Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e31302e3136322e302f32332d3332203d3e203531313637.roa
File: 34352e31302e3136322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: epJ7ZNqSsmBfOLnwvn6tujKuIPMur508Dnbsohhh4Gg=
Subject key identifier: 7A:7D:BC:D0:76:4B:13:ED:56:17:F1:C4:E5:D2:8F:7E:B1:7B:F7:25
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 462681732E182FE339A7005F216494E19E1E3638
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e31302e3136322e302f32332d3332203d3e203531313637.roa
Signing time: Wed 25 Mar 2026 14:23:31 +0000
ROA not before: Wed 25 Mar 2026 14:18:31 +0000
ROA not after: Wed 24 Mar 2027 14:23:31 +0000
asID: 51167
IP address blocks: 45.10.162.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:26:81:73:2e:18:2f:e3:39:a7:00:5f:21:64:94:e1:9e:1e:36:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 25 14:18:31 2026 GMT
Not After : Mar 24 14:23:31 2027 GMT
Subject: CN=7A7DBCD0764B13ED5617F1C4E5D28F7EB17BF725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:6f:37:b0:e4:00:d7:a5:8c:d8:42:77:c8:
2a:76:b0:aa:95:5e:7c:0e:f0:56:d4:3d:a7:1f:0f:
7a:22:6e:67:28:38:dc:c6:be:41:92:a0:51:0d:1a:
89:e1:e9:16:16:75:3c:f6:04:cd:51:7a:df:1d:46:
70:b3:b4:78:91:d5:04:8f:5c:9a:2c:57:ed:5e:5c:
91:0a:7f:18:99:cc:6e:a6:8a:99:1f:d0:c9:fe:87:
e8:43:1f:2b:4f:d8:3d:bc:b9:02:50:fa:e1:f2:f3:
c6:c4:1e:e4:1e:27:d3:b4:02:f2:1e:21:11:f8:06:
30:3a:c2:5c:63:3a:c5:d4:6c:05:cd:67:fb:31:bc:
7a:12:1c:4c:6a:66:4c:e6:5c:1d:96:45:cd:9a:b5:
f5:fe:fe:38:72:b4:9c:1b:f0:da:57:19:8a:b7:23:
30:0e:03:f1:d0:32:a8:45:7e:54:67:f7:db:49:ad:
dc:b6:85:e3:47:6b:93:b9:10:5a:e0:0e:e2:2c:d5:
5d:dc:bb:65:c3:f4:2c:f4:2a:f8:3d:93:30:d4:c0:
57:fd:41:a4:09:04:26:91:8a:8b:a7:7c:ba:da:82:
58:8c:fa:d2:e3:e1:69:1b:1d:40:47:9e:63:86:73:
4d:6e:4e:4c:17:3e:a4:9b:6a:49:d5:e4:2d:6c:4d:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7D:BC:D0:76:4B:13:ED:56:17:F1:C4:E5:D2:8F:7E:B1:7B:F7:25
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e31302e3136322e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.162.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:40:99:89:56:fa:1e:e1:37:a3:66:8c:e8:bb:cb:dd:a2:40:
45:e8:67:4c:bd:fc:32:42:b7:ec:2f:53:61:73:21:43:e7:c6:
7f:4f:79:ed:37:00:5b:e1:04:5d:cb:21:b3:71:b8:62:5b:ce:
ac:ac:95:f3:b0:dc:87:09:98:59:2c:b0:00:95:03:ed:2f:eb:
62:cf:9a:72:72:d5:e9:31:44:ff:70:7d:e6:78:5d:17:48:f1:
b7:c2:b2:88:53:94:9c:b4:2e:ec:d2:be:cc:9c:21:fd:b2:dd:
4b:4f:32:00:2a:78:83:0f:74:a9:02:68:dd:77:fc:27:a0:53:
8d:20:34:a7:ec:02:29:1d:5d:3e:8e:60:88:42:fa:f4:70:7f:
ae:64:32:ec:e0:ea:cc:90:45:08:7e:6d:be:87:65:96:d2:82:
72:9b:c6:c2:3f:e0:31:b8:26:7f:28:f4:bf:55:ba:c1:5d:dd:
8f:d0:89:44:ff:a2:86:7b:03:e4:46:f7:60:8a:6c:d3:90:0d:
07:b9:49:30:e0:74:18:7d:56:33:2d:67:34:d4:d5:7f:d1:27:
7e:12:3e:3b:64:36:4a:2e:2e:ee:d3:8b:7d:7f:7a:c8:d0:93:
cb:0d:cc:f4:81:92:4f:4b:ce:fc:a9:1f:2e:01:06:d2:d1:a8:
39:f0:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:35 2026 by rpki-client