Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e36372e3231382e302f32342d3234203d3e203633343733.roa
File: 34352e36372e3231382e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: JsG3uhhSUGN9tT77EDEztzFoDKKlwusmEHlLScWmExw=
Subject key identifier: F2:C0:76:E6:C1:39:D9:0F:B3:57:C5:01:6B:A4:43:46:AE:66:89:47
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1312D6FE11E9D606D077FF5A444596F9083C61DB
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e36372e3231382e302f32342d3234203d3e203633343733.roa
Signing time: Mon 06 Oct 2025 10:47:49 +0000
ROA not before: Mon 06 Oct 2025 10:42:49 +0000
ROA not after: Mon 05 Oct 2026 10:47:49 +0000
asID: 63473
IP address blocks: 45.67.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 02:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:12:d6:fe:11:e9:d6:06:d0:77:ff:5a:44:45:96:f9:08:3c:61:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 6 10:42:49 2025 GMT
Not After : Oct 5 10:47:49 2026 GMT
Subject: CN=F2C076E6C139D90FB357C5016BA44346AE668947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:6f:3b:a3:35:92:23:2c:d7:45:98:e1:8d:
77:19:0e:22:58:25:0a:a5:e6:4a:72:54:3a:da:02:
f9:56:84:b0:78:79:07:83:c9:31:43:dc:36:7c:24:
1d:92:5a:db:ed:4d:61:9b:b7:21:d1:47:d9:9c:c5:
65:44:76:fd:e7:d6:28:20:5c:f6:04:5e:be:51:47:
fc:75:c3:3b:62:ea:51:16:3f:2f:90:d0:d6:e9:17:
3b:68:fd:e1:93:0d:42:97:47:ae:30:70:70:d0:c4:
69:93:cd:5a:c9:d5:1e:4a:77:9a:54:10:a9:36:2f:
6a:66:a6:bb:86:1e:49:2c:cf:39:17:12:21:31:42:
ff:b6:7f:6d:46:80:54:0c:7f:a7:e7:20:06:11:c6:
6e:cc:01:dd:a1:45:dd:11:4a:34:bd:1d:0b:22:eb:
4e:6a:e2:a7:c5:b6:89:1f:d3:a8:76:81:ca:4a:90:
79:18:fd:b5:a6:e1:5b:67:20:c1:50:cd:fc:15:e4:
5f:cb:84:36:67:36:e2:68:ed:73:fb:77:0c:d6:ca:
2a:77:3e:29:7e:37:43:d8:05:1e:a4:51:3a:5b:34:
a5:d3:b0:9d:20:81:15:07:b7:06:ef:9e:17:66:19:
7c:4c:e2:fa:9f:77:4d:b3:e9:5b:e3:f1:ae:2d:b5:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C0:76:E6:C1:39:D9:0F:B3:57:C5:01:6B:A4:43:46:AE:66:89:47
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e36372e3231382e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:1c:53:07:45:99:d8:e9:96:8a:58:c3:97:e2:7a:e9:6a:94:
2e:11:74:7a:20:76:c2:cd:5e:a0:b7:cc:a5:bb:18:32:70:44:
cd:9d:34:ec:ae:c3:fa:dc:c5:13:09:4a:d0:bc:e8:ec:96:46:
c1:49:ff:cc:ad:9d:1d:92:e3:e6:1c:b2:79:e6:18:f4:f7:10:
ab:da:22:36:c4:63:53:89:2b:20:37:95:57:90:bf:3f:b2:34:
f6:1f:47:56:61:11:fa:87:25:97:dc:b9:f9:ba:ca:16:74:34:
6a:fc:f6:8e:1c:af:d6:3a:1e:76:ac:71:97:42:50:c1:87:99:
6c:93:11:80:0d:a6:81:a3:fd:31:88:91:cc:91:a9:3d:60:b2:
7b:94:31:8d:b9:17:05:22:44:14:b7:73:5e:6a:ad:bb:e2:11:
aa:17:2b:7a:6d:07:9b:e2:16:37:5b:57:b0:e6:1a:c3:0d:8d:
f7:c2:40:af:90:96:9a:c9:74:66:85:2a:18:61:45:17:d5:40:
2e:c6:01:f0:51:79:8c:29:d8:e7:b8:31:9f:e7:c7:c2:51:08:
05:00:58:e1:7d:ff:28:b3:d5:dd:d7:5b:39:5f:80:42:0c:70:
5e:38:8e:09:10:f2:74:91:d5:48:3b:83:09:5c:a2:cd:b5:fc:
59:e8:fd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:26 2025 by rpki-client