Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131332e302f32342d3234203d3e20323138333232.roa
File: 34352e36352e3131332e302f32342d3234203d3e20323138333232.roa (raw, json)
Hash identifier: jLzvBTiyCJ/IgyeLWlDlVF71zIrE1AIy7Fs18hnvzsQ=
Subject key identifier: 56:6E:7F:F5:5C:8F:FF:14:E8:50:1E:E9:30:B7:AE:7E:E2:CB:A7:7A
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 68AAD0C4F9B9731F31607D6FF6B023B21C6E4589
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131332e302f32342d3234203d3e20323138333232.roa
Signing time: Tue 03 Nov 2026 20:50:39 +0000
ROA not before: Tue 03 Nov 2026 20:45:39 +0000
ROA not after: Tue 02 Nov 2027 20:50:39 +0000
asID: 218322
IP address blocks: 45.65.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:aa:d0:c4:f9:b9:73:1f:31:60:7d:6f:f6:b0:23:b2:1c:6e:45:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Nov 3 20:45:39 2026 GMT
Not After : Nov 2 20:50:39 2027 GMT
Subject: CN=566E7FF55C8FFF14E8501EE930B7AE7EE2CBA77A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:ec:22:f3:6e:fc:0c:70:c7:90:74:19:d5:
f2:9f:ef:b5:ad:2e:fc:95:6a:f8:5a:38:0c:38:4d:
95:bb:25:cd:ec:93:44:9a:0f:9c:bd:17:34:68:96:
db:60:50:58:98:ed:4b:4c:05:be:46:0c:b0:ef:4a:
59:98:8b:4a:bf:8e:30:61:60:96:49:6c:51:31:e6:
e1:15:63:15:d3:d2:91:fd:26:6f:27:15:0c:0d:a1:
06:f7:4c:56:09:0b:89:48:fa:d1:d0:81:65:5e:89:
18:4f:ec:c5:0a:78:32:c7:d9:54:42:0a:5e:ab:17:
79:09:e8:b7:01:31:cc:6b:75:07:d9:50:18:c9:98:
86:6f:cc:30:3b:dd:ca:2c:dd:e8:1e:10:d3:ba:40:
a2:e6:2d:14:5f:ef:6b:af:96:08:d5:cb:9a:0d:f5:
5e:72:d1:d6:6e:2e:93:f3:64:cb:1b:47:24:27:b0:
34:4a:ec:40:eb:f4:3a:d8:c6:d0:b3:75:49:a5:e4:
82:5f:1d:28:66:af:61:69:ca:20:bf:c8:5a:6c:43:
15:f1:65:f9:9d:0d:36:b2:13:9c:c6:a2:5d:da:74:
82:b9:fe:40:4f:c4:73:78:52:9a:24:67:23:41:c2:
29:1f:6c:29:7b:98:2d:93:7d:45:4a:c8:99:d2:6f:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6E:7F:F5:5C:8F:FF:14:E8:50:1E:E9:30:B7:AE:7E:E2:CB:A7:7A
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131332e302f32342d3234203d3e20323138333232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
Signature Algorithm: sha256WithRSAEncryption
27:69:5a:d6:29:ae:44:c3:a8:31:1b:d5:85:77:ae:fd:d0:bf:
d0:b8:03:c4:e2:23:2e:cb:36:1e:1c:37:de:9c:a1:29:14:62:
ca:72:95:6f:f0:ac:97:8b:d6:e0:aa:0d:89:d6:a7:a5:7c:b6:
91:d7:d3:40:39:29:71:3b:ad:4b:86:c9:ba:f5:2b:6e:5f:10:
d3:f4:a0:0b:cd:2b:e7:b7:58:1b:55:37:18:b4:17:fe:14:c8:
83:9c:54:e5:dc:e6:48:04:14:c6:76:ff:39:65:11:ed:3f:8d:
8e:0a:12:f4:8d:9b:3f:8d:f7:55:10:9e:16:35:30:a7:b7:c9:
80:bc:d3:ed:76:45:44:78:0c:e1:80:07:55:25:10:32:65:e0:
7b:7a:86:d0:c2:ce:86:98:2f:e5:9f:e6:01:e0:01:a9:c0:bb:
36:b7:da:dc:f9:01:de:ed:0d:35:aa:71:4d:1a:f2:f1:a5:a5:
5c:8d:9b:7e:6e:14:95:9b:97:cb:6e:f8:b9:3f:6e:a4:98:af:
05:64:69:c8:01:54:65:3b:e7:49:25:33:30:0d:8d:9f:f0:cc:
99:40:4d:01:3b:08:28:18:8e:4a:d6:d3:c4:da:98:63:1f:de:
a3:b7:ae:43:2b:92:43:eb:e9:ad:c6:e4:29:c9:5a:42:55:4c:
6c:c9:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:15 2026 by rpki-client