Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/34352e3135362e35322e302f32322d3232203d3e2039303039.roa
File: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (raw, json)
Hash identifier: yBIbgSutRM6w0CO+SuN+puGD+EsV9mNPvZ8qHnyid+k=
Subject key identifier: 33:1F:9C:5B:B5:78:51:45:52:4B:1F:32:7B:3C:F9:A5:66:BD:34:8B
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 4FD3E11C190127F5C234F06CEE8854A8B548D3BF
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/34352e3135362e35322e302f32322d3232203d3e2039303039.roa
Signing time: Tue 24 Mar 2026 07:46:53 +0000
ROA not before: Tue 24 Mar 2026 07:41:53 +0000
ROA not after: Tue 23 Mar 2027 07:46:53 +0000
asID: 9009
IP address blocks: 45.156.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d3:e1:1c:19:01:27:f5:c2:34:f0:6c:ee:88:54:a8:b5:48:d3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Mar 24 07:41:53 2026 GMT
Not After : Mar 23 07:46:53 2027 GMT
Subject: CN=331F9C5BB5785145524B1F327B3CF9A566BD348B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:bb:99:af:35:32:1c:cf:06:27:6c:f6:62:
cd:6f:bc:2f:2f:ca:84:b4:f3:aa:2a:b4:6a:27:43:
2c:ac:a3:42:1e:fc:28:c8:d4:20:0f:3e:ed:e9:da:
c8:f4:57:23:07:0b:89:5a:78:bb:c0:96:8a:12:a5:
3d:a4:9f:c7:fa:23:92:4b:87:c6:a5:9c:2b:69:99:
f4:2d:fc:b8:58:5c:40:27:bc:16:bb:d4:04:de:37:
8c:17:83:12:f1:ac:de:1b:dc:cc:45:a5:ef:5c:7c:
6f:be:7a:c9:3d:d2:60:64:fe:0a:16:c9:19:36:55:
78:e3:d7:3e:c5:6e:14:e0:7d:20:a9:e4:03:4b:d9:
1d:a7:6d:f1:20:c6:85:b6:89:c1:2a:4b:b6:7e:39:
5b:75:47:3a:9b:85:00:da:04:38:0f:12:8e:e7:b5:
f3:5f:38:49:27:b4:4b:e5:50:06:95:4e:38:79:28:
1b:c2:c1:af:b2:fa:d7:25:6f:e1:6a:da:b0:21:88:
66:58:93:00:56:81:dc:2d:ec:a0:45:01:c5:e5:ed:
59:b1:76:3a:5c:5d:cf:75:f0:48:f5:75:f4:aa:8a:
8e:3e:8e:8a:a9:67:02:b9:7d:31:2f:66:90:ea:f3:
ab:20:40:e8:e8:61:89:a1:28:78:8e:5a:f0:5e:97:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1F:9C:5B:B5:78:51:45:52:4B:1F:32:7B:3C:F9:A5:66:BD:34:8B
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/34352e3135362e35322e302f32322d3232203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:89:c3:a4:57:c4:7a:b3:ba:ee:af:d8:88:b1:66:68:51:84:
4a:1e:e6:9f:f8:5a:f9:da:87:f0:ac:ee:67:52:d5:b8:0b:bc:
6b:4c:e7:f6:b5:11:0c:5b:fc:7c:4c:c9:d2:8f:2f:29:14:98:
4b:2c:4c:aa:b3:eb:28:f7:97:df:76:85:89:f3:96:a8:6e:fe:
9e:87:99:f2:3a:3f:66:81:bf:b8:44:54:0c:a0:6f:1b:49:a7:
c5:09:70:70:e8:4a:15:b4:86:c0:30:7d:6d:4f:68:b9:95:a6:
70:28:65:cf:c5:fe:81:0e:ce:8d:f4:97:f1:7f:c4:34:68:3f:
b8:0d:ef:c7:4c:2e:e9:30:b3:8c:98:b1:eb:25:57:9c:fd:fe:
ae:54:c3:dc:d4:24:fc:4b:6f:8d:ef:15:79:ef:20:c5:38:34:
0c:75:7a:41:40:19:6b:61:ed:1e:14:fb:49:07:59:56:5a:b6:
e1:df:d6:57:b0:10:6c:41:87:63:af:c4:21:a6:73:c8:22:36:
38:a9:9c:c0:56:f8:47:70:12:08:83:1b:bc:66:4f:c3:22:6c:
93:04:1c:81:ef:58:e5:36:41:70:84:d1:2e:67:41:49:d4:9c:
43:cf:bf:e9:5b:b1:27:71:1a:f6:a4:d4:6f:b3:1c:3b:f9:c4:
40:97:af:05
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUT9PhHBkBJ/XCNPBs7ohUqLVI078wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4
MGM5MGI5NDAeFw0yNjAzMjQwNzQxNTNaFw0yNzAzMjMwNzQ2NTNaMDMxMTAvBgNV
BAMTKDMzMUY5QzVCQjU3ODUxNDU1MjRCMUYzMjdCM0NGOUE1NjZCRDM0OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZRbuZrzUyHM8GJ2z2Ys1vvC8v
yoS086oqtGonQyyso0Ie/CjI1CAPPu3p2sj0VyMHC4laeLvAlooSpT2kn8f6I5JL
h8alnCtpmfQt/LhYXEAnvBa71ATeN4wXgxLxrN4b3MxFpe9cfG++esk90mBk/goW
yRk2VXjj1z7FbhTgfSCp5ANL2R2nbfEgxoW2icEqS7Z+OVt1RzqbhQDaBDgPEo7n
tfNfOEkntEvlUAaVTjh5KBvCwa+y+tclb+Fq2rAhiGZYkwBWgdwt7KBFAcXl7Vmx
djpcXc918Ej1dfSqio4+joqpZwK5fTEvZpDq86sgQOjoYYmhKHiOWvBel02nAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUMx+cW7V4UUVSSx8yezz5pWa9NIswHwYDVR0j
BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw
M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E
SkM1US5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA5MjMzODkt
MmJkZS00M2UwLWIwZDUtZmMyNDRhNjMwM2QwLzAvMzQzNTJlMzEzNTM2MmUzNTMy
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItnDQw
DQYJKoZIhvcNAQELBQADggEBAF+Jw6RXxHqzuu6v2IixZmhRhEoe5p/4Wvnah/Cs
7mdS1bgLvGtM5/a1EQxb/HxMydKPLykUmEssTKqz6yj3l992hYnzlqhu/p6HmfI6
P2aBv7hEVAygbxtJp8UJcHDoShW0hsAwfW1PaLmVpnAoZc/F/oEOzo30l/F/xDRo
P7gN78dMLukws4yYseslV5z9/q5Uw9zUJPxLb43vFXnvIMU4NAx1ekFAGWth7R4U
+0kHWVZatuHf1lewEGxBh2OvxCGmc8giNjipnMBW+EdwEgiDG7xmT8MibJMEHIHv
WOU2QXCE0S5nQUnUnEPPv+lbsSdxGvak1G+zHDv5xECXrwU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:35:37 2026 by rpki-client