Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39322e302f32322d3234203d3e20323733393137.roa
File: 34362e31382e39322e302f32322d3234203d3e20323733393137.roa (raw, json)
Hash identifier: fjDR7XLLRcEnCAx6LxpCutT8iK4UeUNxvyxJ7ej6HCM=
Subject key identifier: 47:BC:C7:B8:25:BD:CE:D2:46:0E:37:F0:1F:A4:CD:24:14:1F:0B:C7
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 60CE62D1AC7F508167F690BFB84B0DF53DAD4058
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39322e302f32322d3234203d3e20323733393137.roa
Signing time: Tue 03 Nov 2026 17:20:26 +0000
ROA not before: Tue 03 Nov 2026 17:15:26 +0000
ROA not after: Tue 02 Nov 2027 17:20:26 +0000
asID: 273917
IP address blocks: 46.18.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ce:62:d1:ac:7f:50:81:67:f6:90:bf:b8:4b:0d:f5:3d:ad:40:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Nov 3 17:15:26 2026 GMT
Not After : Nov 2 17:20:26 2027 GMT
Subject: CN=47BCC7B825BDCED2460E37F01FA4CD24141F0BC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:27:9b:9c:f7:65:50:16:7a:1c:ad:e0:60:
f1:50:41:3d:da:6f:7c:53:f6:fe:f2:14:57:7d:f5:
2d:87:4f:5e:16:50:f5:37:7c:9b:d9:ad:d0:11:75:
37:dd:05:5d:af:d2:b4:bb:8b:1d:7c:f1:ba:20:75:
4b:60:e1:96:32:35:1a:cb:aa:b3:18:2f:91:0b:42:
da:63:da:0f:38:01:d0:1d:44:bf:35:49:07:26:fd:
16:db:68:66:94:2b:66:a4:2b:23:c7:7b:a5:52:72:
74:2c:c2:b1:c4:68:cd:6b:a8:15:29:65:c7:47:dd:
00:cc:1b:2f:ee:76:c1:94:04:8e:26:66:33:b9:00:
f6:e7:a2:d9:5e:f7:1c:e3:f1:00:bd:84:58:9d:3f:
6e:7a:dc:34:b0:8e:7d:ba:3d:3a:70:8d:41:f5:51:
2e:87:d4:52:9f:eb:c6:c7:1f:be:fc:a6:b1:23:81:
ea:42:0a:08:6b:26:d8:a1:93:1b:53:51:3e:d6:ed:
b6:89:60:a5:18:5f:85:30:3f:bb:04:67:0d:69:d4:
c9:6a:70:a8:29:e4:ea:0d:99:c6:f1:06:98:a5:71:
3c:ba:af:13:49:f4:b5:a0:8b:93:e8:e9:6a:9f:de:
13:cf:a4:a9:21:69:97:7e:38:6c:dd:bc:99:2a:a8:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BC:C7:B8:25:BD:CE:D2:46:0E:37:F0:1F:A4:CD:24:14:1F:0B:C7
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39322e302f32322d3234203d3e20323733393137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.92.0/22
Signature Algorithm: sha256WithRSAEncryption
34:91:eb:b2:9f:3f:2c:0f:38:58:41:53:95:52:07:b6:b1:38:
8a:61:8e:69:91:7a:9f:b2:fd:2c:e3:b0:b3:d2:8f:46:59:f3:
96:63:7c:de:aa:35:7c:89:bf:d5:6f:70:bf:5f:ed:13:b3:61:
93:2c:b5:2f:73:d3:65:98:45:a6:69:b9:cc:fc:a2:72:8c:af:
37:1f:14:08:4a:f7:f8:3b:69:1a:71:2e:8b:0f:91:3e:47:41:
08:65:23:b8:4a:89:c3:08:e5:66:56:d8:37:32:5a:a3:c0:7b:
c4:55:b4:dc:d8:cf:2d:95:ce:a3:5c:9b:9d:2b:84:5a:ba:c5:
6d:bb:38:b8:c3:22:1f:d7:d9:61:0b:39:83:07:4e:ea:13:7e:
92:a3:27:1b:98:ed:fc:ae:3e:40:b3:63:08:b4:6a:cc:32:24:
a9:c0:c3:7e:7b:7c:06:55:bd:18:85:ae:60:f3:32:d0:f0:26:
1f:c4:80:44:d9:56:78:bb:4f:93:26:f7:58:79:7b:90:a8:5d:
c9:82:d5:5f:ac:8b:3d:ca:5b:2e:1c:7a:82:d8:23:8c:f6:a6:
8b:91:b7:20:c5:da:9f:1b:aa:b2:65:1a:3b:8f:43:af:fa:d1:
d1:c7:87:14:87:a6:ea:9f:b3:dc:d2:af:e0:e0:19:ac:ad:12:
04:90:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:24 2026 by rpki-client