Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135382e302f32342d3234203d3e203231383539.roa
File: 34352e3135352e3135382e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: DzgIIz4BYtO3glGjJAv45Z7GwyxS1pIUauORubqo76g=
Subject key identifier: 2C:72:EB:46:F3:E8:30:4E:D4:E4:06:10:E5:8D:0E:6B:C9:BE:2B:06
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 0787E6A11B2574FA5BA76BA0F176BB3B3EDA76E3
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135382e302f32342d3234203d3e203231383539.roa
Signing time: Tue 22 Sep 2026 11:49:35 +0000
ROA not before: Tue 22 Sep 2026 11:44:35 +0000
ROA not after: Tue 21 Sep 2027 11:49:35 +0000
asID: 21859
IP address blocks: 45.155.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:87:e6:a1:1b:25:74:fa:5b:a7:6b:a0:f1:76:bb:3b:3e:da:76:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 22 11:44:35 2026 GMT
Not After : Sep 21 11:49:35 2027 GMT
Subject: CN=2C72EB46F3E8304ED4E40610E58D0E6BC9BE2B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:b8:15:a7:c7:33:dc:73:7f:82:81:9f:d4:
b7:32:d6:ff:7b:b5:af:5c:22:62:3f:73:12:13:6d:
83:a0:c8:8e:aa:30:2e:9e:dd:c2:a1:7b:cd:22:6f:
8b:6e:9c:2b:ac:06:12:18:b7:20:d8:00:28:f1:49:
89:64:88:91:77:a1:93:1f:37:dd:53:a5:9f:c7:05:
17:6f:cc:7b:9d:ae:1c:9c:a7:18:74:93:70:03:23:
2b:6b:59:32:a9:f4:00:d8:d1:61:dd:18:49:e3:de:
70:e8:cb:6d:33:79:02:77:ad:dd:9e:92:46:e6:f9:
02:0a:f1:1f:92:dc:7e:26:1c:46:75:c6:70:83:68:
37:be:84:ab:f5:9c:2d:e7:ac:7e:2f:41:98:ca:76:
0b:fe:24:da:6e:fc:6b:e5:4e:a6:fe:a6:89:10:5f:
63:f4:f0:04:45:13:f3:1b:9a:f8:3e:9c:d1:f4:d5:
6f:72:72:39:01:cd:d9:7f:c0:25:ca:bd:4f:87:4f:
2f:f5:71:1e:3e:94:69:52:3d:27:63:16:eb:2d:bd:
9d:3f:8e:e6:f7:c7:84:f0:f1:12:e4:c1:76:79:8e:
e7:49:06:74:a3:3a:19:f3:7e:48:f5:08:c2:16:88:
5b:75:9b:19:fd:ac:01:c2:98:eb:28:49:fe:56:ab:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:72:EB:46:F3:E8:30:4E:D4:E4:06:10:E5:8D:0E:6B:C9:BE:2B:06
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135382e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.158.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d7:c5:09:09:f9:67:db:8d:a0:f1:e1:ac:00:06:ca:7f:b1:
a5:46:f4:6d:4c:38:84:e7:f6:09:f8:f9:00:52:f7:40:e0:01:
39:52:8b:91:7d:42:b8:51:e6:ae:e2:da:65:e8:1d:65:0b:e8:
83:66:7d:1b:3c:25:44:3b:6c:06:7b:5b:e4:10:0a:78:75:e8:
af:bf:89:14:bd:70:29:3a:04:ff:d1:52:91:22:9e:d7:ed:d1:
e8:c4:e4:7e:70:a2:46:8a:7d:ed:cf:d3:ea:ea:5c:3d:1c:56:
6f:6d:70:c3:99:12:e4:6e:72:44:e4:e0:ee:34:76:96:21:39:
29:f8:da:20:90:b8:0f:a6:30:85:c3:49:16:a0:78:b4:29:68:
f4:a0:ae:2b:8d:1d:84:ff:70:0a:ec:05:fe:94:f7:77:bb:f6:
e2:1d:d9:7f:a6:94:43:c7:89:ee:e4:9e:dd:a3:c4:a0:fe:22:
42:c5:6d:e4:e0:14:7a:01:78:09:60:d9:65:e4:a7:c0:08:d3:
63:f0:6b:7c:94:a6:5a:c9:2b:11:58:73:8e:9d:da:1d:c0:5d:
9e:02:c4:70:60:5f:9e:00:54:a1:97:a7:63:07:a2:11:fc:77:
0e:e7:01:c6:b6:84:b2:47:d4:fd:f1:25:ea:e2:9e:6e:59:79:
49:a4:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:07:55 2026 by rpki-client