Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e392e302f32342d3234203d3e20323034393134.roa
File: 34352e38382e392e302f32342d3234203d3e20323034393134.roa (raw, json)
Hash identifier: 5+Br0WAvyeTCHkhlJwX8hHzvl2ZpxQWP0pgXw3WPUX0=
Subject key identifier: 35:E1:7A:82:71:E3:3C:61:94:69:B2:20:73:85:0F:A1:7A:7C:26:A0
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 6AA5DB205B20FD5C669842B623D23C10999C318B
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e392e302f32342d3234203d3e20323034393134.roa
Signing time: Mon 06 Jul 2026 10:48:57 +0000
ROA not before: Mon 06 Jul 2026 10:43:57 +0000
ROA not after: Mon 05 Jul 2027 10:48:57 +0000
asID: 204914
IP address blocks: 45.88.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a5:db:20:5b:20:fd:5c:66:98:42:b6:23:d2:3c:10:99:9c:31:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jul 6 10:43:57 2026 GMT
Not After : Jul 5 10:48:57 2027 GMT
Subject: CN=35E17A8271E33C619469B22073850FA17A7C26A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:c1:9c:50:b2:fe:f2:29:ff:3b:41:b1:6c:
63:b7:f5:67:e2:b8:77:3a:79:79:03:c1:a6:b3:a4:
aa:ec:bd:0a:33:fd:01:9b:29:36:fd:a4:8f:5f:24:
38:dc:92:24:2f:39:a9:e8:bb:40:b9:c7:c0:42:99:
f9:6b:dc:51:6e:62:ba:cc:fc:aa:84:0f:1e:08:df:
18:3b:7e:46:8d:09:38:3b:8d:02:d0:c6:37:db:6a:
5f:34:c0:be:68:b6:91:9a:45:08:cd:36:9d:88:13:
66:f1:3f:5b:4a:01:a3:be:09:e7:d0:8a:bd:55:e4:
3f:a4:6d:cc:78:74:4a:2f:97:c1:15:97:cd:62:f1:
d9:44:a2:88:a9:e5:34:a5:76:4b:96:cf:b5:d4:a0:
ad:57:34:07:be:3a:ad:10:8c:48:c5:26:3c:bd:5e:
f6:33:50:66:4a:d6:78:48:70:bd:64:8a:76:91:ed:
28:7e:d1:36:1d:4b:d9:54:9a:d5:ab:43:33:0c:c0:
d7:88:ba:73:76:83:91:3b:b6:65:60:fb:30:b5:94:
ed:14:69:dd:7f:8f:e0:a1:c3:54:57:a8:02:f5:8d:
77:97:e1:a5:11:ed:32:ee:38:a6:00:cb:33:88:5d:
32:3a:16:4f:9e:e6:8d:77:32:29:b4:f3:f9:7c:dc:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E1:7A:82:71:E3:3C:61:94:69:B2:20:73:85:0F:A1:7A:7C:26:A0
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e392e302f32342d3234203d3e20323034393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.9.0/24
Signature Algorithm: sha256WithRSAEncryption
24:07:d7:8f:6a:9f:7d:2b:df:ed:fd:93:4e:17:47:fc:4c:19:
33:aa:8a:ef:95:da:ba:5f:15:f6:85:47:3c:5c:88:e9:67:ef:
3a:85:f5:87:a2:a8:5b:00:cb:23:9c:71:fb:e1:9c:23:62:05:
48:32:d6:88:ff:d8:b9:06:db:23:3f:aa:49:e3:21:65:44:f1:
0a:77:ad:46:6d:e0:22:db:75:dd:c4:4c:a1:d4:28:3b:02:ff:
db:a2:9f:aa:aa:4c:cc:c1:5a:e0:38:5e:f5:52:df:9c:56:3f:
ec:af:05:02:0c:cc:87:bb:a2:42:1f:eb:49:aa:69:96:ce:e5:
ca:ce:c9:e4:92:eb:7f:e8:20:ae:47:77:9f:6d:79:3c:09:38:
4b:6c:66:57:21:d7:07:bd:2e:6e:62:91:b2:10:64:34:97:66:
4e:a1:48:4a:b2:63:5f:05:06:ba:f2:35:d2:71:47:8b:31:50:
d8:4c:1e:7c:a1:3d:4b:a5:7e:e1:4b:de:05:4d:68:72:69:6a:
9d:ee:92:08:15:bd:39:46:54:f6:b4:c3:87:33:aa:2b:a9:3b:
04:c5:41:f6:ee:b7:d7:7c:5b:1a:3b:e0:cd:20:ce:ed:ec:33:
16:71:cf:be:b5:ac:31:fd:73:d3:42:83:bd:ad:58:3f:7b:53:
7c:12:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:44 2026 by rpki-client