Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131352e302f32342d3234203d3e20313937303731.roa
File: 34352e36352e3131352e302f32342d3234203d3e20313937303731.roa (raw, json)
Hash identifier: DpWNWQlBpTQ0f5QKfvXN5PJA2D8wErp6kXAvs9qvOJQ=
Subject key identifier: D2:19:97:E2:06:04:42:FF:22:39:EA:C0:C6:D5:A6:A2:93:E0:88:F1
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 19279C5019A6160AC3C405CF4AF7D7EB89E366B7
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131352e302f32342d3234203d3e20313937303731.roa
Signing time: Thu 26 Mar 2026 09:00:56 +0000
ROA not before: Thu 26 Mar 2026 08:55:56 +0000
ROA not after: Thu 25 Mar 2027 09:00:56 +0000
asID: 197071
IP address blocks: 45.65.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:27:9c:50:19:a6:16:0a:c3:c4:05:cf:4a:f7:d7:eb:89:e3:66:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:56 2026 GMT
Not After : Mar 25 09:00:56 2027 GMT
Subject: CN=D21997E2060442FF2239EAC0C6D5A6A293E088F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:78:16:15:3e:89:a6:3f:31:76:e0:d1:a5:
f5:b6:5e:9c:97:2c:e6:3e:00:f3:de:8a:40:fa:75:
84:7a:d9:7f:f3:48:ab:66:07:8a:d6:3a:99:db:70:
2e:1c:bc:75:3b:49:10:5f:ee:4b:69:3e:b2:96:d8:
00:b4:3c:4c:53:f4:db:9e:4b:cf:4b:bf:8c:11:bc:
ca:44:c5:d4:ba:db:d6:1b:35:ae:46:99:f8:6d:cb:
05:dc:86:f6:5a:57:0b:72:38:39:b3:98:c5:56:8d:
e6:ef:9c:62:fd:21:f0:77:5c:fb:e2:b3:ce:0d:a9:
fb:9a:ab:e5:c1:3f:68:ab:6f:fc:b4:9a:c8:00:85:
9f:f6:ba:fc:fe:29:52:be:d6:3b:33:bc:2e:16:f1:
ae:ad:55:ad:a0:47:27:08:76:59:12:e2:41:66:7e:
09:ba:62:18:f8:51:a5:f4:a3:e8:29:03:6d:a9:c2:
6b:3f:e2:43:74:6d:a0:10:28:d9:03:6c:d0:9a:18:
eb:19:7a:8d:7a:27:5e:22:9f:2b:08:fb:5b:fb:07:
fb:5a:32:59:31:23:f8:39:a7:d8:34:4e:10:5a:4d:
fd:31:bd:01:68:b8:b4:9f:23:54:4f:a7:5b:36:ae:
84:c1:c6:62:a7:08:a5:07:27:03:76:a0:fa:55:42:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:19:97:E2:06:04:42:FF:22:39:EA:C0:C6:D5:A6:A2:93:E0:88:F1
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131352e302f32342d3234203d3e20313937303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.115.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b3:cc:bc:b5:e8:ae:cd:4f:72:c1:43:df:58:93:a7:4c:84:
88:b6:35:50:7b:eb:25:4b:6f:89:21:bb:02:97:6d:76:37:a3:
10:9a:74:a8:1b:4d:0b:63:43:e8:b5:88:09:60:1a:12:5b:02:
2e:aa:02:73:58:a1:80:8d:51:67:90:33:bd:fc:e8:04:27:a8:
47:bb:d7:ff:74:1b:10:e2:ca:ce:24:61:7c:46:8d:be:3d:2d:
76:47:23:55:d3:40:d2:78:3d:f5:aa:b7:e9:33:32:83:c0:17:
d8:3d:d1:c7:8f:1c:ad:d0:51:a9:1d:cd:5e:7f:7f:50:09:fb:
08:9a:8b:0c:9b:0f:7d:6d:58:c5:94:59:ed:05:fb:f8:f4:5d:
70:85:0d:5d:c6:a3:88:0f:91:e3:4b:9d:86:55:0f:94:04:96:
97:ad:f9:a4:d9:86:8f:d3:ef:05:93:64:8a:f6:65:f4:5b:45:
ab:28:af:bb:3a:ca:ed:ab:80:85:10:10:b2:32:98:22:04:ec:
99:7c:a6:00:a7:f9:28:ad:43:e9:2f:d2:07:b4:1f:67:8b:ef:
01:63:10:10:f8:7f:b9:36:b7:90:8c:1c:ed:5b:e5:8d:53:ee:
bf:b0:97:8d:15:62:23:09:e2:7e:bf:51:8f:a0:e5:55:ab:00:
ca:dc:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:30 2026 by rpki-client