Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e203633373933.roa
File: 34352e3134392e36322e302f32342d3234203d3e203633373933.roa (raw, json)
Hash identifier: oy5gMQGGM7V8693/jNixJCe0gJ3wzXsGETUWwTd8ZEA=
Subject key identifier: 65:71:A7:94:29:A5:A1:42:19:3B:8A:A2:3C:57:93:A2:31:DF:BD:73
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 275698087EA0BA05EB658B5B4370344AD2447753
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e203633373933.roa
Signing time: Thu 24 Sep 2026 13:22:33 +0000
ROA not before: Thu 24 Sep 2026 13:17:33 +0000
ROA not after: Thu 23 Sep 2027 13:22:33 +0000
asID: 63793
IP address blocks: 45.149.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:56:98:08:7e:a0:ba:05:eb:65:8b:5b:43:70:34:4a:d2:44:77:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Sep 24 13:17:33 2026 GMT
Not After : Sep 23 13:22:33 2027 GMT
Subject: CN=6571A79429A5A142193B8AA23C5793A231DFBD73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:ad:df:80:10:26:4a:f3:65:fc:5d:97:12:
08:9e:b7:81:c0:0b:2d:72:ab:fa:0e:46:69:08:c5:
45:9d:69:61:8a:ef:da:ce:a5:10:ef:f4:52:6b:03:
5e:c0:1b:a9:65:8c:ea:ba:d1:de:8a:d2:b3:b3:5f:
1e:0b:40:5c:a5:36:92:e8:4d:22:c2:13:0a:11:61:
2a:ce:0e:c4:4f:bb:39:5c:d1:5d:96:94:5e:51:f8:
40:4f:7d:34:fb:8a:d2:8b:4f:9e:67:4b:38:9d:cf:
6a:11:4e:c3:d9:09:a0:c4:b7:c4:f6:f5:cf:97:b2:
19:b3:62:62:1b:b1:66:ad:c4:bb:64:69:63:b6:44:
47:74:c8:ce:66:78:73:16:6f:ec:60:2d:72:e0:3f:
7a:eb:a6:83:3c:1a:c1:79:55:14:55:65:bf:f0:b4:
f1:08:9f:98:a9:fc:43:f9:0b:7e:86:61:58:04:62:
0e:e1:e9:1e:0d:b1:56:11:18:63:77:aa:ea:55:1f:
cd:5b:2a:a0:48:8d:6c:3f:c5:88:7e:db:21:dc:aa:
8a:dc:31:93:32:5a:56:83:14:ca:4f:dc:6d:60:03:
85:81:89:5e:33:c0:33:7d:ea:38:2f:db:e6:e1:c4:
46:c3:36:e1:2c:8e:54:89:69:a1:8f:23:e5:43:a9:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:71:A7:94:29:A5:A1:42:19:3B:8A:A2:3C:57:93:A2:31:DF:BD:73
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e203633373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:6c:34:f7:05:c2:b1:08:e7:94:a6:fc:d5:67:43:e1:5c:a0:
e6:90:4f:a8:ce:4c:f6:86:ae:59:79:47:f2:6a:b8:db:12:c6:
d3:54:f6:6f:d1:4b:c4:f2:b2:e6:48:61:1d:87:79:77:7c:09:
cb:63:73:7c:80:bc:a4:27:92:48:97:1e:9c:8a:3c:2e:c1:f6:
ca:9c:5f:e4:ea:ea:59:f8:a9:a5:94:49:75:97:3c:e6:a4:9b:
d0:10:3c:77:35:61:33:ca:3c:61:98:2f:85:20:da:5b:26:b6:
86:a8:2a:9f:db:f2:77:04:af:17:2b:3d:6d:b6:e4:d8:6d:f8:
60:fc:a4:64:d8:13:2f:f5:a6:fc:4b:6c:37:f6:45:85:fb:e1:
88:27:70:f6:8e:90:ab:b7:e7:9b:0f:0b:00:ef:ee:db:4d:99:
0a:ef:ee:79:c0:f1:97:71:bd:17:a2:bb:79:50:8b:7d:af:0f:
0e:f4:61:d9:47:5a:04:ac:2e:d1:53:c8:7e:7a:ce:20:52:11:
9b:c8:e2:60:73:c1:fd:19:1f:16:2d:48:92:15:97:bd:25:b3:
80:b8:f4:4c:0b:b0:e6:73:a0:f7:4e:5e:15:37:7c:30:df:6c:
67:4e:47:b5:f4:1f:c5:46:96:88:12:ff:7c:c7:d9:e3:f2:5f:
c7:20:0d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:45 2026 by rpki-client