Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa
File: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (raw, json)
Hash identifier: mDA6Q0J8o2nQXsxP1pDoboMy2X7p8vNNbvd3OryvU/0=
Subject key identifier: A3:64:B4:7D:85:15:F4:62:8D:B3:BB:B4:C1:98:0B:07:79:EB:70:06
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 687D3F855827C8C326095D0A1C99EBB00FC9068A
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa
Signing time: Fri 17 Jul 2026 11:49:13 +0000
ROA not before: Fri 17 Jul 2026 11:44:13 +0000
ROA not after: Fri 16 Jul 2027 11:49:13 +0000
asID: 141995
IP address blocks: 46.250.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7d:3f:85:58:27:c8:c3:26:09:5d:0a:1c:99:eb:b0:0f:c9:06:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Jul 17 11:44:13 2026 GMT
Not After : Jul 16 11:49:13 2027 GMT
Subject: CN=A364B47D8515F4628DB3BBB4C1980B0779EB7006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:ca:60:64:05:2c:66:70:bf:d0:3b:fc:4d:
83:6e:e7:27:99:d7:85:48:b6:31:9b:88:b4:bc:cc:
8f:54:ed:90:c9:be:b3:d3:bd:fb:f1:1f:8c:71:a3:
ca:c5:1d:06:ab:cf:d4:69:ed:4c:75:51:97:fc:a3:
e3:e7:16:f2:62:da:cb:11:85:6e:eb:a2:c4:84:ff:
1a:33:98:7c:26:5f:54:6c:65:d7:61:fc:41:fd:1c:
b7:4c:e0:a2:af:47:cc:3c:3d:16:6e:1a:98:47:a9:
e8:14:89:cd:b2:d6:3e:64:db:8a:02:90:8a:76:bc:
51:0a:cb:6c:18:47:88:29:cd:f3:86:07:8c:46:0e:
72:77:a1:32:ea:48:d7:86:dd:93:ce:44:e3:9b:b2:
d9:a3:ef:f7:bd:56:60:d8:02:cd:82:8b:c6:34:88:
1c:42:fd:6e:c8:cf:ea:08:8d:03:60:f1:a4:25:93:
a7:6d:ff:75:19:cb:d1:68:d4:84:cb:14:2e:43:b6:
94:d5:b4:e3:a0:dd:9e:72:a1:6d:fe:b8:23:fb:b2:
d8:7e:5b:f1:37:7b:53:62:c8:df:64:05:08:a2:51:
81:41:19:68:58:09:d9:3f:8d:85:37:12:1e:b8:a5:
37:e1:7e:90:e3:68:aa:fa:23:2b:a7:d2:39:1d:7b:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:64:B4:7D:85:15:F4:62:8D:B3:BB:B4:C1:98:0B:07:79:EB:70:06
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.224.0/20
Signature Algorithm: sha256WithRSAEncryption
d6:58:d0:ed:17:11:6c:e7:a4:df:fd:54:f3:68:ed:20:3a:8e:
f4:5d:06:8a:de:9e:2b:70:d1:6c:b2:8d:09:fd:51:98:35:c9:
df:d4:fc:4f:9c:42:ab:aa:02:73:bf:19:25:43:8d:11:ab:c5:
9f:f2:0b:39:64:a5:2e:bf:d9:7c:83:52:5c:63:6d:1f:9f:61:
21:aa:03:68:8c:b7:9b:b1:84:e4:7e:0a:de:d3:0d:85:47:68:
7c:b0:02:08:de:1a:4a:1d:7a:e0:c1:8f:26:4c:1c:4f:f8:d1:
2c:e8:7b:11:8e:23:a2:a8:12:85:9f:63:d2:30:8a:54:5a:44:
5d:66:e8:1f:4c:78:3c:f5:40:62:06:93:e2:b1:8f:cc:6b:c9:
20:ea:9c:09:06:2e:5a:f3:56:94:8b:84:a1:e0:e8:3f:ef:7b:
e9:98:cd:cd:8b:c1:95:34:1f:f3:4f:ce:05:95:d0:7a:5b:f3:
2b:28:27:c0:13:05:a8:9b:0a:49:98:14:7e:c9:65:f1:cd:16:
46:32:33:f1:11:62:ca:43:e8:82:8a:8e:54:06:c3:8f:45:77:
60:48:76:fc:19:e3:49:ce:0f:32:96:31:44:17:61:64:2b:87:
d0:97:f1:53:03:cf:95:89:fa:9f:36:2e:1a:3e:fd:08:b9:37:
92:10:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:00 2026 by rpki-client