Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e20383334.roa
File: 34352e36362e36302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: vlJfBcwtIKeI7cvrJFR1icwxTkuss/ql4sPRJGgIw+Y=
Subject key identifier: 38:E7:2C:37:ED:A4:6B:1D:03:86:B5:AF:39:A3:5B:56:B6:11:58:61
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 6738BA3F83B4B0978B31FCFA5F63D83AFE750064
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e20383334.roa
Signing time: Fri 11 Sep 2026 08:34:35 +0000
ROA not before: Fri 11 Sep 2026 08:29:35 +0000
ROA not after: Fri 10 Sep 2027 08:34:35 +0000
asID: 834
IP address blocks: 45.66.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:38:ba:3f:83:b4:b0:97:8b:31:fc:fa:5f:63:d8:3a:fe:75:00:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Sep 11 08:29:35 2026 GMT
Not After : Sep 10 08:34:35 2027 GMT
Subject: CN=38E72C37EDA46B1D0386B5AF39A35B56B6115861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e2:16:d9:00:83:6e:ac:9f:74:ec:87:df:68:
24:11:cf:af:31:51:ed:47:bd:10:46:5f:8b:f9:da:
b1:22:3c:72:a1:6a:80:af:43:d8:e8:1b:02:87:5a:
e2:b0:03:f5:f2:80:9d:2a:bb:9c:0f:6d:cb:8e:ed:
06:5b:11:8c:5b:c4:e0:b7:6c:62:29:7c:6d:9d:22:
87:72:4c:77:19:22:e6:2d:3b:d1:5d:c0:54:48:42:
7b:06:d2:82:13:48:36:de:80:72:63:07:ab:74:f3:
91:60:88:61:6e:0f:8a:8f:3d:21:7c:da:16:5e:12:
35:84:f0:ad:96:a0:17:19:8c:46:af:c9:22:9f:17:
a3:84:67:c7:54:21:ed:d8:05:07:5b:07:4f:ca:d3:
9e:b2:1c:ad:30:84:a0:73:e9:ec:e5:88:fa:50:9a:
ed:7f:22:0f:55:ee:2d:03:69:d1:94:74:0c:70:48:
54:21:b3:50:89:04:ff:5a:c8:91:90:69:da:c5:c7:
ea:ab:f7:16:9a:77:47:87:16:9f:fa:8b:f8:15:d9:
55:fa:06:79:6b:5f:a1:8b:f3:aa:90:1a:48:1d:1d:
e6:f8:fc:8a:43:ad:5c:d9:74:b4:53:e9:78:bf:70:
2a:a4:70:af:15:b8:4b:46:47:d8:58:9a:96:08:68:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E7:2C:37:ED:A4:6B:1D:03:86:B5:AF:39:A3:5B:56:B6:11:58:61
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.60.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0e:4c:51:1a:63:df:d3:52:e9:f9:6b:46:05:2a:ff:93:1e:
b4:19:6d:2c:21:9d:84:9c:c5:95:78:5c:3b:58:6d:9d:a2:82:
e8:4c:7f:03:14:c9:ee:a3:5f:79:0f:2d:ed:21:d3:68:53:9f:
a4:f4:0f:40:99:e1:ac:80:bd:7f:c9:5d:9e:d6:66:a5:85:e2:
98:32:22:f2:22:f8:90:dd:48:69:08:19:9d:cb:32:88:82:7f:
51:9f:5f:7b:0c:0d:46:2b:c0:c0:0c:4a:f6:88:c0:70:78:82:
91:6d:c3:af:a3:bb:de:de:57:9b:b8:83:81:e9:29:2a:e4:7d:
92:59:3c:47:73:e6:3e:8b:c5:96:68:b7:9a:72:e3:bb:1d:b6:
d1:4b:69:92:e2:a2:65:e0:4a:6a:02:89:cc:f0:24:07:0f:63:
b7:a2:b3:c0:9f:db:3b:32:b0:54:c8:90:c2:0a:76:80:a7:f1:
ae:e6:be:e9:df:a3:43:98:21:5c:19:a7:1d:c7:d1:0f:45:ea:
a6:e7:7d:cd:60:a7:e7:f6:c7:b9:de:b2:22:0b:28:ca:36:8d:
31:1a:65:7a:a4:e2:50:69:bd:e9:70:c5:be:b6:84:0d:36:ef:
a4:d7:82:4a:90:68:7b:b7:37:d8:f9:68:b5:03:c4:31:07:ad:
fe:a2:44:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:39:39 2026 by rpki-client