Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa
File: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (raw, json)
Hash identifier: nXsRcDYvsgatWI/O3gljBuggr+1cOAgA+ZQ5ftqxqAU=
Subject key identifier: 74:D4:0C:7C:F7:BB:F5:CC:CB:41:8C:95:40:79:F1:5A:53:35:0F:AD
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: F389871ED24443831BCD321C8AB4A1A854625A
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa
Signing time: Fri 17 Jul 2026 11:49:13 +0000
ROA not before: Fri 17 Jul 2026 11:44:13 +0000
ROA not after: Fri 16 Jul 2027 11:49:13 +0000
asID: 141995
IP address blocks: 46.250.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft
rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f3:89:87:1e:d2:44:43:83:1b:cd:32:1c:8a:b4:a1:a8:54:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Jul 17 11:44:13 2026 GMT
Not After : Jul 16 11:49:13 2027 GMT
Subject: CN=74D40C7CF7BBF5CCCB418C954079F15A53350FAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:10:76:b1:b5:a7:96:31:e7:9b:df:e3:69:
82:63:ad:c4:4c:08:44:bd:a9:b9:17:5d:00:2a:7b:
86:3a:9e:60:40:49:f0:c0:bd:61:d8:ea:5f:8d:b1:
b0:bf:ba:60:9c:f2:67:0a:7c:44:58:fa:44:cc:3d:
c6:6d:cb:eb:13:29:32:75:c3:f6:d1:d9:d8:91:04:
03:82:e6:43:7a:54:31:39:a0:76:d2:0b:29:36:1a:
46:1f:67:9d:70:54:cb:29:3e:9e:de:7c:bf:2a:97:
8c:a1:b7:5c:08:d0:8d:0f:47:2b:3d:da:43:ec:1c:
8d:00:3e:bf:69:f8:55:22:2b:5e:f1:db:32:0a:ef:
ad:74:6d:af:f0:66:7d:60:38:84:28:3f:35:56:40:
52:15:85:87:52:55:d7:b9:13:b8:9a:f7:d7:ff:ce:
d6:5c:25:2c:f5:c3:99:6b:c8:22:5c:7c:49:80:84:
98:9a:c1:bb:df:a8:d8:b0:e3:8a:01:b8:6c:ad:36:
80:1f:d9:e8:80:fb:17:48:c6:38:44:4c:b2:03:75:
1e:a5:13:6d:5b:3a:a7:3e:a1:79:c2:06:00:1b:39:
ba:8c:c4:b9:07:02:23:27:89:ab:f0:bc:5d:cd:e9:
91:29:db:2f:b2:06:d0:d0:3d:10:2f:74:ad:91:f0:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D4:0C:7C:F7:BB:F5:CC:CB:41:8C:95:40:79:F1:5A:53:35:0F:AD
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.240.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:60:cd:cb:63:03:f6:2e:5d:1d:72:d0:59:8e:7f:a1:22:87:
af:b3:04:16:2d:f7:34:76:e1:c0:c0:ae:3b:c4:92:6f:27:f6:
17:92:8e:9b:1e:d7:53:c3:ac:4c:9a:f5:40:0f:c7:7b:d8:d7:
06:4f:2f:a5:00:4d:50:8e:af:7d:91:54:5a:db:2f:d4:a8:c3:
33:02:a0:c2:b1:83:a8:8d:31:74:15:c4:d2:98:e0:3a:3a:ee:
3c:67:18:a4:c8:58:4a:24:a2:48:aa:47:ac:c6:16:05:9d:47:
c5:f3:bc:78:93:b1:ce:f9:2e:70:4d:13:30:30:c9:5d:f2:7c:
79:03:c7:1e:e5:c1:b8:99:cc:8b:36:ee:fc:ce:0b:b2:30:10:
f5:51:2f:90:d0:4b:16:9d:b3:7b:b1:da:83:ad:7b:95:68:af:
cd:44:ed:39:87:07:4e:df:2c:ba:56:59:c2:85:53:32:ca:18:
b3:fc:d9:52:4d:3d:1d:5a:bf:c9:eb:f5:d5:63:9e:bb:39:ef:
7d:fb:2e:7c:f0:e0:fd:75:45:19:07:79:7e:28:f3:f4:f5:d3:
76:22:ca:7f:1c:34:23:81:c9:78:d2:99:4b:3e:c3:ea:65:2a:
13:d1:96:e8:66:7c:ac:00:95:3c:cd:31:4b:fd:65:b4:fa:d4:
b2:7a:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:09 2026 by rpki-client