Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131352e302f32342d3234203d3e20343031313930.roa
File: 34352e36352e3131352e302f32342d3234203d3e20343031313930.roa (raw, json)
Hash identifier: BeRWbAl667/HFruqb63qrqLyJ4/aPEkqIjGfMLlsn0E=
Subject key identifier: 03:ED:F8:D0:C4:44:D7:E9:1E:51:49:AB:D1:FD:A6:FC:19:10:7B:1E
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 4865BB571A66B858E746B2897E857CBF1D2B0F32
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131352e302f32342d3234203d3e20343031313930.roa
Signing time: Thu 26 Mar 2026 09:00:57 +0000
ROA not before: Thu 26 Mar 2026 08:55:57 +0000
ROA not after: Thu 25 Mar 2027 09:00:57 +0000
asID: 401190
IP address blocks: 45.65.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:65:bb:57:1a:66:b8:58:e7:46:b2:89:7e:85:7c:bf:1d:2b:0f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:57 2026 GMT
Not After : Mar 25 09:00:57 2027 GMT
Subject: CN=03EDF8D0C444D7E91E5149ABD1FDA6FC19107B1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:97:0e:87:44:c7:fb:d0:11:2d:b3:d1:55:
f9:a7:3f:e1:91:3a:81:23:eb:96:49:6d:ff:be:51:
d4:47:15:95:af:8e:06:64:3a:c4:4d:6f:98:02:bc:
9c:6b:a3:97:5b:e0:f8:67:9f:30:f4:5c:69:9c:2e:
12:b7:bc:ec:78:0d:34:93:c4:ed:1b:94:0c:22:4f:
2e:1b:f8:f9:8f:2c:cd:a0:56:af:7b:0f:9c:ea:c1:
24:36:94:3b:36:c3:25:e1:dc:12:49:a2:8a:97:c1:
a4:93:a8:f8:3c:6e:5b:3c:e8:46:92:dc:52:79:b9:
6c:38:f6:24:65:40:c2:df:dc:da:ff:29:e0:5f:f0:
6b:10:87:be:7f:50:40:a2:c8:4a:80:7f:4f:f1:a8:
1e:22:14:fa:8c:29:98:d1:fc:39:5e:79:46:b2:26:
cb:43:f8:b5:40:61:10:c8:1f:a5:eb:6f:f8:1d:fb:
9f:c4:38:2b:bc:53:06:63:18:5c:b8:97:a2:92:07:
99:e5:e5:29:8a:e1:5d:3e:88:59:35:83:6a:be:3d:
a9:3d:7d:37:94:86:a4:42:5c:3a:14:3b:73:0f:42:
49:d8:86:ca:9d:6b:66:c7:98:3c:0f:97:b3:ff:2f:
fd:bf:38:63:2a:d0:57:2d:3d:99:22:d9:84:fb:b3:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:ED:F8:D0:C4:44:D7:E9:1E:51:49:AB:D1:FD:A6:FC:19:10:7B:1E
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e36352e3131352e302f32342d3234203d3e20343031313930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.115.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b7:98:c8:b3:81:9c:0a:d6:b5:35:02:cb:c6:98:0c:43:66:
c4:7f:aa:ee:8f:6a:87:9d:02:0a:ef:c2:ab:3c:e3:79:54:32:
1f:7d:5e:4a:92:46:a9:37:e4:2d:9b:e7:da:c3:c2:77:c7:2b:
17:12:10:38:de:63:91:ae:39:33:c6:93:6e:fc:8a:86:c0:6c:
