Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131392e302f32342d3234203d3e203534323532.roa
File: 34352e36352e3131392e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: vELblGowH/Oja8MdbWSqUwAAF83r2Gd6ZRERgq2icBU=
Subject key identifier: AB:6B:53:C9:89:BF:9B:9D:CC:F3:3A:57:DE:E5:FA:7F:1A:C6:FF:48
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 16448E4CD5B693423136FA80EBBCF095272B3E48
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131392e302f32342d3234203d3e203534323532.roa
Signing time: Tue 19 Aug 2025 16:58:03 +0000
ROA not before: Tue 19 Aug 2025 16:53:03 +0000
ROA not after: Tue 18 Aug 2026 16:58:03 +0000
asID: 54252
IP address blocks: 45.65.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:44:8e:4c:d5:b6:93:42:31:36:fa:80:eb:bc:f0:95:27:2b:3e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 19 16:53:03 2025 GMT
Not After : Aug 18 16:58:03 2026 GMT
Subject: CN=AB6B53C989BF9B9DCCF33A57DEE5FA7F1AC6FF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:45:80:0b:11:d4:bd:15:bc:99:3a:49:e7:
ee:83:f2:2a:f7:3e:91:7b:94:5f:f7:2a:09:0b:a8:
88:8d:04:8d:b7:5b:44:fa:58:0d:33:5d:2f:47:d9:
84:d9:56:01:4c:d4:5e:03:b0:46:63:b6:82:21:a2:
2c:19:c9:9b:ae:f7:d8:04:88:a2:2d:5b:b3:e4:ac:
c6:ba:18:9d:e2:a8:73:87:a9:c5:0c:bc:9c:69:aa:
3c:23:eb:02:42:7d:62:e9:4a:e9:7a:b4:4b:46:3a:
51:fc:e5:15:04:4b:ac:86:b7:0b:a5:2d:41:33:37:
01:c4:a7:f9:13:de:9e:48:15:9d:de:7e:e7:32:0f:
eb:18:b3:88:c6:e2:3e:2f:3b:0c:15:93:5a:82:32:
80:f9:4d:1a:c5:bc:1f:ae:99:f8:6f:17:24:2f:88:
06:c8:a5:6b:60:8a:55:33:31:39:be:83:cb:e2:ef:
c4:ac:25:af:11:a7:80:53:a4:e7:50:d2:9f:c0:57:
b3:5b:83:5d:0a:4a:22:6e:c0:10:e4:84:cc:00:9c:
37:e8:a3:8e:d8:20:c8:10:0e:e5:9e:65:9f:90:3b:
af:d9:97:f3:1d:64:da:ca:7b:7e:0b:f0:08:4a:2c:
d6:86:5a:0f:36:41:25:3a:f9:a9:d1:6b:3b:ee:fa:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6B:53:C9:89:BF:9B:9D:CC:F3:3A:57:DE:E5:FA:7F:1A:C6:FF:48
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131392e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:93:70:9a:4a:4b:8f:31:e2:ac:6f:ed:70:f6:42:99:6e:7c:
99:de:3c:e9:a9:56:05:a1:a6:31:a2:ed:5a:4f:0f:9b:b9:ac:
a7:e9:1e:9a:c4:43:42:9c:c4:94:4e:25:d4:31:c2:9d:99:67:
4a:6c:25:a9:8f:d3:68:cc:f3:0a:26:76:2b:51:31:ac:68:ce:
e5:68:d3:06:16:b3:eb:98:18:82:a1:df:c6:65:27:d6:7c:9b:
ce:d3:4a:c3:f0:97:f9:91:90:17:34:3b:31:0e:43:81:82:6e:
50:f0:8b:59:88:bc:46:91:fd:0a:87:08:cf:03:ce:00:c8:53:
9a:6e:56:57:a2:0b:c8:6d:9f:34:13:3c:56:ce:03:99:e9:77:
3b:ab:3d:1a:97:53:fc:a4:8c:2f:41:b7:f1:eb:f6:5a:8b:93:
81:58:f9:62:50:30:9c:36:4a:2f:a2:cb:3d:7f:7a:86:1a:23:
92:fa:b4:69:44:c4:2a:a8:97:4c:7f:73:82:d4:ec:94:5c:2b:
c6:f6:f1:3e:ae:d3:37:20:c8:02:19:6d:27:93:08:c9:78:df:
10:fd:08:bb:a6:44:a5:a0:1f:2f:1a:e1:f1:82:bc:7c:e3:0c:
49:29:a4:1f:d0:63:75:21:00:f8:bd:85:d6:bf:f2:b5:d8:4f:
07:69:4a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:07:06 2025 by rpki-client