Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32332d3233203d3e20343030393039.roa
File: 34352e36352e3131362e302f32332d3233203d3e20343030393039.roa (raw, json)
Hash identifier: fKw1U5Pbcr7KNwdfGbjOMehVygFRjMNJ4Bsi4VNVsdY=
Subject key identifier: BA:06:50:28:48:87:39:AE:61:DD:B1:51:2B:71:81:2D:50:41:55:1C
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 303461970F4202D4F9D94B9D54EC309C37AE1BE8
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32332d3233203d3e20343030393039.roa
Signing time: Mon 03 Nov 2025 16:55:11 +0000
ROA not before: Mon 03 Nov 2025 16:50:11 +0000
ROA not after: Mon 02 Nov 2026 16:55:11 +0000
asID: 400909
IP address blocks: 45.65.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:34:61:97:0f:42:02:d4:f9:d9:4b:9d:54:ec:30:9c:37:ae:1b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Nov 3 16:50:11 2025 GMT
Not After : Nov 2 16:55:11 2026 GMT
Subject: CN=BA065028488739AE61DDB1512B71812D5041551C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:bf:3a:bc:cc:7e:d0:de:5e:af:55:38:39:
c4:59:27:06:f7:88:95:48:78:45:65:53:eb:09:c0:
b5:c2:86:cd:b1:bb:29:6c:9d:60:b2:8f:50:51:2e:
bd:8c:12:85:f3:c5:76:b8:9c:05:e1:58:2f:2b:06:
4f:8f:3c:c1:1d:38:d4:f8:4d:35:bd:54:6a:22:66:
e4:87:60:6a:49:d3:d5:0e:d9:3e:36:ca:dc:9d:52:
99:2a:e9:ad:83:12:d8:1f:c7:4d:de:0a:2b:4f:98:
64:e1:d3:bb:70:f8:8e:7f:98:7d:16:82:96:7b:b5:
97:fc:a2:4a:aa:3f:59:8a:6e:d6:9d:36:6e:ec:8f:
23:a6:ea:95:db:bb:1d:e7:96:e0:64:77:3f:51:11:
07:ec:46:82:f4:9d:27:ab:67:1d:2c:ba:65:99:07:
4d:13:bc:62:97:a5:d6:cb:d7:f7:2d:c4:ed:8f:48:
c4:fd:61:c8:e4:0f:3f:d2:af:53:b3:db:a4:76:13:
a2:e7:eb:36:ed:04:fb:5e:11:70:e4:60:4e:0f:a2:
71:7a:a8:e0:bc:f1:71:4b:e5:41:b4:91:ab:ab:63:
37:e3:27:d8:76:82:af:b6:95:5d:4b:44:fc:3a:89:
a1:ce:8e:2a:20:98:b5:93:79:65:bd:3a:b3:79:41:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:06:50:28:48:87:39:AE:61:DD:B1:51:2B:71:81:2D:50:41:55:1C
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32332d3233203d3e20343030393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/23
Signature Algorithm: sha256WithRSAEncryption
06:1d:14:17:2d:03:8d:4c:a4:7b:81:32:44:d7:73:d2:22:22:
b1:c5:a4:d6:f3:93:c4:fc:5f:f9:cd:23:2c:3b:d2:f6:3f:55:
85:a6:9b:b9:6a:dc:a3:cd:53:53:d0:14:cc:5e:1c:2a:e8:ca:
7c:2d:a2:64:7a:e4:4d:f9:a8:51:b8:e5:c2:6d:76:2f:bc:90:
d5:a0:bd:31:5d:b7:4f:3e:49:21:fb:94:fa:37:84:21:c2:4c:
5c:af:d0:f3:9a:66:f3:1a:54:8b:73:e9:05:cb:ea:a8:11:32:
39:5a:2b:8a:76:42:4a:84:fa:93:5e:9f:b1:4c:a4:20:24:01:
be:78:96:a9:35:dc:a6:4d:a1:19:bd:49:e5:e3:9a:af:2e:2f:
00:9d:61:4a:b1:c5:b9:1f:a4:d5:61:5f:c2:15:79:06:11:b7:
48:10:9e:3f:b4:4e:63:46:b9:1a:36:80:cc:1b:84:bd:a0:99:
8a:ab:bb:2c:81:0e:83:65:fd:39:dd:aa:14:82:36:b2:1a:8a:
40:26:17:86:67:90:f7:65:fe:00:19:f6:4d:b3:17:d0:c9:0e:
7f:a2:34:bc:fb:29:4e:36:fd:a6:2c:0f:20:0d:73:f6:10:94:
1b:fa:ba:18:f2:43:44:85:a5:ce:a0:3e:9c:f2:a9:23:78:b4:
d7:e8:68:62
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUMDRhlw9CAtT52UudVOwwnDeuG+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNTExMDMxNjUwMTFaFw0yNjExMDIxNjU1MTFaMDMxMTAvBgNV
BAMTKEJBMDY1MDI4NDg4NzM5QUU2MUREQjE1MTJCNzE4MTJENTA0MTU1MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyk786vMx+0N5er1U4OcRZJwb3
iJVIeEVlU+sJwLXChs2xuylsnWCyj1BRLr2MEoXzxXa4nAXhWC8rBk+PPMEdONT4
TTW9VGoiZuSHYGpJ09UO2T42ytydUpkq6a2DEtgfx03eCitPmGTh07tw+I5/mH0W
gpZ7tZf8okqqP1mKbtadNm7sjyOm6pXbux3nluBkdz9REQfsRoL0nSerZx0sumWZ
B00TvGKXpdbL1/ctxO2PSMT9YcjkDz/Sr1Oz26R2E6Ln6zbtBPteEXDkYE4PonF6
qOC88XFL5UG0kaurYzfjJ9h2gq+2lV1LRPw6iaHOjiogmLWTeWW9OrN5QW0xAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUugZQKEiHOa5h3bFRK3GBLVBBVRwwHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzYzNTJlMzEzMTM2
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzQzMDMwMzkzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LUF0MA0GCSqGSIb3DQEBCwUAA4IBAQAGHRQXLQONTKR7gTJE13PSIiKxxaTW85PE
/F/5zSMsO9L2P1WFppu5atyjzVNT0BTMXhwq6Mp8LaJkeuRN+ahRuOXCbXYvvJDV
oL0xXbdPPkkh+5T6N4Qhwkxcr9DzmmbzGlSLc+kFy+qoETI5WiuKdkJKhPqTXp+x
TKQgJAG+eJapNdymTaEZvUnl45qvLi8AnWFKscW5H6TVYV/CFXkGEbdIEJ4/tE5j
RrkaNoDMG4S9oJmKq7ssgQ6DZf053aoUgjayGopAJheGZ5D3Zf4AGfZNsxfQyQ5/
ojS8+ylONv2mLA8gDXP2EJQb+roY8kNEhaXOoD6c8qkjeLTX6Ghi
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:42 2025 by rpki-client