Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135362e302f32342d3234203d3e20343030303331.roa
File: 34352e3135352e3135362e302f32342d3234203d3e20343030303331.roa (raw, json)
Hash identifier: SFaVvk8EgTxxVv90eU0p7MGn/9Zk6dxNTNUi2dv5eOg=
Subject key identifier: 82:57:03:31:49:F8:F8:A7:1E:95:65:60:11:F6:36:7F:9C:B3:E1:D3
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 63DF280FF81DDD6636BAB18723B0A1428298384C
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135362e302f32342d3234203d3e20343030303331.roa
Signing time: Wed 23 Sep 2026 08:49:35 +0000
ROA not before: Wed 23 Sep 2026 08:44:35 +0000
ROA not after: Wed 22 Sep 2027 08:49:35 +0000
asID: 400031
IP address blocks: 45.155.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:df:28:0f:f8:1d:dd:66:36:ba:b1:87:23:b0:a1:42:82:98:38:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 23 08:44:35 2026 GMT
Not After : Sep 22 08:49:35 2027 GMT
Subject: CN=8257033149F8F8A71E95656011F6367F9CB3E1D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:24:dc:2c:7d:02:33:db:c4:6c:57:eb:82:
2f:52:40:03:0d:af:bf:46:75:d0:f7:a1:73:f5:33:
98:a6:ac:9f:76:f4:51:1f:f0:62:d8:a2:06:5d:cd:
c7:d7:27:26:3d:2c:32:2d:4c:29:c0:d4:2c:a0:f5:
4f:79:ab:a9:25:bf:5e:93:ac:8b:bd:a5:7c:ed:78:
ed:f1:35:d8:e6:78:ea:12:17:d4:65:4b:ee:88:11:
dc:e0:80:31:0f:d5:73:aa:94:1e:4b:a8:48:ff:1c:
10:7d:5f:8a:ca:a1:9f:a4:ef:56:5b:d1:f9:f3:fc:
4c:4d:dd:98:76:f2:10:cb:41:3a:7c:97:c8:74:a3:
e4:4f:ca:da:47:a8:8b:38:b1:df:53:fd:7f:56:a1:
14:27:26:ea:0d:62:dc:f4:bd:9a:88:bf:d8:b6:63:
ce:25:d0:dc:92:e0:0b:2b:ed:ff:9a:d5:7d:50:5f:
62:b5:dd:a5:cb:c6:90:27:e4:8e:b2:4a:df:56:66:
ff:a6:77:4e:b3:4e:0d:21:a4:28:13:d1:d1:ea:e2:
66:d4:52:ef:bd:a7:1b:97:ac:d9:fc:30:67:81:7a:
0a:f2:5d:c8:c1:01:1f:25:34:f0:55:8c:03:3d:11:
a5:20:d1:9f:cd:12:f0:47:14:4d:20:90:92:0a:21:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:57:03:31:49:F8:F8:A7:1E:95:65:60:11:F6:36:7F:9C:B3:E1:D3
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135362e302f32342d3234203d3e20343030303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.156.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:47:4f:4e:a2:36:25:cf:84:dc:16:b1:59:38:e7:a5:87:32:
83:54:dd:bb:7d:f2:17:a2:60:ab:de:b7:68:f5:bc:ff:82:40:
fb:ab:1b:c6:a7:76:ab:dc:be:ad:fd:f1:a3:fe:87:15:10:56:
00:23:75:a9:ba:1d:98:1a:64:a8:6f:e7:b4:e2:39:a3:56:b9:
6c:55:53:11:57:f8:60:3b:5b:09:a6:9a:8f:85:ae:66:5a:f8:
e3:4d:61:63:c0:61:ae:91:b9:a8:d6:d2:3e:3e:89:7f:be:9a:
17:fe:06:25:fb:ec:d3:6e:d9:3e:18:42:b9:c0:7f:5c:8d:07:
d4:e9:2f:ec:ad:9e:2f:85:35:b1:60:40:cd:18:af:d0:a8:65:
52:93:45:b5:f1:44:14:a4:b2:d1:61:9d:39:a2:ad:e2:d4:6e:
15:2f:e3:92:af:5d:ea:f5:b0:da:40:23:bc:13:e7:0d:aa:ce:
b6:a6:1f:11:e9:39:6e:f8:16:bf:0f:70:d0:1d:8b:6d:da:45:
82:5b:1c:04:07:65:ad:0f:52:98:7b:dd:4a:9b:00:65:eb:5b:
4f:33:0e:4e:c3:63:ab:ff:37:2e:c6:ce:a9:e0:8b:b3:c9:f2:
53:35:ef:a1:cc:e1:d0:e0:28:e0:3e:b1:79:b3:e1:81:9a:56:
fb:c7:ec:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:53:52 2026 by rpki-client