Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131392e302f32342d3234203d3e20383334.roa
File: 34352e36352e3131392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ufMYKh5Bzivc/u40TlWYrhhaN6Ki5iZEXKqUGSL3D64=
Subject key identifier: 4E:50:4E:C2:D9:ED:AE:D4:60:1D:1B:E8:E5:47:E4:3E:67:A8:80:B6
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 520D3EDF6427730FE073B159D2BF2DE0C3960B7B
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131392e302f32342d3234203d3e20383334.roa
Signing time: Fri 18 Sep 2026 12:12:21 +0000
ROA not before: Fri 18 Sep 2026 12:07:21 +0000
ROA not after: Fri 17 Sep 2027 12:12:21 +0000
asID: 834
IP address blocks: 45.65.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0d:3e:df:64:27:73:0f:e0:73:b1:59:d2:bf:2d:e0:c3:96:0b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 18 12:07:21 2026 GMT
Not After : Sep 17 12:12:21 2027 GMT
Subject: CN=4E504EC2D9EDAED4601D1BE8E547E43E67A880B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:98:2c:6d:82:f6:18:f0:cc:b3:47:0f:da:5e:
ac:90:20:2f:44:53:7c:b5:93:4a:7f:22:31:ac:14:
5e:05:36:c3:3e:a3:19:a8:3a:f9:02:35:83:05:51:
ac:54:cd:07:b6:c1:e7:3a:1b:70:25:5a:da:5c:33:
20:2a:e9:61:ed:40:5f:2a:61:11:87:ed:5d:b4:75:
00:1f:11:7e:ed:66:7e:d7:49:54:a6:a8:9d:40:08:
e5:1e:61:a2:37:b7:87:86:7d:d9:fd:16:a4:6a:7b:
62:af:24:50:82:02:51:70:8c:08:67:d1:a9:d2:1c:
bd:59:62:cb:b2:ce:95:37:70:c2:c8:56:26:68:14:
06:9d:98:4e:24:07:19:79:6b:25:72:25:5a:99:1d:
34:a3:4f:f1:2b:3b:cf:2e:f4:50:d1:c0:99:9c:73:
84:b0:88:50:54:51:67:88:e7:43:03:53:ed:ae:3f:
1e:30:dd:50:6e:1b:eb:3f:5e:dc:06:8f:2f:d3:3c:
39:52:ef:2e:6a:c5:b3:8f:cd:28:b5:1b:d4:7b:3a:
b0:a9:79:ab:f5:b8:fd:35:32:a8:fb:c2:74:3a:fc:
2f:08:fd:3b:db:3b:38:fa:91:91:8b:43:6e:16:d4:
a8:2e:93:71:8f:e3:47:b4:ee:a1:3e:d5:63:fe:f3:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:4E:C2:D9:ED:AE:D4:60:1D:1B:E8:E5:47:E4:3E:67:A8:80:B6
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e36352e3131392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1d:27:a3:d1:26:1c:23:2e:16:1e:84:0e:21:50:5b:76:67:
8d:f4:7b:84:56:00:bd:5c:8c:91:55:37:40:5b:5c:b3:6e:f3:
b1:ea:35:a7:e6:db:37:38:5c:d7:84:4b:de:4c:47:e6:53:ec:
46:0d:2e:fe:56:73:4d:49:72:d6:7d:f4:33:f8:6f:96:a6:21:
a1:93:8a:49:67:46:a4:10:a5:fe:27:fb:23:84:3a:db:99:fe:
33:c5:d6:23:0b:c1:c8:03:55:b8:be:1a:12:fe:be:69:26:19:
83:b3:56:e0:9e:38:55:fe:b2:49:ac:e1:4f:69:af:cd:bb:d8:
fa:8d:c7:53:ab:f3:13:91:55:9b:5b:fe:6a:b0:61:cc:84:4f:
a9:86:9c:41:21:ed:f2:3b:db:69:41:7e:42:41:c9:26:ea:0e:
b1:4c:71:f8:41:55:82:73:67:eb:29:7c:dc:e9:2e:a6:c2:49:
6e:24:37:b6:66:1f:20:14:00:f8:3b:ba:85:d8:83:9f:be:91:
7d:65:60:c8:2e:43:45:68:d3:94:e0:47:2d:c4:d0:c8:7d:00:
6e:9d:c5:14:ae:3f:f5:1e:43:b1:14:f5:91:ea:60:f8:4f:08:
55:0c:4a:48:19:33:a1:86:f6:25:b8:a2:0f:c4:7e:7d:97:d1:
20:7e:64:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:30:21 2026 by rpki-client