Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e382e302f32342d3234203d3e20323031393439.roa
File: 34352e38382e382e302f32342d3234203d3e20323031393439.roa (raw, json)
Hash identifier: 7YXxObJypniktHwsuld6dIPHsRBkvyFiTk+PuYbbPio=
Subject key identifier: 8B:9B:4A:16:CF:35:BA:EE:8A:D4:A0:B6:F2:98:F5:A4:A5:FD:4E:3C
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 1928082E1CD93BA9D852C5F7D3C77568D3037180
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e382e302f32342d3234203d3e20323031393439.roa
Signing time: Wed 24 Jun 2026 09:44:52 +0000
ROA not before: Wed 24 Jun 2026 09:39:52 +0000
ROA not after: Wed 23 Jun 2027 09:44:52 +0000
asID: 201949
IP address blocks: 45.88.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:28:08:2e:1c:d9:3b:a9:d8:52:c5:f7:d3:c7:75:68:d3:03:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jun 24 09:39:52 2026 GMT
Not After : Jun 23 09:44:52 2027 GMT
Subject: CN=8B9B4A16CF35BAEE8AD4A0B6F298F5A4A5FD4E3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:39:b6:9d:bc:75:04:f2:f0:d0:08:e7:9b:
7a:60:11:4f:63:4e:62:cb:c4:4e:fb:a9:31:09:0b:
19:1a:18:5e:31:f2:db:37:63:91:f1:d8:1f:45:68:
d4:c0:f0:f2:0c:82:18:75:0d:c7:86:28:1b:fb:a5:
1d:b4:78:17:92:88:1a:aa:f0:02:4e:b1:f1:6e:e0:
4b:0f:f4:62:1a:05:67:a3:2f:d5:f5:62:0e:f2:4d:
79:2f:df:2d:6d:c3:02:4a:20:1e:ca:9d:81:e0:a7:
61:a8:47:43:e1:5d:65:00:99:f4:c5:fa:16:9c:72:
c0:05:34:9b:97:2d:e2:0c:87:ab:86:fb:f1:92:03:
75:6e:f5:d2:ce:f1:f6:07:ce:eb:0f:10:16:b5:6b:
71:bc:4e:78:78:cb:a4:66:d7:d0:06:ec:ee:84:bf:
da:4e:5c:65:f0:cb:f1:44:b8:a5:69:e6:e9:8f:07:
b6:92:60:42:7c:f4:fa:b3:ce:3b:56:59:53:cf:65:
78:42:f5:04:7c:92:32:e4:c1:7a:9b:41:45:aa:d2:
2f:d4:4b:db:99:49:47:16:26:a6:6c:7e:e7:41:53:
d6:cd:b7:91:ec:35:d2:40:c4:8f:f8:5d:f5:21:f4:
f0:e3:df:d5:95:c0:46:71:25:73:cf:a3:35:66:7b:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:4A:16:CF:35:BA:EE:8A:D4:A0:B6:F2:98:F5:A4:A5:FD:4E:3C
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e382e302f32342d3234203d3e20323031393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:72:9c:f4:ea:30:f7:37:ee:b8:50:ab:ac:16:82:4c:4e:73:
63:fa:cc:96:59:68:77:9b:6b:e9:18:d0:30:5e:6e:b3:07:74:
96:3b:9d:f7:46:01:16:4c:da:3b:b6:85:c9:ce:fc:f8:83:f6:
2d:b0:84:37:09:69:60:90:bc:f1:ff:6a:76:c0:df:f3:ea:4f:
8a:12:25:cf:f3:ae:ce:98:96:66:05:66:09:19:33:44:51:83:
4c:f1:1c:2c:3c:84:77:8f:5d:df:6e:2f:a3:35:62:95:74:6d:
8b:d2:b8:9a:48:38:7a:6c:1b:8e:25:27:1d:de:f5:40:b0:6e:
14:66:47:13:ba:0a:87:5f:d7:1e:c7:80:88:b2:56:6a:1f:31:
a7:0f:92:d8:73:be:16:7f:a2:bd:36:b4:56:ae:0c:23:7a:90:
94:27:38:74:ff:b8:b9:8b:de:37:1f:1a:c8:8c:8f:f7:c1:9e:
53:9a:78:41:61:6c:15:ac:8a:8b:62:a9:12:a4:31:a1:e9:ea:
87:4f:82:0f:ad:6c:e7:68:26:05:73:73:19:56:55:f7:65:a7:
80:a7:4b:3b:09:3e:ba:39:9c:48:ca:81:5c:02:38:2e:70:fd:
85:e5:29:1c:b7:81:38:75:42:07:7b:ab:ef:40:80:6b:ea:41:
c7:ed:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:51 2026 by rpki-client