Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e203631333137.roa
File: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: p+Be19DO+AcFb4gkjYPxJHkKBEIAgNCzzJgXrpyeezM=
Subject key identifier: 39:75:19:FD:33:87:A5:13:4D:A3:58:93:88:10:F2:F8:3F:95:3F:97
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 51D3598975452085B0D9CF2F115B228667DB3F3A
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e203631333137.roa
Signing time: Thu 09 Apr 2026 17:47:04 +0000
ROA not before: Thu 09 Apr 2026 17:42:04 +0000
ROA not after: Thu 08 Apr 2027 17:47:04 +0000
asID: 61317
IP address blocks: 45.66.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d3:59:89:75:45:20:85:b0:d9:cf:2f:11:5b:22:86:67:db:3f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Apr 9 17:42:04 2026 GMT
Not After : Apr 8 17:47:04 2027 GMT
Subject: CN=397519FD3387A5134DA358938810F2F83F953F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:62:e5:06:74:b0:61:08:d2:30:13:16:d1:
bf:17:c9:c0:0b:c5:78:8b:a3:3f:1d:e9:68:65:e5:
76:a9:6f:e0:fe:7e:80:3c:50:40:11:ea:32:5f:88:
29:21:71:f2:5d:ae:51:c7:1a:c2:4c:17:73:54:1b:
20:3c:06:94:42:bd:f4:bf:f5:fb:2a:c4:00:fd:ee:
11:db:f6:a9:46:1b:61:29:a1:4b:c6:0c:aa:e0:fa:
b2:6d:85:02:f9:b7:24:2d:ae:d6:16:00:97:33:2e:
25:47:b7:52:26:6e:45:0e:ab:35:10:6b:d4:8f:74:
71:0a:49:6f:f7:b8:62:56:34:82:62:f4:ed:3b:24:
c9:10:bb:d8:85:90:23:b4:26:cf:45:36:23:d0:c7:
18:e8:68:3e:e4:41:c4:51:d8:61:86:3d:7f:d0:ae:
56:8b:1e:49:0b:ae:2e:32:5f:3a:45:f7:0b:3c:04:
2d:2b:26:88:99:a8:14:8d:ca:94:0e:e4:9e:2b:01:
db:1d:52:5c:5a:1a:11:39:a2:54:53:bd:42:bd:c3:
1c:53:c4:fc:df:08:96:d3:07:3d:1c:bd:d2:17:29:
d2:7c:1b:8d:e8:b6:4d:15:23:81:e9:de:e7:df:40:
56:ec:bb:f3:d0:a1:7f:60:1b:d8:66:12:8c:ba:16:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:75:19:FD:33:87:A5:13:4D:A3:58:93:88:10:F2:F8:3F:95:3F:97
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.148.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a7:5d:61:8f:ba:3a:fc:35:21:a4:c9:f9:31:7a:bc:d9:87:
2d:ff:2e:e5:72:1d:17:47:b4:82:95:af:3c:7b:3b:69:0f:24:
b2:cb:8a:55:10:97:84:8a:df:e7:cb:93:4d:18:1e:31:fc:a4:
de:cc:69:db:cf:d7:32:2d:15:77:a0:05:06:ec:6a:61:77:32:
0b:ae:75:1b:c2:ec:91:f5:c3:18:92:01:ef:6b:bd:d2:40:b3:
2f:84:3c:fb:60:e6:c1:f2:89:4b:2a:a7:0e:bd:6c:ec:b2:58:
d1:b2:4b:3f:10:d3:8a:19:d1:23:32:bb:ed:ae:3d:93:c9:a8:
30:94:33:91:ac:9e:ae:13:7e:01:9f:62:86:9b:1b:ea:d0:19:
16:46:7f:09:6b:b5:8d:9c:5f:10:7c:9b:b1:38:20:7e:15:48:
e2:24:98:31:55:b5:ff:c6:2d:87:da:a4:58:53:b5:1e:6d:be:
a5:5d:81:bf:91:8f:a9:c0:78:a7:ae:d0:82:79:ba:a7:6c:0f:
e2:a0:c3:67:72:1f:56:29:ff:b6:f0:4a:b5:ef:2e:9d:16:de:
10:d3:31:3e:77:e9:bd:66:f4:dc:a6:c5:48:cc:fe:46:49:a6:
ed:11:c1:a3:d6:dc:79:26:d0:ac:f9:70:0a:db:a4:f3:c4:e4:
68:d4:13:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:38 2026 by rpki-client