Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e31312e3139312e302f32342d3234203d3e20383334.roa
File: 34352e31312e3139312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4gkQZnYpa8jUlFvprzpc/lhAo5SRj8+yl2sYjnkfW4o=
Subject key identifier: 5B:44:16:F7:F3:5D:9E:21:E8:95:8D:65:16:69:0A:EE:48:5B:5D:8A
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 37779A54A22E20352C504AC0D519BC9CB673664B
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e31312e3139312e302f32342d3234203d3e20383334.roa
Signing time: Thu 26 Mar 2026 09:00:54 +0000
ROA not before: Thu 26 Mar 2026 08:55:54 +0000
ROA not after: Thu 25 Mar 2027 09:00:54 +0000
asID: 834
IP address blocks: 45.11.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:77:9a:54:a2:2e:20:35:2c:50:4a:c0:d5:19:bc:9c:b6:73:66:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:54 2026 GMT
Not After : Mar 25 09:00:54 2027 GMT
Subject: CN=5B4416F7F35D9E21E8958D6516690AEE485B5D8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:cb:e5:b3:1d:b0:04:77:4d:3d:7c:8a:fb:
e1:99:4b:ca:1a:48:d4:b0:83:af:87:41:23:7b:d3:
56:19:ea:e7:0c:89:55:a8:e4:74:d8:8a:f1:4b:34:
cb:83:e7:8b:b8:41:d0:2e:3b:93:99:c9:f1:2f:d9:
c8:57:69:52:84:d0:eb:20:8e:c8:e5:0b:08:4f:7c:
53:5d:70:fa:37:e2:6e:9c:01:dc:c3:4e:01:d0:fd:
e7:cf:53:0f:70:cc:bd:c3:6d:4e:95:2c:24:29:02:
b5:6f:17:4f:01:3b:1e:34:30:57:72:17:23:7b:c1:
4f:18:ad:ee:c0:2f:e4:dc:47:6d:5b:ec:31:ae:de:
53:2c:6d:e4:d1:a6:69:9d:31:17:ba:a4:65:ca:9b:
3c:2b:03:db:9c:2a:fb:d4:1a:2f:d3:a6:78:1b:e3:
fa:bf:82:da:d3:a3:8d:7b:3e:71:ad:65:cf:d4:cb:
a2:67:41:dc:97:f8:82:a0:7b:16:90:94:c2:08:da:
13:4e:e0:a1:23:01:af:a9:75:3c:56:d8:0c:93:2b:
d0:19:4a:82:2c:31:e2:f4:29:c6:14:19:4b:8b:58:
7d:9f:90:dd:34:16:8b:26:f0:5d:1c:28:d0:de:bf:
99:e8:2b:aa:ec:bf:6f:10:fc:2c:ee:11:39:01:fb:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:44:16:F7:F3:5D:9E:21:E8:95:8D:65:16:69:0A:EE:48:5B:5D:8A
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e31312e3139312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:66:47:fb:e9:af:6b:ff:f8:65:3a:73:7a:9d:75:02:75:0a:
b4:85:d7:ca:e3:b3:81:e6:17:77:55:8e:fd:29:1f:42:ab:f5:
3f:9e:54:93:e7:85:68:d0:e9:ce:5c:10:d3:f7:38:41:a5:64:
0a:0c:ef:d7:a4:92:b0:46:c8:73:cd:c8:ed:71:eb:99:23:4d:
b3:fd:e5:c4:3e:d5:8d:57:d1:a9:c9:84:73:bd:15:2b:97:c3:
2b:c5:43:42:4d:cb:b5:48:70:0c:25:43:4c:70:bb:31:d9:d0:
6a:ad:3e:be:c0:70:e4:74:34:a9:43:1e:a4:c7:b5:e8:8f:05:
e5:e9:26:22:67:a7:d7:66:95:a6:6e:73:33:40:48:e0:6e:1d:
5b:92:78:2a:4a:c3:43:5a:65:04:09:de:90:b8:22:c5:bd:5b:
68:cc:f5:6c:7d:e5:85:ec:ce:c9:79:12:54:e6:55:b2:51:42:
b1:20:1e:d2:86:a0:c6:97:37:fb:7c:37:94:bb:78:8b:1e:3b:
d7:9d:98:53:1c:fd:ee:d2:d0:71:02:68:38:96:ce:35:95:2e:
25:17:05:7b:38:3a:31:0d:4f:34:ad:65:6b:00:20:62:7c:c4:
71:e1:67:c2:bd:31:77:ac:f7:b0:ca:ff:59:2e:44:a0:0b:0e:
61:b6:c7:de
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUN3eaVKIuIDUsUErA1Rm8nLZzZkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM3NGJjNmQwMjUxMzViZWQ5NTM5Nzc5YTAzZmRkNjRh
YmViYTExZjAeFw0yNjAzMjYwODU1NTRaFw0yNzAzMjUwOTAwNTRaMDMxMTAvBgNV
BAMTKDVCNDQxNkY3RjM1RDlFMjFFODk1OEQ2NTE2NjkwQUVFNDg1QjVEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnG8vlsx2wBHdNPXyK++GZS8oa
SNSwg6+HQSN701YZ6ucMiVWo5HTYivFLNMuD54u4QdAuO5OZyfEv2chXaVKE0Osg
jsjlCwhPfFNdcPo34m6cAdzDTgHQ/efPUw9wzL3DbU6VLCQpArVvF08BOx40MFdy
FyN7wU8Yre7AL+TcR21b7DGu3lMsbeTRpmmdMRe6pGXKmzwrA9ucKvvUGi/Tpngb
4/q/gtrTo417PnGtZc/Uy6JnQdyX+IKgexaQlMII2hNO4KEjAa+pdTxW2AyTK9AZ
SoIsMeL0KcYUGUuLWH2fkN00Fosm8F0cKNDev5noK6rsv28Q/CzuETkB+3chAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUW0QW9/NdniHolY1lFmkK7khbXYowHwYDVR0j
BBgwFoAUc3S8bQJRNb7ZU5d5oD/dZKvroR8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTQyNTg1ZjctYmMxYi00OTcwLWJkMzQtZGJmZDJiMjE0
N2QyLzAvNzM3NEJDNkQwMjUxMzVCRUQ5NTM5Nzc5QTAzRkRENjRBQkVCQTExRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzUzhiUUpSTmI3WlU1ZDVvRF9kWkt2
cm9SOC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTQyNTg1Zjct
YmMxYi00OTcwLWJkMzQtZGJmZDJiMjE0N2QyLzAvMzQzNTJlMzEzMTJlMzEzOTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu/MA0G
CSqGSIb3DQEBCwUAA4IBAQBfZkf76a9r//hlOnN6nXUCdQq0hdfK47OB5hd3VY79
KR9Cq/U/nlST54Vo0OnOXBDT9zhBpWQKDO/XpJKwRshzzcjtceuZI02z/eXEPtWN
V9GpyYRzvRUrl8MrxUNCTcu1SHAMJUNMcLsx2dBqrT6+wHDkdDSpQx6kx7XojwXl
6SYiZ6fXZpWmbnMzQEjgbh1bkngqSsNDWmUECd6QuCLFvVtozPVsfeWF7M7JeRJU
5lWyUUKxIB7ShqDGlzf7fDeUu3iLHjvXnZhTHP3u0tBxAmg4ls41lS4lFwV7ODox
DU80rWVrACBifMRx4WfCvTF3rPewyv9ZLkSgCw5htsfe
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:14:35 2026 by rpki-client