Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e392e302f32342d3234203d3e20323034393134.roa
File: 34352e38382e392e302f32342d3234203d3e20323034393134.roa (raw, json)
Hash identifier: F//fl6lrN+InFBA9ItZ0AG1Ysqe7rqM4SqcHI/n1O8o=
Subject key identifier: 83:EE:57:5F:46:2B:DE:B8:A8:5B:B0:6C:D3:D0:4C:24:85:C5:04:F1
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 169AC438640AB1A44AB8027047CEF42B038E2EC2
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e392e302f32342d3234203d3e20323034393134.roa
Signing time: Mon 04 Aug 2025 09:54:13 +0000
ROA not before: Mon 04 Aug 2025 09:49:13 +0000
ROA not after: Mon 03 Aug 2026 09:54:13 +0000
asID: 204914
IP address blocks: 45.88.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:9a:c4:38:64:0a:b1:a4:4a:b8:02:70:47:ce:f4:2b:03:8e:2e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 4 09:49:13 2025 GMT
Not After : Aug 3 09:54:13 2026 GMT
Subject: CN=83EE575F462BDEB8A85BB06CD3D04C2485C504F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:01:c3:6d:aa:66:01:8e:dc:b5:d2:bf:6c:
21:39:e4:f4:c3:43:48:5e:22:12:cf:d2:24:d3:0a:
8c:26:1a:d1:0f:5e:4e:c1:3e:20:c2:39:14:b4:fb:
9f:7d:43:3f:69:38:7d:fb:5b:74:4a:53:fa:4a:f0:
28:6a:30:fb:e0:e7:d1:3f:94:40:ed:0f:29:df:f6:
02:91:93:5b:a8:5a:28:7a:7c:bf:3a:be:77:6b:7e:
b4:ea:73:c5:7f:dc:93:3c:ed:2c:d7:55:22:c9:f0:
73:ae:b0:e5:5a:36:1e:ae:90:a1:b3:5b:65:31:fd:
33:fb:a1:c4:08:19:a1:26:5b:ee:50:1f:00:e4:0d:
d8:43:f9:78:71:9f:57:93:f2:fc:e1:58:f9:2e:a6:
f1:8d:08:61:1c:98:85:0d:63:de:fb:ee:cf:9d:27:
03:a1:2f:b2:06:78:93:12:0f:7b:7e:bb:27:a8:ed:
4e:2f:7c:9b:57:08:4d:25:53:64:c7:e6:52:a7:46:
12:9a:c5:7e:d4:2d:b3:50:31:dd:c4:d9:47:61:0a:
f0:4f:c9:0b:64:e1:32:56:2a:3c:12:52:79:ee:fd:
d9:8d:9e:78:a7:6e:fd:55:cd:e9:18:0e:39:1e:b3:
13:cf:19:b2:03:5d:c4:ef:93:3c:cb:0e:35:3d:f6:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EE:57:5F:46:2B:DE:B8:A8:5B:B0:6C:D3:D0:4C:24:85:C5:04:F1
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e392e302f32342d3234203d3e20323034393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.9.0/24
Signature Algorithm: sha256WithRSAEncryption
83:18:27:d0:fb:a8:63:2e:14:fe:f4:00:33:4a:94:3f:26:e6:
75:23:dd:69:36:96:1c:99:8a:99:b2:a8:18:3e:85:04:cc:52:
0f:63:89:92:d4:19:2b:ff:fc:73:5c:70:c6:66:b9:1e:52:7b:
4d:7d:fc:96:59:b5:54:7c:cd:c3:80:dc:e3:3d:2f:bd:26:ec:
36:6d:b1:e8:37:ec:7a:e0:a5:4d:49:4e:62:c4:42:e1:7e:75:
59:8d:1e:86:fd:09:63:57:cb:d2:af:dc:34:e2:04:85:b6:86:
95:10:a0:ed:28:57:42:fa:87:4f:47:b1:1d:5b:32:5b:88:1a:
c2:ba:b7:ab:25:da:63:00:bb:28:72:fd:a3:ba:75:48:f6:75:
5d:1f:48:1c:83:65:cc:e0:4e:07:16:7f:b4:07:fc:d0:71:52:
28:8a:41:cc:2f:a8:71:a6:19:74:ee:e8:a5:3a:70:cb:2b:f4:
3b:de:68:fa:c5:cd:8c:37:94:eb:88:62:f4:ae:9b:c6:07:2d:
6b:eb:8b:bc:dd:49:b0:3d:8d:9e:f1:45:b4:ef:33:4e:00:e1:
2d:0a:42:cf:a2:42:e2:4f:8e:be:dc:0a:f6:37:bd:5e:04:5b:
4a:49:7b:ca:7e:d1:d4:86:26:34:1c:55:74:dd:75:b5:32:e3:
ee:61:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:27 2025 by rpki-client