Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e31312e3138382e302f32342d3234203d3e203631333137.roa
File: 34352e31312e3138382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 8z75GA2h3GJmOAvSIAX6j2+uRKjXSCm4F76TS2Uc6AQ=
Subject key identifier: 10:DA:11:BD:E1:E6:3B:BC:E9:F2:19:9E:C3:93:F6:3A:DA:D2:E2:79
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 1EF32096FB9B94D9676345032FD090BD68F8AB06
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e31312e3138382e302f32342d3234203d3e203631333137.roa
Signing time: Thu 26 Mar 2026 09:00:55 +0000
ROA not before: Thu 26 Mar 2026 08:55:55 +0000
ROA not after: Thu 25 Mar 2027 09:00:55 +0000
asID: 61317
IP address blocks: 45.11.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f3:20:96:fb:9b:94:d9:67:63:45:03:2f:d0:90:bd:68:f8:ab:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:55 2026 GMT
Not After : Mar 25 09:00:55 2027 GMT
Subject: CN=10DA11BDE1E63BBCE9F2199EC393F63ADAD2E279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:b7:48:73:fd:1f:6a:84:fb:8a:69:c2:1e:
44:5d:cc:93:91:5e:9f:c0:8b:85:34:ef:5b:f3:a7:
9d:f4:cf:81:d1:95:32:a9:6a:d0:74:96:e3:84:0e:
b2:cd:e8:24:86:49:63:bd:f3:ef:41:7c:8d:6e:24:
46:f0:44:79:af:61:cf:2b:3a:a4:30:ac:e3:13:41:
b5:47:0d:0c:93:8a:76:40:c6:d1:4d:96:5c:73:99:
84:ad:11:fa:31:c9:eb:ea:58:73:41:35:a5:23:37:
8e:a9:49:f4:6d:8d:e6:31:05:cd:1b:76:4c:d4:55:
30:8f:76:37:c3:05:13:c9:bc:46:05:ed:70:18:c9:
73:19:10:12:9a:66:6c:5e:5f:b4:20:92:58:3e:99:
08:81:86:56:75:d5:ec:1b:ae:77:73:f9:7e:6a:a5:
a4:e4:a6:cb:6c:ca:c6:cd:fa:5c:1d:f6:c5:db:34:
d1:80:88:84:85:5e:14:9d:af:28:34:22:1a:0b:27:
5c:e3:79:62:d7:44:83:87:49:37:d0:f0:a2:bd:b0:
85:04:94:28:79:e9:95:7c:6c:21:c7:53:8f:cd:d3:
14:a5:31:5b:4d:75:3a:c7:2c:99:fe:41:54:27:83:
ab:dc:6a:51:63:f4:3a:af:73:8d:93:f3:73:08:18:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DA:11:BD:E1:E6:3B:BC:E9:F2:19:9E:C3:93:F6:3A:DA:D2:E2:79
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e31312e3138382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
09:19:2e:a8:7b:ba:23:76:fb:1f:40:4f:13:19:32:f6:8b:d4:
e2:d4:67:48:26:89:84:bf:76:87:3a:f1:22:2d:ed:74:01:da:
33:49:94:20:3a:ca:29:24:55:28:79:42:01:4a:74:ef:31:87:
c5:3b:f9:df:90:51:a0:fa:7b:da:c4:88:a7:05:a9:57:ba:b1:
f9:b0:55:f7:3c:5e:d7:e3:b0:f9:4b:c4:66:fd:2f:cf:67:a2:
74:8b:cc:33:d2:43:d7:c5:03:29:e4:9e:f1:f0:77:82:a6:91:
ee:67:bb:83:c9:76:51:be:fe:da:2c:9e:ab:c0:79:0e:65:b3:
f8:07:9f:a4:48:b0:70:20:f4:1b:3e:08:09:9d:47:9a:88:c0:
0f:1a:74:26:43:44:e6:8e:0e:1e:61:09:52:e1:b2:06:47:67:
8a:77:fb:ee:38:76:c5:c8:e7:9f:6b:bc:0a:2a:a6:0d:f7:1e:
42:ef:2b:87:32:88:30:f4:1d:66:42:c6:a4:ba:8d:92:71:6a:
ef:09:94:f7:a1:9f:48:08:26:c2:22:62:2c:4f:98:f0:e0:c4:
9c:7a:26:ec:1b:fb:b7:cd:f0:a2:55:01:d7:b8:eb:5a:6d:d5:
2c:62:e8:f3:73:eb:b7:11:22:e0:61:e7:77:09:bb:f3:73:e8:
b1:89:fd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:10:09 2026 by rpki-client