Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3135392e3232322e302f32332d3332203d3e203531313637.roa
File: 34352e3135392e3232322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: 5JpLqs5boMqlk8XL9mOqNv/OeHQiyUtXt+vIjByJZnI=
Subject key identifier: 1E:4C:E5:E1:1D:40:16:2D:3D:9C:04:5E:EA:96:33:E9:0F:99:C5:D7
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6A2254CF4D1FE5C7F9F407C7A0E8F2F6FB0A29CC
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3135392e3232322e302f32332d3332203d3e203531313637.roa
Signing time: Wed 25 Mar 2026 14:23:31 +0000
ROA not before: Wed 25 Mar 2026 14:18:31 +0000
ROA not after: Wed 24 Mar 2027 14:23:31 +0000
asID: 51167
IP address blocks: 45.159.222.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:22:54:cf:4d:1f:e5:c7:f9:f4:07:c7:a0:e8:f2:f6:fb:0a:29:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 25 14:18:31 2026 GMT
Not After : Mar 24 14:23:31 2027 GMT
Subject: CN=1E4CE5E11D40162D3D9C045EEA9633E90F99C5D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:bf:da:2a:dd:3a:7c:ff:6a:8d:be:d0:f8:
0d:8f:25:fd:91:c9:2a:54:72:64:63:42:f6:dd:8f:
40:39:ea:27:c6:90:ef:e6:db:54:af:fb:f5:71:fe:
00:09:06:3d:5f:c5:09:cc:5f:18:f5:84:9b:82:04:
c0:b2:25:33:72:3e:b0:91:27:6d:b2:da:dd:62:c3:
4c:57:b6:05:c3:9e:a7:18:4d:8b:82:3d:46:19:1e:
7b:b1:fb:fe:f1:70:31:42:1d:59:5e:01:64:6f:ad:
84:0d:b0:6b:75:7a:38:42:2e:45:92:0e:9b:16:27:
fd:54:05:df:74:a8:d4:47:39:69:52:eb:8e:68:45:
66:56:a6:cc:54:eb:35:07:44:49:10:f3:42:81:a6:
2f:da:52:c8:1d:d3:77:03:42:40:24:eb:11:90:73:
76:2f:c3:7a:7b:70:a1:00:fd:80:46:ad:94:78:96:
e2:f7:21:ba:13:ad:ce:67:d5:c3:42:ac:cf:ec:f6:
3e:2d:bc:65:d5:71:43:66:71:86:ca:4f:46:0d:e8:
bd:9c:27:7a:27:cb:f4:06:20:7c:0a:80:65:64:cc:
e5:4c:18:7d:a9:a9:e7:62:68:d6:d6:ab:ae:4f:8d:
92:0c:ac:07:18:e8:37:99:36:e9:bf:f9:9c:53:b9:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4C:E5:E1:1D:40:16:2D:3D:9C:04:5E:EA:96:33:E9:0F:99:C5:D7
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3135392e3232322e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.222.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:8e:53:c9:c0:df:ce:b6:48:61:70:07:a6:c6:49:03:bb:06:
e4:db:f0:6c:47:37:e3:fc:1c:5c:46:2c:80:49:19:cd:00:ec:
9d:d7:73:48:d7:92:eb:97:3f:e5:7c:29:d7:74:1e:f9:8d:3f:
ab:f4:c9:c0:70:f3:5f:30:f9:35:bc:de:66:0d:4b:46:fe:4d:
4c:a4:c6:85:e3:ca:bd:da:76:55:f4:78:67:2c:a8:b0:10:d3:
35:5c:32:9c:4e:a7:53:00:db:e7:54:94:d0:b6:97:52:b0:03:
d9:77:99:46:b5:00:6b:7f:98:9f:16:0d:38:3c:62:98:f4:5f:
fd:73:32:89:15:fb:af:fe:63:5a:00:3b:4e:4a:f1:36:18:51:
1c:ac:08:5e:3b:f1:81:ab:19:95:dd:a0:26:54:2b:7c:98:41:
f7:69:92:e2:ea:99:e2:2f:f6:c3:c1:26:90:ef:8f:a9:44:7b:
85:88:c2:89:e6:39:98:c1:21:76:76:16:09:a6:cf:34:71:a9:
33:fa:bd:7d:bc:33:ad:60:fe:30:da:88:61:03:58:d5:94:6d:
fd:0a:91:76:a5:c4:87:70:4c:b2:41:12:53:ec:4e:f0:62:1e:
0f:1a:b5:bd:68:27:7d:60:b1:58:66:b9:ee:b8:70:9a:f6:28:
eb:47:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:48 2026 by rpki-client