Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134312e302f32342d3234203d3e203530363733.roa
File: 34352e3134382e3134312e302f32342d3234203d3e203530363733.roa (raw, json)
Hash identifier: I3bfPXf/cJ/yx7ELoIaSVJpNRw9A8px6Mw+V4R/O9qk=
Subject key identifier: 7E:8D:41:46:77:98:AA:3F:CF:89:CE:86:10:02:16:3D:D3:B6:12:4E
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 63107F8D05189CDA1AFE20F250842DBCD5C0A83A
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134312e302f32342d3234203d3e203530363733.roa
Signing time: Mon 27 Jul 2026 10:49:15 +0000
ROA not before: Mon 27 Jul 2026 10:44:15 +0000
ROA not after: Mon 26 Jul 2027 10:49:15 +0000
asID: 50673
IP address blocks: 45.148.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 03:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:10:7f:8d:05:18:9c:da:1a:fe:20:f2:50:84:2d:bc:d5:c0:a8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jul 27 10:44:15 2026 GMT
Not After : Jul 26 10:49:15 2027 GMT
Subject: CN=7E8D41467798AA3FCF89CE861002163DD3B6124E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:80:f3:6f:a0:32:68:c1:9d:6c:b1:1c:c3:
a3:fe:b4:b5:62:dc:e3:28:5a:07:78:ca:7f:9f:8e:
d7:a3:e1:8f:90:d7:bf:53:d1:c9:21:4d:87:01:bb:
2f:e5:3f:83:93:b5:a0:64:b7:35:79:7c:86:a3:77:
ae:93:e7:a8:b2:a3:6e:34:dd:4e:a8:3e:e2:9c:86:
8b:dc:7e:1f:69:df:e0:af:8d:90:6b:2d:ab:f7:97:
1d:fb:f5:f9:8f:b7:47:7f:90:5f:82:95:6c:87:c3:
a8:0c:26:33:bc:4e:3e:c7:b8:ca:38:69:ce:bb:16:
e3:14:c3:9e:91:b3:c7:02:89:0c:d9:22:1e:11:0d:
a5:87:68:7e:05:74:5a:fe:d5:93:8f:59:81:0b:62:
38:8d:b6:37:27:3e:ca:20:85:36:7f:4e:45:d4:32:
9a:91:ef:f7:86:5d:a9:5f:34:6b:58:79:75:28:aa:
24:56:74:40:63:22:cc:5c:cc:f1:75:71:29:c1:e3:
80:21:7a:0f:b1:90:4a:7b:62:5e:a2:23:b0:4b:f9:
ed:62:a6:c5:ff:fd:e6:0d:e5:49:40:a3:15:78:09:
65:84:34:36:bd:2f:9d:3d:7b:f3:4c:a8:79:ba:46:
54:c7:80:7e:4b:49:c9:1c:79:e7:69:27:d3:e3:ed:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8D:41:46:77:98:AA:3F:CF:89:CE:86:10:02:16:3D:D3:B6:12:4E
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134312e302f32342d3234203d3e203530363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.141.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:83:89:04:8d:a0:38:1c:aa:9e:90:e9:2a:d3:bd:94:30:16:
35:db:50:4d:df:d8:91:9a:e8:cf:42:58:97:9e:02:49:09:83:
bc:ea:a7:ca:46:ca:2f:77:83:4e:49:c9:09:3d:14:3c:c4:f0:
b5:c6:5e:2c:70:96:b9:a4:05:e4:38:78:7d:38:39:e5:26:92:
23:a0:93:04:6d:2a:22:94:ef:c1:85:33:01:14:8a:67:31:03:
f1:5a:d6:af:02:e9:b8:7f:33:e9:7e:96:0c:08:68:ce:42:91:
3c:1c:5c:65:57:d4:82:7a:c8:14:14:ab:86:5c:5b:a7:a7:6b:
18:c7:87:75:6b:52:73:73:63:f3:a9:c2:85:39:56:26:96:2c:
ac:77:cb:54:73:d8:00:92:e6:49:32:52:d6:c9:55:7f:0e:25:
6e:33:fb:b3:f9:a9:28:6f:cf:84:50:f4:e9:0d:2b:17:59:b3:
af:c4:87:7b:fa:95:ea:87:3d:95:8f:3c:c6:e2:52:48:fa:12:
a6:2e:db:bf:e5:c0:78:16:ee:49:f3:86:94:bb:50:81:4c:db:
5a:4e:e3:9d:f0:08:61:66:1d:5c:44:a1:c8:87:ee:d7:71:8d:
1b:6c:6d:63:f8:af:df:a3:b1:f5:1f:b2:f5:5d:5c:2f:88:5c:
4a:f0:8b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:21 2026 by rpki-client