Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131342e302f32342d3234203d3e203236373337.roa
File: 34352e36352e3131342e302f32342d3234203d3e203236373337.roa (raw, json)
Hash identifier: J2pDD3tnxYiE/CKmBAL9e8q1jtPww4iRdBUY7MpfbZQ=
Subject key identifier: 89:8C:61:4C:77:9E:29:AA:46:41:41:F2:13:CF:01:0F:1B:B2:6A:C8
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 673EB0F3472CE4437A309D87A25FED4277913A20
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131342e302f32342d3234203d3e203236373337.roa
Signing time: Thu 26 Mar 2026 09:00:55 +0000
ROA not before: Thu 26 Mar 2026 08:55:55 +0000
ROA not after: Thu 25 Mar 2027 09:00:55 +0000
asID: 26737
IP address blocks: 45.65.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:3e:b0:f3:47:2c:e4:43:7a:30:9d:87:a2:5f:ed:42:77:91:3a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:55 2026 GMT
Not After : Mar 25 09:00:55 2027 GMT
Subject: CN=898C614C779E29AA464141F213CF010F1BB26AC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:80:e2:a9:c1:44:94:ce:91:ba:02:85:16:1d:
2e:87:8a:3c:4c:97:60:f2:db:12:15:8d:61:38:7f:
e5:ec:c1:84:5d:cc:c7:3e:5b:da:9a:e3:ed:5e:c6:
20:ec:cb:2b:c9:3d:2d:f0:af:34:c0:c5:a8:ea:6e:
66:d4:80:a1:ee:db:fe:45:01:dc:67:7f:69:a2:6e:
3a:9a:e5:46:9e:27:ea:c6:db:e8:c7:31:51:79:07:
59:b3:bc:e7:cb:02:a0:a4:d8:ba:5a:7c:7f:06:c5:
0f:26:37:2e:42:95:14:fc:bd:ff:1a:c3:a8:8e:12:
48:58:8b:f7:c1:5e:fe:40:63:2e:8e:13:65:3a:90:
0a:63:42:56:e7:23:97:37:67:e5:de:f8:21:d4:4e:
61:27:e8:85:f8:94:de:fe:07:60:a4:b3:d3:ba:10:
1d:27:70:c9:50:3d:75:0b:ee:03:81:b2:b0:72:dd:
b4:24:25:90:86:bc:6d:be:ad:bf:ee:91:16:2b:bb:
af:a3:21:e6:7e:b7:01:bd:37:ee:8b:89:fa:88:55:
5f:53:f0:55:44:2a:66:e3:e2:ba:30:f2:34:80:1f:
e6:01:b5:74:22:53:92:34:ee:ff:83:31:97:6d:cd:
62:14:b3:39:45:2c:6b:e8:18:ce:11:7c:1c:98:da:
53:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8C:61:4C:77:9E:29:AA:46:41:41:F2:13:CF:01:0F:1B:B2:6A:C8
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131342e302f32342d3234203d3e203236373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.114.0/24
Signature Algorithm: sha256WithRSAEncryption
41:8e:29:1b:86:29:71:81:71:a9:2d:e3:a9:2b:47:d5:b3:3d:
22:ad:f9:8f:04:5d:af:9f:05:4b:91:0e:af:5b:a8:5c:11:f6:
43:72:98:52:61:7a:ab:23:8d:29:99:ce:02:eb:66:cb:cb:1e:
dc:6d:f0:15:d3:2d:4c:80:3f:72:e9:58:79:7b:5f:cd:06:c3:
4e:6b:48:af:1f:56:a7:27:b3:c0:91:5b:2e:ff:9f:d8:04:69:
77:e3:f6:22:a7:02:5a:6a:9b:59:5e:99:af:68:24:4f:43:71:
21:8d:ed:2c:ff:e1:17:d5:10:23:5d:15:05:23:03:b6:47:db:
24:a5:ba:42:fb:cb:81:06:17:17:71:0b:52:37:88:5e:2f:c0:
47:75:fd:6b:21:8e:33:19:3a:ab:e3:b2:84:79:24:d2:d9:42:
e5:b6:fd:9e:4a:b3:90:92:2e:f8:04:8c:8e:44:de:5b:84:b3:
50:cc:eb:ca:12:c5:32:17:00:6c:cf:43:da:ab:04:c8:7b:1a:
bc:bd:11:c0:d1:0a:24:5a:ce:c3:8f:70:3f:7d:97:0c:50:f8:
b1:c5:71:42:87:cd:55:9e:f6:03:0b:5f:aa:ba:13:e9:ae:dd:
b2:09:1e:e1:8e:1d:a3:b9:8d:16:0f:16:9b:54:92:39:11:a8:
57:bb:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:14:37 2026 by rpki-client