Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20383334.roa
File: 34352e3134382e3134322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1VnfdQa9AJXipMswOLnmoVsNpWM5TCKgI3Rh4pUt0rI=
Subject key identifier: 80:35:A6:E7:CA:97:4C:BC:17:71:D8:79:44:36:00:46:11:87:CF:1B
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 2AA76FF7176508B2BB0E91407E4CAB38B70A3328
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20383334.roa
Signing time: Tue 28 Jul 2026 00:06:40 +0000
ROA not before: Tue 28 Jul 2026 00:01:40 +0000
ROA not after: Tue 27 Jul 2027 00:06:40 +0000
asID: 834
IP address blocks: 45.148.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 03:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a7:6f:f7:17:65:08:b2:bb:0e:91:40:7e:4c:ab:38:b7:0a:33:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jul 28 00:01:40 2026 GMT
Not After : Jul 27 00:06:40 2027 GMT
Subject: CN=8035A6E7CA974CBC1771D879443600461187CF1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:12:ba:04:25:e1:6a:d8:dc:98:38:1d:d1:
a9:81:c2:d1:87:bb:73:65:67:9d:56:02:a3:50:85:
ae:b1:5b:e0:23:b6:5f:02:70:d8:f3:f7:36:d6:bc:
83:d5:3b:c9:cc:91:5b:ca:3a:96:dd:e8:55:4e:ed:
40:f7:d0:3e:3d:ef:c2:f0:77:2f:ee:65:59:a4:13:
3a:ee:2d:b0:6f:78:cf:25:08:c7:9b:7e:25:87:c3:
fd:e6:b4:9d:e6:26:6c:f1:07:ac:0d:8c:67:81:dc:
62:bf:86:a7:c4:61:88:39:d0:49:3d:f6:00:e5:f4:
f8:f7:27:c1:c2:9a:62:5d:2d:b2:34:96:2e:b8:63:
7f:71:f2:30:ef:2e:9a:f9:c2:eb:4e:29:20:2a:aa:
29:f3:58:76:87:d4:ac:67:1c:66:14:ee:89:4d:dd:
a7:2b:54:b6:2c:c2:36:43:ab:d2:7d:4d:25:34:d2:
f5:11:f2:55:62:e9:89:ac:49:34:a7:62:38:43:40:
fc:4d:5f:94:11:d0:0b:30:8d:50:44:7f:e0:96:f1:
38:35:48:8c:db:6b:4e:8a:80:7f:6f:60:68:d4:36:
3a:23:09:aa:6d:8d:ae:98:b4:04:70:6a:60:4e:6d:
06:64:cd:b6:a7:c7:eb:f1:80:17:78:fa:1a:08:ac:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:35:A6:E7:CA:97:4C:BC:17:71:D8:79:44:36:00:46:11:87:CF:1B
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.142.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:cf:3e:db:0d:01:ed:40:03:3d:dc:d2:ab:6d:36:b9:91:46:
7a:0a:2c:85:95:b4:fe:84:64:d4:81:d0:70:98:c6:c5:dd:bc:
22:5f:83:17:15:d3:f9:5d:f7:8c:0e:91:af:d2:d2:3c:a3:38:
66:2a:3c:d8:8d:9d:13:6c:45:6c:99:be:35:38:6c:b2:5f:36:
ed:b4:5d:a4:f8:f5:87:36:bb:fa:0d:5a:fc:a9:46:a1:01:17:
dd:f9:50:b0:55:59:16:52:80:40:50:6e:44:e9:21:33:4a:74:
c1:63:a8:03:1a:65:8f:f5:60:f3:79:66:68:e9:59:cb:4e:4e:
7a:a9:7b:05:d8:24:e7:92:7d:f9:2e:99:ee:dd:78:d7:7e:ea:
b0:72:3e:a0:5d:c8:22:da:51:66:77:69:7d:18:84:c8:18:84:
d5:26:bb:7b:e5:b3:93:a9:b1:2d:f3:28:d2:13:18:1f:4a:5e:
f2:c9:5c:00:93:ff:b8:27:10:ba:42:bb:6e:db:4d:22:d3:b9:
3f:74:12:fc:a7:19:c5:80:1a:25:d0:6f:5f:2c:09:f4:ef:50:
b4:e0:ef:c6:93:f9:b6:ef:40:12:92:1d:43:a1:3e:c6:27:5d:
1a:c0:09:58:ca:89:07:e7:07:ea:ab:24:f4:b2:46:b4:64:c1:
7e:ec:5a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:45 2026 by rpki-client