Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e20323139313339.roa
File: 34352e3135352e3135392e302f32342d3234203d3e20323139313339.roa (raw, json)
Hash identifier: mLq7YH7OyUE9ULFuZBShRLS7/3fhBEAnDxUkPDsWMak=
Subject key identifier: E9:17:84:70:24:1B:1D:A4:D2:16:47:97:DA:06:1F:F5:F3:D2:B2:2A
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 25D9CBA319B13395C8944E5513C785AC2926C66C
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e20323139313339.roa
Signing time: Mon 27 Jul 2026 11:02:27 +0000
ROA not before: Mon 27 Jul 2026 10:57:27 +0000
ROA not after: Mon 26 Jul 2027 11:02:27 +0000
asID: 219139
IP address blocks: 45.155.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 03:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d9:cb:a3:19:b1:33:95:c8:94:4e:55:13:c7:85:ac:29:26:c6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jul 27 10:57:27 2026 GMT
Not After : Jul 26 11:02:27 2027 GMT
Subject: CN=E9178470241B1DA4D2164797DA061FF5F3D2B22A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:16:a0:91:d8:6a:ef:86:7c:28:eb:c7:0f:5a:
ce:04:95:ed:d4:62:5e:4a:e8:10:46:ae:63:4d:f4:
80:09:fd:f9:53:d9:53:1e:3c:a5:88:cd:ba:61:e6:
41:84:a3:43:d0:92:88:c9:90:c5:45:ca:08:da:54:
90:34:72:93:48:85:f0:9b:04:db:2f:6e:f9:64:5e:
c6:47:9e:47:4d:71:de:7e:64:db:d4:41:a5:0b:0a:
30:e8:a2:8f:c1:17:23:c8:81:eb:79:c7:f8:91:d4:
a9:84:64:01:af:a7:4d:ab:6e:03:79:fe:f4:f0:bc:
f4:df:f1:40:16:be:88:3b:ee:8d:68:fd:3e:9b:d8:
8c:e5:d9:8f:03:74:17:64:8f:a8:f0:eb:13:71:af:
96:e5:3a:9d:e6:b8:02:53:a1:73:77:50:a8:06:d0:
3f:99:6a:12:5f:08:9b:0c:c9:99:6b:67:1f:3a:d5:
95:52:72:af:ab:20:f9:ff:53:24:95:d4:da:f2:f3:
5a:db:ca:ab:16:7e:d4:04:91:36:e2:04:e4:3f:ad:
93:69:69:d6:bf:d2:55:1a:0b:db:47:a1:d3:e3:f9:
61:49:d4:ac:e4:ff:96:26:86:f8:62:7f:d4:03:fe:
1c:18:25:4a:38:5f:7d:03:83:2c:8f:40:90:5e:00:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:17:84:70:24:1B:1D:A4:D2:16:47:97:DA:06:1F:F5:F3:D2:B2:2A
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e20323139313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.159.0/24
Signature Algorithm: sha256WithRSAEncryption
af:38:d8:92:a0:02:55:7c:61:bc:a2:e0:be:ca:46:c4:40:11:
4c:a5:b0:1f:68:4e:40:88:97:0b:bd:52:74:70:9c:2e:38:cb:
d2:cc:1c:b2:d9:8d:e9:9a:8d:82:9d:34:da:21:ca:b2:31:bb:
ea:81:5d:e9:b5:08:56:f2:b0:37:cb:b6:4b:bb:4b:1d:8c:02:
df:df:85:67:d1:70:a6:21:cf:f7:35:88:03:c2:3d:c7:bb:71:
2c:c6:46:d5:13:74:92:9f:4e:4b:11:51:b8:7e:d0:b0:f9:f5:
5d:76:9c:9f:ae:54:30:3b:80:53:12:8e:bd:00:e5:cb:27:b3:
9c:f5:d8:a0:bc:91:cb:04:72:7d:91:d6:66:7d:b3:d1:56:51:
96:d0:b5:d0:9f:63:e9:29:fb:0b:52:e3:85:ac:6d:ae:a4:3a:
b1:2a:6f:93:a9:c2:aa:72:30:0d:59:6b:a5:db:54:6a:1c:0e:
53:e0:d4:e8:87:8f:7c:eb:2c:b2:9d:6f:1d:01:f9:54:32:bf:
9e:f2:fa:40:89:24:6f:94:15:11:78:4b:3e:f7:d6:4a:b8:5d:
0b:c5:35:f7:c8:f1:6e:12:e2:51:93:42:5a:37:1a:dd:ff:e4:
48:bc:24:85:7e:6e:86:83:5b:a7:8c:9d:a5:bd:15:68:9d:8e:
7f:10:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:10 2026 by rpki-client