Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32342d3234203d3e20383334.roa
File: 34352e36352e3131362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ikO7UCXYHCv/lURRVMWX+xN4JUk+VXgdBeCCKS9vx8k=
Subject key identifier: EE:B0:E7:07:CA:97:72:AF:37:55:00:02:DB:29:5D:6F:75:F8:07:5E
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 6B2DF2262CC0788CDA8575EF343EDDE357EBA9DF
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32342d3234203d3e20383334.roa
Signing time: Fri 18 Sep 2026 12:12:19 +0000
ROA not before: Fri 18 Sep 2026 12:07:19 +0000
ROA not after: Fri 17 Sep 2027 12:12:19 +0000
asID: 834
IP address blocks: 45.65.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2d:f2:26:2c:c0:78:8c:da:85:75:ef:34:3e:dd:e3:57:eb:a9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 18 12:07:19 2026 GMT
Not After : Sep 17 12:12:19 2027 GMT
Subject: CN=EEB0E707CA9772AF37550002DB295D6F75F8075E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:13:45:9d:f3:cc:ba:5c:be:3b:36:c0:92:
f5:f6:6c:94:7c:7f:30:48:33:6d:33:db:e2:4e:d7:
cb:b4:72:6b:8e:49:eb:66:0c:e7:46:d8:e8:60:2e:
b3:7d:c7:dd:09:6b:37:e7:25:9c:2a:bb:86:a6:c2:
b0:2c:70:a2:2f:e8:a9:9d:bf:aa:20:dd:c2:aa:8e:
74:cd:23:23:58:60:47:43:9c:29:67:e9:96:86:46:
5a:da:88:d9:12:c1:13:f5:a5:b5:d8:5e:fa:b2:ad:
3a:89:42:9e:57:a7:64:d0:af:b0:b8:06:b8:69:95:
d9:d4:0c:b9:42:9b:56:69:0c:01:80:b4:20:da:63:
55:96:89:7f:b3:4d:ff:14:12:a2:82:7c:4f:6b:43:
9b:b1:76:d3:82:9c:56:e1:05:00:9a:a4:4b:ce:a9:
c7:4c:02:07:ac:a6:05:e8:d9:0a:48:4b:6f:0a:ae:
f3:4b:23:43:7f:43:32:a1:2f:8c:01:55:fc:09:9b:
fa:a6:72:9b:6e:6a:d9:9e:b8:06:62:27:e6:80:f2:
17:d2:07:8c:6b:95:9e:fc:68:bb:7c:3a:b0:dc:70:
69:fe:81:64:ba:5d:69:ed:7d:30:c9:e8:89:53:8e:
2b:a0:9b:f1:60:e1:3a:a6:16:01:37:c1:7c:39:c5:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:E7:07:CA:97:72:AF:37:55:00:02:DB:29:5D:6F:75:F8:07:5E
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/24
Signature Algorithm: sha256WithRSAEncryption
75:c4:39:80:1a:c7:1f:5f:5d:bc:84:0c:ef:47:6c:91:0e:bc:
7c:46:76:c4:bc:23:45:39:54:1e:83:3b:5a:e0:39:ca:b1:3f:
e7:0c:f0:dd:cf:04:90:96:94:2d:68:94:da:2f:68:ee:b9:39:
56:c4:6a:37:e0:4c:92:6c:29:8e:34:be:e1:0e:1d:50:86:b3:
c5:f2:77:6a:bc:50:fd:d6:bd:d0:74:04:83:9d:f5:a5:f5:3b:
ce:b2:d7:8f:80:c8:e1:80:a2:e7:f8:8a:28:64:ea:36:b7:8c:
bc:8f:82:2c:5b:d6:58:95:d5:54:57:bc:e0:cc:c5:09:96:ed:
a4:10:0f:6b:f1:2c:e1:77:12:38:2a:ba:23:ba:7e:51:0c:a0:
b0:1c:6b:c4:2b:4e:d0:5b:ce:7b:1e:b7:0f:1f:1b:d3:b4:5d:
06:a4:05:be:9a:58:a0:57:50:fa:a2:b9:19:ab:7d:9d:dd:a9:
fc:a5:ca:4e:9d:1f:3f:91:bd:95:eb:a9:07:40:30:71:58:77:
29:d0:6e:00:e5:91:70:83:39:7f:16:3f:43:6a:73:6e:0e:66:
e7:66:54:9f:32:4d:0b:db:14:f1:46:df:6f:5b:ed:59:80:de:
b5:f1:34:03:a8:a9:07:ba:e3:65:88:65:79:9b:9b:c2:73:17:
47:fe:b6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:43:27 2026 by rpki-client