Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36312e302f32342d3234203d3e20313337353137.roa
File: 34352e3134392e36312e302f32342d3234203d3e20313337353137.roa (raw, json)
Hash identifier: bPblgjM8vXENfZasylb5ZzMp1DkYcmu6TBL1HJESdOc=
Subject key identifier: D2:1B:2B:EC:60:A1:3A:BE:08:60:1D:A8:9B:98:97:68:40:8F:A8:78
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 209E88E0894D5E92BD7ACC1FDE9938795E11DAFD
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36312e302f32342d3234203d3e20313337353137.roa
Signing time: Thu 19 Mar 2026 01:42:20 +0000
ROA not before: Thu 19 Mar 2026 01:37:20 +0000
ROA not after: Thu 18 Mar 2027 01:42:20 +0000
asID: 137517
IP address blocks: 45.149.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:9e:88:e0:89:4d:5e:92:bd:7a:cc:1f:de:99:38:79:5e:11:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Mar 19 01:37:20 2026 GMT
Not After : Mar 18 01:42:20 2027 GMT
Subject: CN=D21B2BEC60A13ABE08601DA89B989768408FA878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:8e:b1:a1:b5:b5:2d:a8:97:d9:05:c6:de:
08:89:89:14:70:f2:52:b0:c8:cc:b6:64:ec:ab:ac:
21:b2:4a:f1:b9:56:77:0e:36:e3:1e:41:4a:bc:fc:
57:5d:1a:a0:6d:5a:4a:cd:dd:c7:6c:8f:02:6d:9e:
2e:c8:a8:d9:af:65:1a:9b:ee:59:ef:c1:74:df:ed:
c5:91:64:91:b4:ee:69:c5:a8:26:28:8e:d3:10:8a:
04:5e:c1:92:5f:fc:59:f9:86:25:69:60:8e:4f:42:
b0:b3:40:ae:92:1e:0d:82:aa:3d:bb:b7:8a:c5:9c:
29:a8:25:fc:21:db:94:ac:1c:af:76:74:da:c0:c6:
a9:08:83:21:7c:96:1a:d2:f7:c6:ab:70:cd:74:77:
02:6c:27:40:d6:7f:79:ef:62:2f:13:a3:5a:e0:5c:
4e:76:22:f1:c0:c4:18:00:30:70:27:38:7c:e1:df:
f7:92:c9:22:cb:0e:44:af:96:86:47:80:6a:ef:87:
dc:d5:b5:79:87:50:15:26:a2:78:a0:46:ad:bd:18:
b8:fd:b0:3f:97:e9:30:7c:d3:85:62:41:eb:da:46:
28:10:ef:45:d7:24:ab:36:4b:85:23:8b:17:d4:d6:
66:9c:a7:0c:0e:42:5a:b4:7b:8e:fb:bf:95:67:31:
89:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1B:2B:EC:60:A1:3A:BE:08:60:1D:A8:9B:98:97:68:40:8F:A8:78
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36312e302f32342d3234203d3e20313337353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:93:ae:aa:41:74:da:33:39:ee:5a:94:05:e7:7d:46:f5:ab:
8f:c3:07:75:98:86:b2:a3:ae:71:4b:04:04:0d:c1:58:b0:a9:
6e:61:77:8e:b3:c1:2d:cf:0e:9f:69:52:fb:d6:be:0c:b1:bb:
e3:2c:18:e9:29:60:18:20:e8:41:9d:3d:55:df:88:48:74:1a:
ee:bd:0c:a1:1a:54:e2:56:b8:65:99:8a:d7:98:5e:a3:53:81:
36:cd:b7:13:ce:18:60:2b:51:b7:f4:31:09:72:1c:3b:26:2e:
70:a1:ab:ab:63:c6:a3:61:9e:69:e3:77:a2:67:64:ea:71:32:
6b:e1:03:3c:af:9e:41:c7:d3:07:d9:dc:38:00:51:e3:25:0c:
85:08:3c:3b:9d:28:c0:78:83:b6:ab:8a:10:4b:ce:f5:13:6a:
07:14:ef:52:43:37:c8:4b:01:37:04:f6:4e:87:f4:b9:c4:34:
ba:a9:7c:a6:d4:a2:b9:e1:46:54:dd:fa:68:fa:c6:eb:80:f4:
52:f8:a3:2a:9a:27:81:ce:5e:43:ae:0a:7b:0d:65:06:5e:cc:
1e:b7:27:4d:3e:cf:e5:c9:17:8f:9c:30:67:ad:9c:d3:b9:c8:
d6:df:95:3c:45:63:b7:82:67:c2:fa:bc:4e:16:60:45:16:2a:
28:e3:fa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:38:47 2026 by rpki-client