Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36302e302f32342d3234203d3e203634323637.roa
File: 34352e36362e36302e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: ZF32PAG53xWynbk01utLLBmDRxOU851zkR0rreW86uY=
Subject key identifier: C3:A1:BC:45:17:F2:F1:A8:45:D9:FC:F7:E5:F3:DB:74:0F:78:AF:24
Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea
Certificate serial: 0B5F21C92ABB386E067EE39642A1A6AD1B165AD8
Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36302e302f32342d3234203d3e203634323637.roa
Signing time: Fri 10 Oct 2025 12:26:28 +0000
ROA not before: Fri 10 Oct 2025 12:21:28 +0000
ROA not after: Fri 09 Oct 2026 12:26:28 +0000
asID: 64267
IP address blocks: 45.66.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5f:21:c9:2a:bb:38:6e:06:7e:e3:96:42:a1:a6:ad:1b:16:5a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2674263aecd572673f87614919ca492c79faea
Validity
Not Before: Oct 10 12:21:28 2025 GMT
Not After : Oct 9 12:26:28 2026 GMT
Subject: CN=C3A1BC4517F2F1A845D9FCF7E5F3DB740F78AF24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:e3:93:7d:bd:9c:48:c0:cd:db:4a:ef:39:
db:3b:61:86:5f:29:18:d8:a3:ab:fa:de:4f:82:1d:
1b:29:a7:af:5e:9a:81:06:6b:a9:d2:77:33:ca:25:
e3:40:9d:9c:40:87:3d:ea:c0:cf:81:45:cc:1c:5d:
90:97:3f:a9:e6:09:3f:36:4c:59:d2:c8:81:c1:d3:
51:70:aa:f2:ae:c5:7f:6b:1c:44:6f:8f:c0:43:ac:
39:a0:1f:eb:9d:58:45:69:12:a9:44:02:c9:6c:d1:
34:0f:0d:d1:2d:ed:1b:61:a9:76:b9:55:37:d0:82:
64:0f:38:42:fd:b2:67:b5:5b:cf:fa:ea:47:a3:a2:
17:2c:95:d4:cc:e0:42:56:1f:96:aa:76:22:00:9f:
e8:35:43:b5:71:27:cc:bc:ef:fd:26:8d:7d:b5:a3:
87:2b:b4:d4:0e:e1:e2:ef:2c:25:e3:e5:03:2b:0e:
38:fb:73:eb:9d:2a:5d:c4:cb:d6:54:66:12:e0:24:
c1:8c:dd:bd:af:f0:df:a6:45:2c:25:4d:29:97:b8:
c8:2d:7e:23:4a:75:75:41:6a:92:9a:78:99:d2:f7:
be:71:3c:6f:e5:e9:d9:38:3f:0a:19:02:8a:7f:ae:
c0:17:a7:03:82:ae:37:40:e4:55:6d:31:1c:83:ba:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A1:BC:45:17:F2:F1:A8:45:D9:FC:F7:E5:F3:DB:74:0F:78:AF:24
X509v3 Authority Key Identifier:
keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36302e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.60.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:5a:f9:4d:2b:4f:ab:8c:f1:26:f6:99:d0:cb:60:76:4d:7d:
24:e6:fb:4a:4d:d9:f9:91:de:34:0d:fc:76:50:ab:29:94:bf:
d3:de:37:6d:0a:36:8b:d6:a4:52:6d:9c:98:25:6f:10:a4:82:
15:ec:48:dd:0c:c7:d6:5a:d9:52:5c:03:86:e8:70:ba:43:d0:
8b:cd:8f:39:b3:15:a6:03:f5:e7:74:b8:da:63:3a:be:89:58:
13:4c:75:1e:3b:2f:69:4a:89:63:dd:c8:de:b3:74:e8:12:2d:
c8:07:08:46:d9:a3:1c:23:41:23:d7:a8:ff:09:a5:16:11:d7:
87:1a:14:92:4f:36:9a:2c:2c:7f:a9:22:4e:bf:a3:76:a7:58:
55:f1:9a:1b:b3:39:93:2c:77:60:76:8e:bc:d6:8f:69:72:3a:
93:40:a1:f5:f0:95:d7:5e:32:07:90:51:1e:b0:f1:63:40:7a:
bd:d9:e4:25:ef:fc:54:ec:ea:d1:0b:99:8b:82:33:e3:f0:76:
21:78:e0:17:ae:95:21:54:c8:7b:b3:b7:1e:32:9f:6a:e7:db:
b3:41:60:a4:06:58:82:5a:05:a1:a6:8b:e4:d4:18:72:2e:5a:
91:f9:2e:c3:fd:7a:f0:6c:cc:5f:69:3d:45:ad:53:21:d4:90:
c2:66:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:45 2025 by rpki-client