
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e203539343332.roa
File: 34352e3134362e3130362e302f32342d3234203d3e203539343332.roa (raw, json)
Hash identifier: WGFIzrtQmEtXpp6K5dtdeQyRfKcky2y3Z8znsJKmqbc=
Subject key identifier: 27:6F:D3:26:16:BA:64:9F:A0:C2:47:D1:98:E5:93:59:AB:D9:CA:C9
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 6821CA67C95FC02589FCA94919139BD5B5B34825
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e203539343332.roa
Signing time: Fri 17 Oct 2025 07:31:36 +0000
ROA not before: Fri 17 Oct 2025 07:26:36 +0000
ROA not after: Fri 16 Oct 2026 07:31:36 +0000
asID: 59432
IP address blocks: 45.146.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:21:ca:67:c9:5f:c0:25:89:fc:a9:49:19:13:9b:d5:b5:b3:48:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Oct 17 07:26:36 2025 GMT
Not After : Oct 16 07:31:36 2026 GMT
Subject: CN=276FD32616BA649FA0C247D198E59359ABD9CAC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:ca:e3:8e:17:72:e7:e3:51:f5:5f:37:ad:
0a:cf:96:75:58:0e:44:64:fb:4a:45:60:a7:24:1f:
7f:24:ea:a6:75:8d:f0:e5:f3:88:3d:74:c8:d7:03:
48:1b:a9:5c:9c:78:2d:96:ad:2d:81:ba:69:2f:e9:
70:81:90:8e:52:cf:d0:3d:9e:64:66:04:eb:77:86:
f5:3b:ed:a1:74:d1:51:bf:9d:a0:bb:05:34:53:1c:
a1:19:e8:cb:3e:3e:c5:3d:4a:cc:4b:1d:fc:e7:d1:
b7:04:6f:2c:6d:2f:6f:ce:a4:70:b5:f3:03:f6:a5:
bc:fe:ae:5f:3a:07:0f:7a:a9:d5:12:7c:9b:43:99:
de:08:80:d8:74:41:89:13:a1:99:d6:6e:77:71:b8:
cf:4a:77:0c:92:4e:9b:c4:90:bd:30:25:79:f6:f8:
d3:2c:67:3f:4b:50:d3:e5:bf:ae:eb:14:a6:a0:f5:
14:05:de:b8:ee:52:b5:68:da:59:86:6c:16:33:a9:
b6:c1:21:82:28:21:e4:03:3b:52:bf:45:fe:ec:db:
71:29:db:20:33:36:30:89:19:fc:1f:80:7e:e6:a9:
a6:7d:d0:31:81:20:97:37:13:fc:fd:cd:df:29:79:
bb:cf:bb:cc:db:f3:8f:d4:ea:2d:3b:ba:65:02:16:
46:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6F:D3:26:16:BA:64:9F:A0:C2:47:D1:98:E5:93:59:AB:D9:CA:C9
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e203539343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.106.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5e:f0:f2:a0:af:75:ea:8a:1e:4f:fc:e5:36:14:25:be:87:
81:23:fe:5e:3c:ec:45:33:9d:22:05:85:d7:b8:99:04:5d:d8:
3e:fd:8a:84:5d:b4:6b:a9:13:fa:80:21:ed:b5:dd:a7:78:0a:
ab:0d:a5:be:47:a8:91:c6:0a:e0:5f:d7:ae:69:e3:9c:f9:ef:
e6:55:a0:c2:f3:f3:55:c9:91:64:02:2c:8c:4f:f4:8c:95:51:
7c:95:93:7d:d7:ce:23:e4:b6:2b:ba:a8:9c:24:f4:f1:d6:f4:
44:cc:b5:3e:f8:d2:7d:f7:62:4d:8a:3e:75:2c:11:0b:60:56:
a8:2a:9a:b6:e2:f8:28:2d:a8:5d:42:05:98:4d:d7:d2:1a:56:
91:c5:2c:7d:32:6c:55:c4:85:b3:7d:5e:64:23:b0:e9:e2:02:
cd:ab:cc:51:af:f6:17:16:ba:f2:e8:6d:d0:c3:c0:0c:ba:f6:
63:66:0f:5f:72:d3:46:1d:e2:31:a2:c0:a3:b4:c8:ba:cc:d7:
af:aa:f8:79:78:68:f0:b7:85:e4:44:d7:d0:c8:6d:35:51:04:
3f:8a:2a:53:64:b4:18:27:b8:8c:0d:e5:89:c5:d6:ce:31:bf:
f2:07:32:69:ec:4e:a1:4c:91:a8:d2:45:c3:ca:00:e8:8a:2e:
58:4a:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:01 2025 by rpki-client