Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36332e302f32342d3234203d3e20383334.roa
File: 34352e36362e36332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: wjpAZt14FrpPjx2SDLR8ZCB6hU5OaXzj33ptd93t8oE=
Subject key identifier: 60:69:96:8D:2F:BE:10:80:54:37:D4:22:AA:B1:9E:11:61:A4:0D:2A
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 32DCE08386AC46859A0D5B79D92B451EAF348913
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36332e302f32342d3234203d3e20383334.roa
Signing time: Sun 22 Feb 2026 00:00:57 +0000
ROA not before: Sat 21 Feb 2026 23:55:57 +0000
ROA not after: Sun 21 Feb 2027 00:00:57 +0000
asID: 834
IP address blocks: 45.66.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:dc:e0:83:86:ac:46:85:9a:0d:5b:79:d9:2b:45:1e:af:34:89:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Feb 21 23:55:57 2026 GMT
Not After : Feb 21 00:00:57 2027 GMT
Subject: CN=6069968D2FBE10805437D422AAB19E1161A40D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:a0:2e:b4:77:46:84:de:d8:a4:a6:50:ff:
89:08:43:55:89:78:cf:54:cc:a0:f9:a9:2d:37:b7:
61:b7:d7:48:4b:52:ac:e4:de:24:34:c6:90:f6:55:
68:74:c1:d5:b6:b7:4d:10:79:9f:3d:11:0e:c1:ed:
0a:93:a9:92:a5:9c:59:b1:8b:e6:f1:9c:99:cc:08:
ab:c2:e6:b6:3d:fe:1e:52:ab:d1:63:e6:79:56:0c:
e3:08:44:1d:19:21:b0:63:46:0f:cf:cf:9a:54:1f:
61:96:a0:57:37:f3:f6:a3:77:46:46:f5:74:f8:f0:
a1:17:da:53:5b:2b:00:ba:c2:d6:31:c2:79:f0:ad:
82:42:7e:ca:8e:54:11:4f:68:e4:cc:2f:db:e3:71:
bc:89:64:df:38:1e:61:0f:5d:73:9b:92:fc:0c:1d:
b5:3c:78:7a:aa:b1:53:e5:d7:f8:3b:53:84:f8:80:
2c:7c:af:57:19:96:8a:2c:38:54:5a:86:c7:c5:f3:
7c:51:cc:c7:47:2e:d1:73:8e:86:bf:6e:ce:fb:10:
15:1b:2e:5f:05:25:f2:6e:51:1a:51:01:06:ba:28:
0a:f8:bc:c0:eb:7e:87:a1:1c:77:2d:7d:1e:9c:3f:
68:57:94:02:02:64:98:4c:51:b8:9c:a3:27:61:43:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:69:96:8D:2F:BE:10:80:54:37:D4:22:AA:B1:9E:11:61:A4:0D:2A
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.63.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a5:66:f9:32:74:3d:95:82:51:6d:f7:ab:61:4d:9e:70:58:
d1:52:6f:b4:6a:fb:b6:06:52:92:60:5e:4a:16:3a:95:c9:15:
d3:a7:4f:b5:82:7e:ee:a0:51:bc:58:5b:fc:a0:d7:35:f4:61:
d9:26:3f:e5:9f:74:7c:35:03:b2:9e:2d:a8:fb:bb:bb:42:cb:
b5:85:e0:2f:5c:ec:c5:d8:20:20:28:9f:4c:01:96:13:bf:dd:
d2:71:f9:d2:d6:b8:b3:97:d8:75:1f:56:55:c7:0c:9b:13:5b:
dd:23:b5:9d:35:21:9f:65:c0:44:f4:d1:8f:63:79:3d:ef:1a:
88:dc:f6:1c:66:a0:44:cc:29:cf:f9:75:20:c2:e8:d3:ff:50:
bf:81:6b:b3:b2:b2:55:b4:2a:ef:eb:5c:17:c4:c2:5c:06:c6:
6f:f4:46:9b:bd:0e:79:14:e5:6e:25:c1:22:f0:a2:47:09:e7:
39:b6:cc:73:29:d2:17:16:20:9b:ea:dc:ae:9a:33:5b:70:8d:
b1:2e:c2:9b:0f:d1:3b:58:80:3a:f8:98:c6:97:eb:3d:d7:8f:
72:b8:95:ea:0c:e1:39:41:50:51:a8:07:32:a4:f3:75:d0:e7:
57:bb:e0:1f:f8:3f:ba:9a:d0:ca:fe:f1:c4:ec:61:3c:94:5b:
dd:a2:5c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:03:56 2026 by rpki-client