06:cb:28:69:d2:46:cb:eb:03:03:
41:d1:13:70
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUbPo4XwC2b3W86B9eoFtnYWRDMagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNTA5MjMwODIzMjVaFw0yNjA5MjIwODI4MjVaMDMxMTAvBgNV
BAMTKDU2M0I1NDFCNjQzRjQyMjY2MEE3QTAzMTMzNDExQzVGMERBMDhGNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsr0HrXD1muQXYdy3HvZs7TMKr
1UBIt5u+FNYsuFFtlo5a8wr5YZh/iVKtbimniNAosHFf3pEXszr0D82CiBZxUQii
65zOq59Y7eIQwEYRo18ZEnXZIW7FXpgoqjivQxcDKbMDo5NyPAgJjipj91mRFasi
EOYh+emxZVQXm4iiAmgfKavnz7E8fVgX8gWvaMyv6fwgzjK/Ut3H+UctivmC686s
kmHWDMLmU7h6Iw+tNaVhFBlJDowRZojYXlXV/67NAKp1tIYtzGqAP1jPl+K1aOq1
iKiGSkbbZndGQwXGMzAkO2du5gJf9LghZmiePppreDRqbaSgxJg4sPxfdZwRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUVjtUG2Q/QiZgp6AxM0EcXw2gj1QwHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzEzNDM4MmUzMTM0
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzYzNDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LZSMMA0GCSqGSIb3DQEBCwUAA4IBAQA6UtW8xWPCgKmLqYoSitW4meQr0rO7RmtU
MqmBluOZbulO25SLuEBpkH6dTc3+QGJhHE2vcUf1NPT6jt2W/U9Vg1vsxIfL9s7A
xCuhPLn39C50+07d+bAfKLd2BXbtSSfNZLFpWeFxqVe5AYtt9a12WGQZ5bvPImtO
pZqtczC/YcFRAdjxGvjvJEgdJyLf88iE2ruDhXqQ7A7rMJqEt6LrjBpLmY1LSRY/
SSu5dZEcmS2kKpV78XZm+MyCHMS/Oni4rX5JbrXDttkkVJRTr0pPrbncGzzaRozv
AW1scQoOXFAwMINsonJp5vboQw+5ncctnAbLKGnSRsvrAwNB0RNw
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:19 2025 by rpki-client