Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131342e302f32342d3234203d3e20343031313930.roa
File: 34352e36352e3131342e302f32342d3234203d3e20343031313930.roa (raw, json)
Hash identifier: V8e9zxKMmplvAOMHYgYWPO1pgbwoq2S47uE96SiVsoo=
Subject key identifier: 30:7B:CD:F6:77:E5:06:45:5D:EB:55:11:EC:25:EF:81:25:33:64:DD
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 78512C37EBA2232CC421F87933CF738FF4BB8AFA
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131342e302f32342d3234203d3e20343031313930.roa
Signing time: Thu 26 Mar 2026 09:00:56 +0000
ROA not before: Thu 26 Mar 2026 08:55:56 +0000
ROA not after: Thu 25 Mar 2027 09:00:56 +0000
asID: 401190
IP address blocks: 45.65.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:51:2c:37:eb:a2:23:2c:c4:21:f8:79:33:cf:73:8f:f4:bb:8a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:56 2026 GMT
Not After : Mar 25 09:00:56 2027 GMT
Subject: CN=307BCDF677E506455DEB5511EC25EF81253364DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:94:5a:36:a4:6f:d6:2f:db:36:98:11:4a:
4f:af:96:ec:e6:c9:4f:b4:d4:21:ac:c2:7c:51:bf:
f8:06:25:28:74:58:ce:9d:64:7a:63:d6:54:93:36:
92:5f:1d:06:0e:02:fc:eb:a2:7d:4b:4c:ff:19:46:
96:b9:1c:bc:46:c9:72:30:ad:9a:74:de:4f:f1:1e:
27:db:9c:ad:5c:78:db:4b:e7:4c:7e:c0:82:9f:6a:
0d:1b:d6:26:0f:85:d9:ea:1e:d3:0a:ab:9f:6a:9e:
96:e6:3d:ae:dc:90:86:ce:0b:85:df:f7:c0:9c:02:
af:da:c4:07:db:69:1a:a3:f4:34:9b:a6:9e:b9:a5:
87:7b:f3:24:d1:6d:02:f9:6b:94:72:eb:32:a2:c4:
6d:85:ed:bc:24:7e:90:82:2a:3a:79:1b:f3:64:26:
f1:91:96:07:d4:9d:7e:b0:e3:e2:04:3e:92:92:72:
2c:f7:aa:94:d7:ac:9f:7a:4d:54:95:47:2c:4c:3d:
c4:55:25:0a:03:a6:7c:2d:bb:12:5c:6d:89:e0:48:
7a:52:a4:a7:92:59:b6:8e:9a:f8:52:4f:d9:3d:98:
c1:6a:11:27:b6:ad:cf:5f:ec:51:4e:7f:02:54:9e:
e8:49:c2:d2:ca:1a:d5:36:03:59:e2:bb:37:3a:0d:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7B:CD:F6:77:E5:06:45:5D:EB:55:11:EC:25:EF:81:25:33:64:DD
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131342e302f32342d3234203d3e20343031313930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.114.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:71:d7:e7:c5:76:da:1c:9a:0b:9b:cc:46:a1:45:af:74:9d:
87:cc:b8:b3:54:5c:27:d2:74:e0:6b:28:2c:5d:f7:e0:46:bc:
37:ed:5d:6a:ab:19:b3:3d:7b:21:76:47:85:a2:b7:c7:8c:57:
63:1b:46:53:68:40:22:57:c4:76:4b:44:4b:56:61:81:07:7a:
4e:e7:7b:22:43:c2:cc:24:01:f5:8d:1d:dc:d9:7a:10:50:28:
8a:eb:68:ed:dc:0c:bc:69:74:50:63:b6:b2:e9:f2:16:b1:51:
39:27:3e:91:df:f5:c1:6f:ba:8a:f5:22:37:39:ef:de:10:01:
64:55:0b:4a:0a:43:5d:b2:18:ac:2e:82:67:48:06:c6:45:19:
be:37:9a:76:a4:0e:d2:59:b0:75:a3:2e:e3:8a:2d:10:cb:30:
33:08:c8:5d:89:8f:08:8a:0e:07:29:c8:14:4d:3f:4d:c6:c6:
36:3c:25:a1:01:40:d0:3d:e8:90:7e:bd:5f:7b:68:20:b0:90:
51:63:66:76:5c:ba:67:a2:28:20:5d:d9:38:32:13:7d:68:b1:
89:3d:05:4e:e0:71:a1:25:2b:2f:f1:55:eb:ec:9c:b7:d0:0d:
c6:d4:d7:7b:89:f2:1d:97:3c:1a:48:1d:0c:1c:3a:b2:89:47:
1f:b3:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:11:25 2026 by rpki-client