Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e203230363438.roa
File: 34352e3134382e3134302e302f32342d3234203d3e203230363438.roa (raw, json)
Hash identifier: tCrOE7Ldk7selnJxaaTq3AJaz9MpTuE7WCWaBGRIv4o=
Subject key identifier: 4A:58:5F:38:F8:3D:FA:ED:AD:83:58:D8:C1:41:07:BE:15:CE:F4:B1
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 22E6BC955FCF378C1A595827C312DB8833B2140C
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e203230363438.roa
Signing time: Tue 25 Aug 2026 08:49:30 +0000
ROA not before: Tue 25 Aug 2026 08:44:30 +0000
ROA not after: Tue 24 Aug 2027 08:49:30 +0000
asID: 20648
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e6:bc:95:5f:cf:37:8c:1a:59:58:27:c3:12:db:88:33:b2:14:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 25 08:44:30 2026 GMT
Not After : Aug 24 08:49:30 2027 GMT
Subject: CN=4A585F38F83DFAEDAD8358D8C14107BE15CEF4B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b8:90:82:3b:9c:19:a0:d6:b7:27:af:61:2e:
d4:b0:5f:c6:17:c6:65:56:a9:42:03:99:92:eb:40:
e7:cc:8c:9d:43:55:71:e8:ee:6c:be:2a:82:97:eb:
1a:6e:86:67:4c:be:ee:28:0b:6d:70:6a:22:c0:39:
69:ca:29:f8:3d:ef:a7:39:5c:c3:4e:65:38:4c:3c:
05:29:a6:fd:d6:ee:30:85:41:8a:05:cb:68:13:1f:
fc:69:24:c0:10:45:83:6b:b2:1b:07:25:2c:c1:09:
44:27:dd:d4:6b:5c:bf:f5:99:6b:86:b2:d1:d7:cc:
0f:bf:30:52:f3:35:26:c3:f3:17:8a:54:66:64:12:
4a:84:5b:f9:0e:6a:ec:20:16:a5:35:30:b3:2d:fd:
5c:c2:d8:88:33:85:dc:c0:ec:c1:59:5c:79:b0:94:
65:8a:80:4f:dc:36:cc:ca:36:fb:2b:a0:26:0c:8e:
20:7a:6f:67:f1:2a:10:5f:7a:44:f0:7e:88:0d:fe:
6a:af:e3:18:79:01:6c:69:eb:97:76:e8:eb:f3:dd:
ac:83:c8:42:18:eb:69:04:8d:8c:c5:8a:fc:9d:f5:
ae:08:4a:8c:63:7b:cf:3a:b6:f9:e4:0f:77:4c:ef:
df:2a:1b:6e:b6:a5:b0:5d:a4:0c:2f:f4:ca:5d:31:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:58:5F:38:F8:3D:FA:ED:AD:83:58:D8:C1:41:07:BE:15:CE:F4:B1
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e203230363438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f6:08:59:7e:be:6f:fe:02:0f:e1:7c:a8:f2:f6:89:b1:e0:
6d:c6:51:fd:4d:dd:06:c4:fa:51:3e:52:0b:14:20:02:dd:14:
20:59:52:fd:6d:b1:80:a7:16:1a:0a:a9:1a:51:39:35:a7:c5:
5e:92:2b:1c:35:31:41:63:01:97:ab:e8:4b:cc:40:43:1b:a0:
73:e7:4f:ec:12:ba:8f:ac:96:9e:8f:fc:ff:37:e1:5b:27:36:
7f:ac:4e:b3:75:34:a8:f1:5d:30:2e:00:27:ae:8c:5f:4d:9a:
58:98:ee:c4:f3:a7:38:83:90:db:94:5a:08:a2:5a:b7:bb:f8:
5a:21:68:6a:a4:41:01:26:f5:72:cb:05:e8:5b:01:18:9c:a1:
28:05:fd:9f:ad:42:a7:b6:1c:f3:d8:b8:08:72:7c:02:7b:86:
d1:f7:4b:54:8f:0b:bc:57:75:a2:27:29:8e:77:0b:3c:6a:8f:
e2:3e:0a:59:a7:6c:a9:74:18:bf:9d:f9:47:f3:72:0b:0f:db:
20:be:15:83:3e:7d:84:a1:b2:78:e4:8e:a5:22:32:89:08:e5:
b7:c7:a4:d2:1a:74:80:c3:a7:dd:29:f9:09:15:15:8f:b7:42:
24:55:d7:bf:6d:bf:6f:f5:bb:f4:7f:50:28:cf:96:a4:da:48:
8b:e6:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:15:34 2026 by rpki-client