Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e20383334.roa
File: 34352e31332e3135302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: DnT+O+r+UXgdQCKaWFgGSd5R+pJJ9zd+7mNwa6ONcCw=
Subject key identifier: 38:1B:F4:C2:60:54:58:02:D0:23:2F:53:7E:B8:33:0D:D9:43:0D:35
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 1CBBDC20D20B1F386D819C8317BE71454F8F2DA7
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e20383334.roa
Signing time: Mon 03 Nov 2025 00:08:58 +0000
ROA not before: Mon 03 Nov 2025 00:03:58 +0000
ROA not after: Mon 02 Nov 2026 00:08:58 +0000
asID: 834
IP address blocks: 45.13.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:bb:dc:20:d2:0b:1f:38:6d:81:9c:83:17:be:71:45:4f:8f:2d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Nov 3 00:03:58 2025 GMT
Not After : Nov 2 00:08:58 2026 GMT
Subject: CN=381BF4C260545802D0232F537EB8330DD9430D35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:f1:b1:cc:86:22:ec:60:c2:3f:0b:db:48:
fd:e7:50:48:49:7a:1b:25:d1:4d:5e:e8:c8:e8:38:
d6:98:08:8e:11:ea:19:db:1b:73:56:dd:fb:77:4f:
dc:2e:09:35:d7:44:a7:37:2d:9a:4a:4c:d8:ed:5b:
0d:b4:71:45:0b:54:ed:b2:96:46:10:a9:ba:98:5e:
dd:ba:e8:fa:b3:23:4a:42:69:1c:6e:83:7c:d1:0d:
4f:9b:9a:6b:b6:5c:7d:11:ff:2e:f7:85:83:78:cf:
10:11:6f:be:c8:e5:a9:73:6b:69:fe:c7:3f:ce:f0:
61:38:58:a5:46:79:90:06:de:ad:82:17:0c:73:be:
f3:57:55:bc:cb:7f:29:a9:c4:8f:58:d0:e7:e0:20:
30:33:7b:0c:03:0c:dc:f7:2d:51:66:4e:05:ce:67:
8a:3d:c3:20:03:83:60:1c:6b:e0:ca:67:76:6e:5b:
a1:92:49:f1:3f:e0:aa:3c:73:d3:f1:e3:35:6b:18:
f1:45:35:65:ef:5e:ee:f0:55:19:54:b1:0f:24:bb:
d5:c1:9d:0c:0e:7b:f8:bb:43:b8:b7:cb:c8:ab:0f:
f4:7a:b6:3f:a2:4d:46:8a:4d:86:8b:c7:62:c8:c0:
12:30:5d:33:d8:5a:64:e1:f2:5f:61:e3:9c:2b:98:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1B:F4:C2:60:54:58:02:D0:23:2F:53:7E:B8:33:0D:D9:43:0D:35
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.150.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:c2:5c:be:c3:36:43:66:3e:85:c5:a0:e7:99:bd:66:60:1f:
4f:63:be:00:27:a2:3e:07:96:40:d4:e8:bd:e8:76:bc:8e:9f:
84:34:25:a9:2c:f5:34:e4:97:01:30:42:4a:1f:1b:c7:66:0a:
a0:1d:53:ab:e2:fc:7f:65:85:a7:f5:ad:be:b2:11:c5:f7:bf:
80:c0:dd:84:56:28:9a:f0:f4:2a:01:c9:44:98:e6:6b:30:b5:
2b:e5:61:18:bb:e5:38:63:78:df:df:45:2a:4c:4c:a0:a2:28:
b6:e3:82:64:70:0c:00:76:78:9a:af:ae:9d:11:05:3a:43:a7:
fc:2c:97:67:5f:b9:7b:35:9c:51:c2:6a:79:6f:7e:80:9f:57:
2b:77:1a:9a:b9:62:31:59:a7:68:f5:4f:82:dc:87:76:03:75:
2f:1e:e4:dd:ff:ea:68:da:2b:fb:87:fa:b9:5a:b1:2e:2e:37:
3a:ce:7d:02:c7:ff:1f:80:1b:ac:be:a3:58:08:cc:91:48:18:
cb:cb:69:b3:83:f0:54:d3:d3:ac:5b:3a:4e:45:47:c4:75:c6:
60:fe:30:d6:45:70:01:28:02:ef:93:d6:ab:d8:c7:1b:c6:4d:
f4:9e:38:a2:97:d3:79:db:23:58:74:30:13:82:52:96:64:24:
c3:70:e8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:33:16 2025 by rpki-client