f6:b4:04:66:66:be:fe:39:03:31:75:96:eb:5f:2b:01:fb:8b:
ba:ea:70:2c:70:df:8d:16:3e:30:d1:52:fe:cc:ee:3d:0e:ca:
74:29:cb:d0:84:85:c9:ee:8f:7f:d5:ea:14:4e:cf:40:20:a8:
28:68:03:80:26:f1:60:b7:a9:64:de:ac:a9:d3:e8:d7:e8:d2:
a2:d4:0b:f3:93:65:85:43:85:b2:32:6e:8d:8d:25:3d:98:87:
fe:3e:66:6f:85:88:ff:2f:89:f9:dc:46:ae:1f:99:79:52:27:
da:d7:ec:cd:ee:49:35:96:e7:8c:bf:38:5f:20:d1:68:e3:6d:
de:26:fd:e2:6a:49:90:ae:cd:ab:1b:18:6c:af:4a:ea:26:bf:
85:67:4d:84:6d:c2:db:f9:cd:78:72:a6:ad:72:2b:e7:cd:2a:
4a:d3:e6:91:83:5b:df:01:62:0d:e6:ae:71:01:46:e6:fe:1a:
1a:4b:6e:6f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSGW7VxpmuFjnRrKJfoV8vx0rDzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM3NGJjNmQwMjUxMzViZWQ5NTM5Nzc5YTAzZmRkNjRh
YmViYTExZjAeFw0yNjAzMjYwODU1NTdaFw0yNzAzMjUwOTAwNTdaMDMxMTAvBgNV
BAMTKDAzRURGOEQwQzQ0NEQ3RTkxRTUxNDlBQkQxRkRBNkZDMTkxMDdCMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9ZcOh0TH+9ARLbPRVfmnP+GR
OoEj65ZJbf++UdRHFZWvjgZkOsRNb5gCvJxro5db4PhnnzD0XGmcLhK3vOx4DTST
xO0blAwiTy4b+PmPLM2gVq97D5zqwSQ2lDs2wyXh3BJJooqXwaSTqPg8bls86EaS
3FJ5uWw49iRlQMLf3Nr/KeBf8GsQh75/UECiyEqAf0/xqB4iFPqMKZjR/DleeUay
JstD+LVAYRDIH6Xrb/gd+5/EOCu8UwZjGFy4l6KSB5nl5SmK4V0+iFk1g2q+Pak9
fTeUhqRCXDoUO3MPQknYhsqda2bHmDwPl7P/L/2/OGMq0FctPZki2YT7s9ipAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUA+340MRE1+keUUmr0f2m/BkQex4wHwYDVR0j
BBgwFoAUc3S8bQJRNb7ZU5d5oD/dZKvroR8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTQyNTg1ZjctYmMxYi00OTcwLWJkMzQtZGJmZDJiMjE0
N2QyLzAvNzM3NEJDNkQwMjUxMzVCRUQ5NTM5Nzc5QTAzRkRENjRBQkVCQTExRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzUzhiUUpSTmI3WlU1ZDVvRF9kWkt2
cm9SOC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTQyNTg1Zjct
YmMxYi00OTcwLWJkMzQtZGJmZDJiMjE0N2QyLzAvMzQzNTJlMzYzNTJlMzEzMTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMxMzEzOTMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LUFzMA0GCSqGSIb3DQEBCwUAA4IBAQBgt5jIs4GcCta1NQLLxpgMQ2bEf6ruj2qH
nQIK78KrPON5VDIffV5KkkapN+Qtm+faw8J3xysXEhA43mORrjkzxpNu/IqGwGz2
tARmZr7+OQMxdZbrXysB+4u66nAscN+NFj4w0VL+zO49Dsp0KcvQhIXJ7o9/1eoU
Ts9AIKgoaAOAJvFgt6lk3qyp0+jX6NKi1Avzk2WFQ4WyMm6NjSU9mIf+PmZvhYj/
L4n53EauH5l5Uifa1+zN7kk1lueMvzhfINFo423eJv3iakmQrs2rGxhsr0rqJr+F
Z02EbcLb+c14cqatcivnzSpK0+aRg1vfAWIN5q5xAUbm/hoaS25v
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:53 2026 by rpki-client