Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
File: 34352e39352e36362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: DnfSxb9bQ8cwsGezqIAiqvGyw2I2ROWHah6sMa3uLjo=
Subject key identifier: 42:E8:3A:DA:00:20:05:10:47:9F:4D:1F:EB:33:CF:55:6C:7C:DC:B7
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 1093BC538D71B90161C06C16FAE825167C1C9381
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
Signing time: Mon 11 Aug 2025 00:02:31 +0000
ROA not before: Sun 10 Aug 2025 23:57:31 +0000
ROA not after: Mon 10 Aug 2026 00:02:31 +0000
asID: 834
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 17:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:93:bc:53:8d:71:b9:01:61:c0:6c:16:fa:e8:25:16:7c:1c:93:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 10 23:57:31 2025 GMT
Not After : Aug 10 00:02:31 2026 GMT
Subject: CN=42E83ADA00200510479F4D1FEB33CF556C7CDCB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:d8:a6:44:27:c8:ef:c2:9e:55:e4:85:04:
25:08:70:91:b6:81:68:78:a1:78:72:3d:74:f3:3a:
4f:54:97:7c:4d:66:f7:ab:54:6c:f8:dc:d7:0e:f3:
a7:2b:84:ac:31:21:e9:13:0a:fb:7d:b9:14:d4:98:
2e:ed:57:1b:78:7f:b3:58:60:dd:aa:78:5d:af:f1:
1b:91:6e:d0:7a:92:d9:f1:b3:43:44:ee:2d:4e:96:
f3:82:70:8d:21:d1:9e:f0:10:ef:2e:22:04:0a:84:
cb:b7:b1:d2:d2:0a:ed:17:65:48:19:ff:83:75:37:
49:03:5e:97:f7:48:ca:d7:8b:ad:e8:50:13:9b:85:
60:ae:d8:ba:5d:56:e1:93:3f:d9:c5:2b:5d:c8:b2:
05:15:d3:a0:ca:1f:ee:0f:d3:6b:4b:95:e6:f6:4b:
06:72:d9:e9:e6:5d:ae:bf:1b:d7:47:5a:70:94:a8:
b9:23:2f:63:54:f7:ce:40:b8:e1:e5:f4:f2:cb:ed:
ad:55:1b:c8:55:9f:1a:72:1a:45:55:bb:aa:12:7b:
7d:90:b2:92:06:c2:19:4d:d3:e6:95:cc:64:80:9d:
64:7c:e2:13:e9:d5:3a:6d:a2:10:25:2a:22:af:3d:
d4:24:10:f5:93:d1:19:b9:d7:ff:03:f8:83:5c:dc:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E8:3A:DA:00:20:05:10:47:9F:4D:1F:EB:33:CF:55:6C:7C:DC:B7
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
99:04:45:fc:45:91:5f:24:c7:49:e5:e3:19:1a:4d:eb:da:bf:
96:0b:22:27:17:b0:1f:c7:84:72:80:61:61:5e:56:f6:97:87:
29:bc:86:eb:0b:8a:a0:a9:2a:77:d9:2b:d5:e4:ce:c7:99:d5:
7c:1f:9b:33:3d:2c:94:2a:01:18:b9:ec:c4:72:04:74:8e:89:
a1:51:e9:f9:35:f6:4c:c9:8a:12:96:37:46:e8:a3:bc:e8:1d:
cd:3e:0c:e9:05:8f:fa:6d:80:aa:e6:00:b7:cc:29:45:36:fe:
8b:ed:12:db:6a:03:dd:7d:13:1d:3f:41:44:6e:b3:08:cc:8e:
c4:31:80:68:7d:0a:d1:6a:7e:4c:c3:0a:c9:26:65:ba:de:74:
36:00:64:59:a1:47:7a:53:b3:76:56:5f:25:44:fd:1d:9c:aa:
ca:d0:5e:85:17:be:7f:d3:80:b6:fe:e2:86:8f:88:8b:a4:d8:
ea:d0:2e:e8:c7:f4:7b:bf:7e:28:77:68:c8:30:94:e6:38:ff:
c6:28:f2:e9:a2:86:21:b0:43:90:18:5c:ed:ac:5b:02:80:0f:
15:77:4b:d6:60:62:95:b8:41:ef:bf:9b:b2:d8:12:5e:9e:d2:
dd:72:38:7f:c5:ba:b0:76:df:8d:48:64:af:96:2d:6c:59:51:
c2:92:01:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:40:43 2025 by rpki-client