Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20313436383133.roa
File: 34352e3134382e3134322e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: 7R+s3N7IPW+SXZIFUDxjq7Jt+h6W3Zzx+O+GL0xw01I=
Subject key identifier: 05:D7:9B:2A:FD:E8:08:B3:34:75:2A:B9:0F:94:BA:79:33:4B:43:38
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 24D2553521B47F6CB5B78581C8A322F052B3563E
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 08:11:59 +0000
ROA not before: Fri 25 Sep 2026 08:06:59 +0000
ROA not after: Fri 24 Sep 2027 08:11:59 +0000
asID: 146813
IP address blocks: 45.148.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 10:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d2:55:35:21:b4:7f:6c:b5:b7:85:81:c8:a3:22:f0:52:b3:56:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 25 08:06:59 2026 GMT
Not After : Sep 24 08:11:59 2027 GMT
Subject: CN=05D79B2AFDE808B334752AB90F94BA79334B4338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8a:e8:b5:48:43:d2:08:51:ce:0b:72:68:65:
d5:3f:33:53:48:5d:01:32:67:8a:be:72:8e:8a:c8:
eb:3f:c7:ea:7b:91:35:93:fa:62:58:96:87:fc:8c:
7b:2d:56:fd:52:ab:dc:2d:7a:09:6f:b1:9d:df:9f:
36:02:68:94:72:99:fb:24:09:d8:46:da:73:87:a4:
7b:bc:01:fc:3b:b1:ce:55:26:83:c9:93:10:11:26:
ab:c5:a4:b9:4d:bb:fd:75:24:fa:1c:e0:9c:e1:8f:
29:04:6e:df:36:17:93:4e:c6:98:98:32:fe:94:ea:
81:a3:83:36:7f:f0:16:d8:38:46:c7:2f:74:10:18:
fb:2c:06:55:5f:7b:00:c8:d2:31:52:14:e7:e6:49:
e8:30:c1:fc:4f:0e:6b:e9:d3:33:f3:be:bd:26:2e:
e0:b3:3b:65:bc:10:57:46:19:1e:fa:24:a8:e0:95:
ae:75:12:a2:b8:b0:a5:11:ae:31:a3:23:43:66:39:
7e:aa:93:8b:18:5d:15:28:8a:ef:fa:2a:43:32:d7:
77:76:13:86:62:cf:16:2b:22:1c:1c:17:bc:17:82:
a0:6d:67:f4:44:e0:a0:07:93:09:0c:73:58:52:61:
1e:2c:9b:a8:8d:d2:46:14:01:1e:5e:65:b8:84:97:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D7:9B:2A:FD:E8:08:B3:34:75:2A:B9:0F:94:BA:79:33:4B:43:38
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:39:0a:db:dc:d3:9c:57:a4:52:a9:3c:2e:14:a8:44:c9:90:
3d:00:69:d8:2d:60:a7:8c:ab:28:1b:d1:db:eb:46:e6:6a:02:
6b:02:1d:d9:ab:ba:ec:f5:99:81:e5:db:45:32:81:40:e4:37:
ea:ae:ee:75:e5:b7:87:86:2e:95:04:2a:45:a7:94:5a:66:69:
a2:95:2f:fc:ca:0c:2c:d8:80:90:50:42:2f:17:63:46:f0:be:
49:f1:8d:6f:cc:aa:8f:97:34:d5:88:0b:b8:c9:98:e6:32:c5:
9d:a0:a1:09:f1:97:f5:37:bd:68:ec:ef:19:f0:ce:3c:fb:0f:
ed:ca:0a:ff:34:df:d5:ba:5d:5f:0a:c8:46:7c:8d:40:5d:8f:
39:75:63:39:0d:5b:b9:a6:f6:e1:ec:b3:12:db:38:a6:0a:80:
c9:86:81:44:e6:2d:ee:04:e2:c1:3f:60:07:4c:38:ce:9a:c9:
4c:33:90:49:6d:80:71:41:6c:5a:02:c2:31:a2:3e:6f:d1:91:
19:1c:7e:7d:f7:74:79:d6:5c:18:84:13:61:f1:1d:52:de:bd:
91:5b:a5:c8:4c:8d:54:19:05:bb:33:5e:67:54:72:42:37:14:
92:2c:92:d7:e9:16:0a:7a:77:26:9b:9e:6c:ca:90:5f:74:b6:
12:c3:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:00:28 2026 by rpki-client