Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131332e302f32342d3234203d3e20313337383937.roa
File: 34352e36352e3131332e302f32342d3234203d3e20313337383937.roa (raw, json)
Hash identifier: Mj0OLb1AwuCHBT6tDpL+I5oLpZT3HHRQxQJibY28aHs=
Subject key identifier: 3B:94:C0:7D:A1:2B:8A:4A:AD:AA:46:A1:0D:25:14:9A:35:19:CC:24
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 05B967C8EE19EE760EAFAB9EC9E957E0E5DF0621
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131332e302f32342d3234203d3e20313337383937.roa
Signing time: Thu 26 Mar 2026 09:00:55 +0000
ROA not before: Thu 26 Mar 2026 08:55:55 +0000
ROA not after: Thu 25 Mar 2027 09:00:55 +0000
asID: 137897
IP address blocks: 45.65.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b9:67:c8:ee:19:ee:76:0e:af:ab:9e:c9:e9:57:e0:e5:df:06:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:55 2026 GMT
Not After : Mar 25 09:00:55 2027 GMT
Subject: CN=3B94C07DA12B8A4AADAA46A10D25149A3519CC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:a5:bd:79:c0:15:1d:d9:98:5c:13:be:95:
4c:00:91:08:00:b8:11:fb:22:54:e8:63:0b:c9:48:
cf:b9:02:ff:d0:f0:06:a9:ff:0a:24:6c:bb:24:47:
fb:a6:ad:c1:8a:c1:a3:dd:3a:ca:1e:7e:73:ce:af:
2a:f9:d0:0b:ec:10:12:bc:4a:53:1d:21:07:df:9a:
bc:ed:01:75:56:6d:26:eb:e2:55:8c:77:dc:f3:7e:
01:df:ff:f1:36:9b:64:ad:01:ff:d8:37:0d:43:a4:
d8:5c:90:73:9b:ed:3f:4e:05:16:2a:49:69:84:4a:
1c:9f:75:94:01:11:07:a7:0c:4d:8e:93:21:f0:82:
40:35:96:cd:31:a5:c8:0c:3c:6c:9a:34:e3:f8:d4:
48:f7:59:12:ea:68:ae:bd:01:22:8e:07:85:3f:37:
6c:94:90:a8:47:60:1b:d1:bd:8e:f4:40:3d:c7:b8:
0e:a2:9b:e9:35:ac:d2:44:0a:39:7a:4c:7d:98:47:
c4:8e:eb:ea:8a:f4:f6:01:d9:52:37:90:8a:5d:13:
fa:dd:93:32:49:3a:c5:4f:db:7e:6d:57:a4:1c:d7:
5a:34:65:bb:75:a4:f9:62:03:4e:9f:4d:5c:98:39:
c9:55:ce:45:36:27:c1:7c:c1:c8:1b:4d:7b:6f:78:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:94:C0:7D:A1:2B:8A:4A:AD:AA:46:A1:0D:25:14:9A:35:19:CC:24
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131332e302f32342d3234203d3e20313337383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:68:5f:8d:95:38:42:5f:c4:98:22:cf:6e:7a:a0:72:39:6c:
99:70:89:50:ec:0f:2c:29:65:21:da:3f:37:17:f3:32:15:d0:
65:ee:86:21:f7:60:91:a4:a5:18:c4:bf:59:84:32:eb:f9:0a:
b0:4c:d8:38:77:d7:2a:d9:7f:49:b4:61:91:42:2b:42:c6:40:
7d:13:2a:18:e1:aa:d0:92:98:4d:a4:6a:db:fa:98:2b:5d:b5:
17:2c:66:d1:d6:99:4d:2f:19:ca:22:c2:c4:29:c0:fd:7e:89:
d9:41:d3:3d:00:c9:23:33:31:ee:7a:99:49:b5:6e:f6:c8:47:
0c:e9:38:aa:27:00:36:a8:ea:fc:c3:ef:b0:28:6e:83:62:d0:
27:72:b5:53:f3:61:72:40:84:60:ad:6d:84:1c:a2:6d:ad:b8:
bb:3a:4c:52:35:8c:f9:6e:29:de:1d:11:00:1a:50:d1:40:4e:
bb:aa:11:11:54:00:f4:7f:32:13:09:7a:b7:d9:a8:7a:90:96:
23:70:a6:4d:ce:9c:cb:37:bb:12:2d:88:8b:a7:17:d6:56:29:
ea:bd:2f:4d:3f:d4:0b:92:c2:82:40:f1:ae:d7:a5:47:02:8d:
b4:10:43:9b:47:d0:53:cb:68:ba:1b:70:09:80:a3:77:54:d6:
ea:67:40:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:10:20 2026 by rpki-client