Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e20383334.roa
File: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: llP8g/0WrRmSn1X308T/5f3EuZAU9g/XCLuH1bMAcIY=
Subject key identifier: 21:E6:C0:D3:28:5D:55:02:FE:36:57:D4:C1:17:28:1E:F6:08:83:66
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 384805C82FB169916CB00CFFDE8342EEF4029013
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e20383334.roa
Signing time: Thu 17 Sep 2026 22:07:14 +0000
ROA not before: Thu 17 Sep 2026 22:02:14 +0000
ROA not after: Thu 16 Sep 2027 22:07:14 +0000
asID: 834
IP address blocks: 45.149.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:48:05:c8:2f:b1:69:91:6c:b0:0c:ff:de:83:42:ee:f4:02:90:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Sep 17 22:02:14 2026 GMT
Not After : Sep 16 22:07:14 2027 GMT
Subject: CN=21E6C0D3285D5502FE3657D4C117281EF6088366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:54:9c:a2:a5:2e:7c:a9:2a:29:02:93:12:
0e:5c:b8:ba:51:1a:b5:0d:f7:32:70:4b:4e:9e:a5:
ac:7d:9f:90:fb:5d:9b:81:57:41:ad:8b:58:38:0f:
25:30:93:9a:c4:b0:95:85:e1:e8:2b:9d:06:de:b3:
d5:84:95:cc:93:72:ac:32:95:6a:53:73:25:f1:f1:
0d:81:76:94:3b:c8:c0:55:e7:42:d6:6f:b0:2d:00:
53:a8:b0:af:94:5f:e7:2a:ac:02:9b:94:01:f5:5b:
4d:63:97:cc:a3:8a:64:a6:39:11:12:2d:5d:08:94:
82:58:07:cb:7c:4b:66:15:94:fd:2c:b4:5f:41:84:
67:03:49:5d:e3:57:20:26:eb:91:60:8c:eb:44:7a:
6c:f5:65:2c:5a:b0:40:47:3b:c2:2a:2c:bc:17:53:
ea:02:0a:03:4b:33:ed:b6:5c:49:4a:98:3b:d4:81:
99:12:f3:6a:8c:01:47:a6:fc:2b:2a:7f:7e:e2:e5:
29:38:ba:e4:66:95:89:2b:b4:84:e1:67:4b:ce:40:
27:ce:14:63:42:93:12:14:69:c1:41:db:0f:39:95:
62:54:50:16:aa:bb:f5:df:9b:7e:3a:d8:ea:b8:ae:
17:8e:9a:6e:63:ab:8b:74:a7:8b:66:03:61:c7:6a:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E6:C0:D3:28:5D:55:02:FE:36:57:D4:C1:17:28:1E:F6:08:83:66
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c4:0a:20:be:69:46:30:69:1c:b9:ea:e9:ff:dd:10:8e:d2:
5e:8d:76:3a:23:a1:ec:ed:eb:f0:49:da:33:cb:4f:32:df:14:
a2:55:51:9c:46:9d:4f:bf:22:08:f2:d2:3b:af:09:2b:8a:3e:
d0:7d:a2:f8:78:4e:48:cf:31:0e:30:ae:20:0a:6f:fc:e1:a8:
6b:7b:dd:57:80:56:38:69:04:ed:f8:81:fe:90:6c:29:d2:ba:
0d:6a:42:af:c5:a5:26:0a:db:95:ec:ec:85:71:6e:1a:f4:9b:
22:67:60:73:20:75:ad:31:55:27:51:a0:76:58:32:5e:d0:fd:
f2:1d:79:a9:37:26:65:3f:59:f5:ec:94:4d:7c:64:81:13:65:
0b:fe:95:ad:a9:6b:4a:10:61:a8:17:bf:06:1e:08:c1:9f:ae:
fb:8c:00:2d:50:2f:01:c6:04:05:47:dc:8a:7c:67:b6:b3:79:
88:7f:f1:85:44:29:ae:5b:84:9a:31:85:4a:86:03:e5:c2:ec:
79:19:4b:69:d5:0a:7a:6e:5a:a7:00:35:77:83:c6:54:95:d8:
97:f6:67:49:45:a5:af:14:f4:13:37:76:b0:9f:c9:7b:a1:6f:
4b:c4:f2:a5:63:da:fe:ca:78:85:97:02:d9:33:bf:66:28:38:
82:09:ea:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:41:40 2026 by rpki-client