Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36342e302f32342d3234203d3e20323131333733.roa
File: 34352e39352e36342e302f32342d3234203d3e20323131333733.roa (raw, json)
Hash identifier: xjmYYmV4Z6p8KrENBIj3UpDKsJdICyv+p1AMstccT6A=
Subject key identifier: 48:49:1B:F4:A7:06:20:48:DE:74:74:18:E3:64:62:1A:9C:90:E7:AD
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 4DCEA28C0EA1689568B22DCF13A98C4355E2B8D3
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36342e302f32342d3234203d3e20323131333733.roa
Signing time: Mon 27 Jul 2026 10:49:15 +0000
ROA not before: Mon 27 Jul 2026 10:44:15 +0000
ROA not after: Mon 26 Jul 2027 10:49:15 +0000
asID: 211373
IP address blocks: 45.95.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ce:a2:8c:0e:a1:68:95:68:b2:2d:cf:13:a9:8c:43:55:e2:b8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jul 27 10:44:15 2026 GMT
Not After : Jul 26 10:49:15 2027 GMT
Subject: CN=48491BF4A7062048DE747418E364621A9C90E7AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:dc:89:d6:0a:90:de:a2:2e:ca:c4:97:8a:
c7:5c:e4:39:a4:d7:36:66:8c:ca:94:36:be:bb:a8:
9b:da:c9:65:0d:38:a9:4b:cf:0d:0b:16:4f:27:3a:
47:e0:53:3f:a4:ad:4e:97:9d:e9:23:26:8d:c9:0e:
30:1a:f5:ae:1b:e1:2b:cf:c9:41:67:1b:ee:34:0f:
62:20:b3:2e:14:cf:1f:ba:8d:49:76:8c:f5:bf:5e:
16:b1:a8:0d:c1:99:44:f6:46:d1:4e:bd:6d:0c:d3:
33:f9:d9:dd:42:60:f3:45:db:a4:4e:9b:c1:82:5b:
3a:fb:08:c1:58:2d:6f:03:5b:d6:cb:b9:97:f9:d0:
b3:1e:25:b2:e0:2a:da:d5:67:bb:9c:6e:ac:94:39:
36:7a:cc:92:b6:ce:f2:8d:82:7f:f7:45:81:e6:41:
34:83:9e:e1:f3:e8:04:ca:11:b7:8e:8f:8c:14:20:
24:12:dd:9d:1e:56:a3:3e:e4:e4:2e:e2:b3:cf:c9:
80:bf:ed:f5:23:6d:db:dd:7f:16:cf:e9:84:84:ca:
81:2b:65:f0:e8:f7:4f:46:7b:7f:e6:22:73:a8:83:
40:1d:0c:cf:83:6f:d5:43:c4:8c:96:40:9f:6a:1a:
c0:e3:d4:a9:cc:a6:47:c5:e3:2f:c2:3f:64:d3:df:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:49:1B:F4:A7:06:20:48:DE:74:74:18:E3:64:62:1A:9C:90:E7:AD
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36342e302f32342d3234203d3e20323131333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.64.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f3:6d:1e:c0:f1:5f:55:c8:80:ca:e5:11:86:47:1c:a2:c8:
26:98:c2:3d:45:00:f2:ca:49:dd:dc:ef:9d:37:ec:a8:68:0b:
b5:b0:92:5a:cb:93:72:e4:b5:61:41:09:26:30:49:74:ca:98:
2a:40:7e:74:18:45:28:e7:12:dd:1b:30:33:d5:db:77:c0:49:
64:05:c9:8c:85:69:78:4c:73:d2:e4:bd:64:d4:b5:3e:35:b2:
9f:51:cc:f3:90:a0:ec:89:74:9d:38:1c:1b:a9:d7:78:b0:83:
e3:e9:c1:53:b6:e1:f5:58:6b:33:eb:c8:c7:fe:d1:40:63:13:
3e:52:04:a1:af:ec:22:6a:a9:8c:59:f1:20:7d:4a:84:d4:0b:
23:18:ed:d3:2c:df:91:23:f3:37:d0:ac:7e:01:e8:4b:e2:ed:
d8:d1:23:ec:e8:c8:d6:e2:9b:5c:13:1d:0b:10:39:5a:82:2a:
4a:ca:07:5c:3a:6d:76:87:21:f5:e1:d7:21:90:b4:21:14:c1:
14:c2:d5:06:fc:3e:e1:fc:51:2b:82:17:67:52:5d:3c:74:6d:
cd:7d:18:72:0d:3d:60:8c:ff:cf:98:ad:6a:5b:2f:5c:68:5b:
ec:29:12:78:ce:f4:37:6b:12:f8:6f:21:d7:0a:0d:2f:59:69:
5e:08:27:96
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUTc6ijA6haJVosi3PE6mMQ1XiuNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNjA3MjcxMDQ0MTVaFw0yNzA3MjYxMDQ5MTVaMDMxMTAvBgNV
BAMTKDQ4NDkxQkY0QTcwNjIwNDhERTc0NzQxOEUzNjQ2MjFBOUM5MEU3QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiWtyJ1gqQ3qIuysSXisdc5Dmk
1zZmjMqUNr67qJvayWUNOKlLzw0LFk8nOkfgUz+krU6XnekjJo3JDjAa9a4b4SvP
yUFnG+40D2Igsy4Uzx+6jUl2jPW/XhaxqA3BmUT2RtFOvW0M0zP52d1CYPNF26RO
m8GCWzr7CMFYLW8DW9bLuZf50LMeJbLgKtrVZ7ucbqyUOTZ6zJK2zvKNgn/3RYHm
QTSDnuHz6ATKEbeOj4wUICQS3Z0eVqM+5OQu4rPPyYC/7fUjbdvdfxbP6YSEyoEr
ZfDo909Ge3/mInOog0AdDM+Db9VDxIyWQJ9qGsDj1KnMpkfF4y/CP2TT33qPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUSEkb9KcGIEjedHQY42RiGpyQ560wHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzkzNTJlMzYzNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMzMzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1f
QDANBgkqhkiG9w0BAQsFAAOCAQEAE/NtHsDxX1XIgMrlEYZHHKLIJpjCPUUA8spJ
3dzvnTfsqGgLtbCSWsuTcuS1YUEJJjBJdMqYKkB+dBhFKOcS3RswM9Xbd8BJZAXJ
jIVpeExz0uS9ZNS1PjWyn1HM85Cg7Il0nTgcG6nXeLCD4+nBU7bh9VhrM+vIx/7R
QGMTPlIEoa/sImqpjFnxIH1KhNQLIxjt0yzfkSPzN9CsfgHoS+Lt2NEj7OjI1uKb
XBMdCxA5WoIqSsoHXDptdoch9eHXIZC0IRTBFMLVBvw+4fxRK4IXZ1JdPHRtzX0Y
cg09YIz/z5italsvXGhb7CkSeM70N2sS+G8h1woNL1lpXggnlg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:50 2026 by rpki-client