Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e20383334.roa
File: 34352e38382e31302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: WO85ZmlfmJS+yWApoXo+xn6dyp8B6fPCv/kZVZBvFJM=
Subject key identifier: 35:12:07:D2:72:B5:6A:8E:A3:0C:FA:AE:79:9B:21:6E:F8:8A:BB:9E
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 7CBD62F0152A9A7669358823BC1F2966FD7A89D7
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e20383334.roa
Signing time: Sun 17 Aug 2025 14:06:22 +0000
ROA not before: Sun 17 Aug 2025 14:01:22 +0000
ROA not after: Sun 16 Aug 2026 14:06:22 +0000
asID: 834
IP address blocks: 45.88.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 17:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:bd:62:f0:15:2a:9a:76:69:35:88:23:bc:1f:29:66:fd:7a:89:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 17 14:01:22 2025 GMT
Not After : Aug 16 14:06:22 2026 GMT
Subject: CN=351207D272B56A8EA30CFAAE799B216EF88ABB9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:b3:0e:9a:c9:ce:5d:67:73:35:3a:ef:51:
fa:e9:ee:1f:a6:f2:39:46:1c:29:94:e1:a6:41:fb:
de:87:b9:3b:ad:5b:df:dc:b2:0d:11:61:6e:d9:a3:
43:03:51:72:c0:e8:0e:45:ae:f5:ae:a0:e5:28:49:
f6:c3:c7:a0:e9:d0:9d:72:fd:f4:3a:d2:0b:bb:39:
52:5f:19:43:cc:44:58:95:80:26:b5:8b:2f:95:9c:
3f:03:3b:3b:7d:53:95:1b:18:79:06:d9:25:ae:7b:
d3:5a:21:77:80:3a:35:7a:e9:d3:a1:cb:8f:62:f9:
8b:53:e1:6a:04:45:e5:d9:ca:c4:e0:a7:c6:8d:ec:
a3:88:d7:62:01:2a:33:9b:a9:f7:c0:c4:6e:c8:9b:
dc:0c:6a:53:81:87:eb:01:2d:31:d0:5b:81:40:6d:
46:2d:fb:fc:69:1d:14:ba:b7:ed:05:c6:34:f2:47:
0a:a2:b3:89:55:b4:92:a5:d9:27:ca:a1:e7:e5:21:
76:59:85:09:e4:39:d6:55:49:7a:43:be:7f:10:29:
97:d7:ca:47:66:eb:5a:a1:ef:14:76:a0:27:27:9d:
a4:31:20:51:89:7b:2f:c2:9e:ae:05:eb:82:e9:67:
b0:2a:c3:39:83:86:91:36:4e:93:5f:1a:bb:bc:4a:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:12:07:D2:72:B5:6A:8E:A3:0C:FA:AE:79:9B:21:6E:F8:8A:BB:9E
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:95:75:cf:c8:32:a2:3e:5d:3c:4d:8a:2e:a1:8e:49:2b:52:
e0:6f:d5:d4:5b:f7:94:01:3d:3e:bd:3c:05:2e:8e:36:8f:b3:
3c:b9:01:81:d1:a6:72:ae:a1:b2:a5:50:20:81:96:55:5f:3f:
79:22:a5:14:13:e0:73:2c:9a:83:1c:4f:8f:7b:b2:10:33:d9:
cb:1f:0d:c2:0f:8c:1d:3e:a4:10:41:c9:ea:21:6d:c0:b2:50:
e2:38:7e:91:74:1c:75:5a:8c:72:36:93:c3:7a:fe:18:60:17:
ef:9b:5d:d2:87:01:59:57:ee:88:07:41:45:c3:b1:90:e6:56:
2f:ed:fe:5f:bd:3e:fb:33:13:6b:c1:35:2b:0b:20:1f:aa:85:
a6:f0:55:62:14:58:25:e6:2c:58:5c:14:b7:25:58:26:d3:2a:
ac:5f:03:a9:f5:c3:92:4f:03:0e:53:0f:7b:a4:6d:d0:e2:06:
6c:f0:b9:e4:c3:6e:21:9f:a6:46:6c:2d:eb:45:24:7f:d3:e6:
1d:b3:b0:54:5b:c8:ed:bb:19:db:31:7c:22:b8:0d:12:30:da:
98:85:41:e6:1c:16:60:41:26:62:b3:95:9c:9a:a1:59:91:38:
72:26:57:ea:53:9b:76:07:ca:76:78:be:d4:a9:e2:4f:fe:07:
18:dc:de:44
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUfL1i8BUqmnZpNYgjvB8pZv16idcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNTA4MTcxNDAxMjJaFw0yNjA4MTYxNDA2MjJaMDMxMTAvBgNV
BAMTKDM1MTIwN0QyNzJCNTZBOEVBMzBDRkFBRTc5OUIyMTZFRjg4QUJCOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8d7MOmsnOXWdzNTrvUfrp7h+m
8jlGHCmU4aZB+96HuTutW9/csg0RYW7Zo0MDUXLA6A5FrvWuoOUoSfbDx6Dp0J1y
/fQ60gu7OVJfGUPMRFiVgCa1iy+VnD8DOzt9U5UbGHkG2SWue9NaIXeAOjV66dOh
y49i+YtT4WoEReXZysTgp8aN7KOI12IBKjObqffAxG7Im9wMalOBh+sBLTHQW4FA
bUYt+/xpHRS6t+0FxjTyRwqis4lVtJKl2SfKoeflIXZZhQnkOdZVSXpDvn8QKZfX
ykdm61qh7xR2oCcnnaQxIFGJey/Cnq4F64LpZ7AqwzmDhpE2TpNfGru8So2ZAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUNRIH0nK1ao6jDPqueZshbviKu54wHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzgzODJlMzEzMDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1YCjANBgkq
hkiG9w0BAQsFAAOCAQEAfZV1z8gyoj5dPE2KLqGOSStS4G/V1Fv3lAE9Pr08BS6O
No+zPLkBgdGmcq6hsqVQIIGWVV8/eSKlFBPgcyyagxxPj3uyEDPZyx8Nwg+MHT6k
EEHJ6iFtwLJQ4jh+kXQcdVqMcjaTw3r+GGAX75td0ocBWVfuiAdBRcOxkOZWL+3+
X70++zMTa8E1KwsgH6qFpvBVYhRYJeYsWFwUtyVYJtMqrF8DqfXDkk8DDlMPe6Rt
0OIGbPC55MNuIZ+mRmwt60Ukf9PmHbOwVFvI7bsZ2zF8IrgNEjDamIVB5hwWYEEm
YrOVnJqhWZE4ciZX6lObdgfKdni+1KniT/4HGNzeRA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:37 2025 by rpki-client