
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36302e302f32342d3234203d3e203534323532.roa
File: 34352e36362e36302e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: 07DX+W8TeroyGa5hcwYk2V3rpVrx11S+EMaM/klvGiM=
Subject key identifier: 53:C2:E4:32:6D:B6:1C:6B:52:F5:3E:D5:DE:3B:FA:88:E3:5F:62:FB
Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea
Certificate serial: 2E38FBF5694B05F5CE9A91D86B1592FD6C22305C
Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36302e302f32342d3234203d3e203534323532.roa
Signing time: Fri 10 Oct 2025 12:26:28 +0000
ROA not before: Fri 10 Oct 2025 12:21:28 +0000
ROA not after: Fri 09 Oct 2026 12:26:28 +0000
asID: 54252
IP address blocks: 45.66.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:38:fb:f5:69:4b:05:f5:ce:9a:91:d8:6b:15:92:fd:6c:22:30:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2674263aecd572673f87614919ca492c79faea
Validity
Not Before: Oct 10 12:21:28 2025 GMT
Not After : Oct 9 12:26:28 2026 GMT
Subject: CN=53C2E4326DB61C6B52F53ED5DE3BFA88E35F62FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:78:58:75:bf:c8:7d:92:8e:53:ff:62:b9:
d3:ee:fb:ff:95:76:3e:5d:2d:47:35:a4:40:a1:95:
a6:a5:85:7c:a4:0c:bf:1d:d4:f8:aa:2a:75:db:4a:
87:39:e9:2d:a8:3e:ce:06:e3:1b:b7:41:aa:8b:24:
2d:94:a2:65:a9:65:23:33:7c:d6:e0:20:49:95:4b:
15:98:e5:60:fc:2e:d3:e7:4e:16:9b:5d:5f:b9:1f:
0d:12:2f:70:2e:35:52:6e:c8:8e:22:29:08:f3:9c:
f0:5d:3e:1e:a0:86:77:9a:09:fb:16:3b:76:77:0e:
b8:c4:b3:5e:c6:4b:0a:9c:77:9d:db:c0:77:13:f7:
3d:bc:f5:15:ee:da:06:19:14:51:47:50:60:12:d7:
5c:37:0a:7e:20:dd:e3:b5:c2:c2:f3:62:42:f2:5f:
dd:08:07:01:19:18:b8:18:15:c2:a5:77:44:78:53:
8a:79:6f:dd:56:22:02:b1:64:0a:f2:e2:7a:aa:1f:
4e:ae:5a:d2:75:21:53:b3:47:6e:f9:27:e4:3a:60:
a8:5f:43:4c:a7:3b:e4:b8:52:39:4a:52:a2:88:f1:
45:a8:f4:93:11:dc:fe:f5:a7:3c:02:5a:ae:91:d8:
1f:d1:33:27:d3:9f:3b:07:35:24:f6:69:cc:ca:a4:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:E4:32:6D:B6:1C:6B:52:F5:3E:D5:DE:3B:FA:88:E3:5F:62:FB
X509v3 Authority Key Identifier:
keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36302e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.60.0/24
Signature Algorithm: sha256WithRSAEncryption
03:36:94:46:c1:27:43:80:f6:72:5c:d8:02:30:ff:43:05:ca:
b8:4f:67:6f:3b:f5:85:fb:1f:d6:d4:59:cb:c1:7b:3b:3e:82:
38:0f:f1:f9:b4:55:81:30:1e:72:9b:4d:ba:5f:72:50:77:2a:
42:9f:9f:16:94:10:48:18:7f:49:15:c6:5a:c9:ec:d4:80:0f:
dd:8b:f2:7c:9b:fd:32:54:5a:31:5c:29:63:dd:2c:79:62:10:
e3:9b:18:0b:cc:fe:ee:c2:b7:8e:fd:e3:8f:51:b6:25:c3:f5:
12:2f:6b:66:6a:65:83:e6:f2:eb:4e:35:27:35:6e:0e:56:b8:
35:6c:84:4d:e5:d6:59:60:e1:68:18:08:38:92:36:fc:1c:96:
49:6f:92:92:07:23:4b:37:c8:48:20:1f:63:c6:6f:2e:e9:70:
5d:c0:1a:f3:f6:55:de:9e:c7:57:75:d1:de:1b:1d:08:48:a5:
b3:c5:d0:f6:77:35:f2:3e:17:78:5b:9e:2f:e7:03:26:a9:d3:
cf:ac:b1:12:c4:80:bd:33:94:97:a3:bf:7d:3e:db:61:4a:b4:
c9:2f:a0:fb:d4:72:ea:84:d9:84:c3:63:fd:70:0a:e2:d8:72:
0e:9b:29:ec:d2:a9:fe:b6:ac:67:1c:eb:22:68:db:d1:c6:24:
01:f9:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:38 2025 by rpki-client