Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131342e302f32342d3234203d3e203230343733.roa
File: 34352e36352e3131342e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: 8ntcSSH2p0F7V00JZZjeNOUMOBdr9gWtG3AJEYGrlvI=
Subject key identifier: BF:30:D4:B8:B5:86:8A:BE:30:47:C1:EA:2D:D7:6B:1D:01:50:1A:C9
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 15E0F392EC1F11A9FCD415F04FC6B9EAC66F7E7D
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131342e302f32342d3234203d3e203230343733.roa
Signing time: Thu 26 Mar 2026 09:00:55 +0000
ROA not before: Thu 26 Mar 2026 08:55:55 +0000
ROA not after: Thu 25 Mar 2027 09:00:55 +0000
asID: 20473
IP address blocks: 45.65.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e0:f3:92:ec:1f:11:a9:fc:d4:15:f0:4f:c6:b9:ea:c6:6f:7e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:55 2026 GMT
Not After : Mar 25 09:00:55 2027 GMT
Subject: CN=BF30D4B8B5868ABE3047C1EA2DD76B1D01501AC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:93:e5:4c:58:c5:07:8a:ee:da:af:83:03:
13:b8:2e:f4:ac:5d:d4:18:cc:41:4f:85:f6:db:09:
ba:48:6e:1d:18:07:e5:89:d0:f4:91:9f:69:a0:e3:
6c:72:2d:23:01:e9:42:ff:b0:71:ce:df:bf:6f:03:
08:dd:a4:28:a1:f6:c6:25:58:a7:d2:5e:4f:90:c5:
46:f5:32:84:9e:90:0a:6e:c1:10:b9:1e:0e:c3:69:
f2:68:f3:e8:4b:2a:2c:59:bc:2e:b5:e2:f0:80:d0:
dc:67:87:89:36:67:89:5b:b4:39:0c:ec:58:01:d8:
f4:3f:c9:d1:69:0d:6e:df:e6:94:e7:6c:7c:24:6e:
ff:2d:d6:59:0d:59:5a:58:5e:ca:6d:d1:08:17:2c:
30:9a:64:5f:a9:c4:9b:5f:4c:03:50:04:65:11:a9:
91:29:67:b3:ff:c5:5a:53:ac:13:b1:11:40:e5:c1:
52:65:1d:5d:66:80:26:d6:69:d7:a1:ab:7b:e6:39:
4b:db:62:00:91:9f:3a:4b:f1:db:29:0e:a5:54:18:
1d:77:87:45:5b:a8:59:97:7f:1e:b0:a6:30:de:ec:
dd:aa:ee:69:5b:47:43:a8:fc:b7:a4:ab:0c:17:1a:
de:02:81:fc:af:9e:37:8f:1b:35:52:23:e6:c4:8a:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:30:D4:B8:B5:86:8A:BE:30:47:C1:EA:2D:D7:6B:1D:01:50:1A:C9
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131342e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:81:fd:ae:be:9d:b9:29:ab:57:83:37:38:03:e6:d6:4a:4d:
88:25:54:36:61:8c:6a:dd:12:3c:69:99:c3:76:99:12:96:d4:
1a:b0:65:cd:fe:c7:e1:72:a3:f0:e9:aa:28:c2:67:52:0f:6c:
e7:0b:7e:8d:b1:d5:a4:71:91:e1:aa:8c:0c:e0:cc:d3:d0:4d:
cf:b2:21:48:0e:de:26:26:af:a2:05:8f:8e:80:d6:44:42:e7:
4e:ca:f1:6d:55:57:c4:ce:55:ef:fd:91:9e:59:90:ee:58:50:
a9:8c:d1:72:2d:1f:61:29:2a:e5:76:67:8c:82:ae:fb:43:7f:
87:d5:5e:1b:b4:02:17:68:be:eb:89:81:ed:c2:e6:57:51:e7:
7b:d4:5d:64:d4:b8:91:23:62:ab:36:36:17:90:74:a3:26:20:
08:12:c5:f5:2e:38:ed:f9:88:a8:1b:6b:31:49:04:1b:df:70:
18:7b:cb:42:9f:47:0c:dc:66:30:e6:33:5e:95:8c:3b:65:79:
0d:f3:3d:48:2e:da:c6:cc:7c:16:a7:13:16:b9:b2:cf:74:a7:
75:38:4e:49:19:5c:00:2e:2f:68:e4:88:9a:27:6b:f4:e8:65:
de:6b:9d:b1:cc:87:b3:28:1a:c0:df:c5:1a:2c:53:b8:23:aa:
b8:a2:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:45:44 2026 by rpki-client