Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134392e302f32342d3234203d3e20323132323338.roa
File: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=
Subject key identifier: BD:98:AB:C2:7A:AD:E0:BC:7B:DC:A2:4A:0D:D9:90:EA:EC:63:86:4D
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 13C4C80E3D5DBDCBEC73D6D6C42682A434731267
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134392e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Apr 2026 17:47:04 +0000
ROA not before: Thu 09 Apr 2026 17:42:04 +0000
ROA not after: Thu 08 Apr 2027 17:47:04 +0000
asID: 212238
IP address blocks: 45.66.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c4:c8:0e:3d:5d:bd:cb:ec:73:d6:d6:c4:26:82:a4:34:73:12:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Apr 9 17:42:04 2026 GMT
Not After : Apr 8 17:47:04 2027 GMT
Subject: CN=BD98ABC27AADE0BC7BDCA24A0DD990EAEC63864D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:68:4e:80:e1:c3:94:91:05:9a:04:6c:43:
f0:b8:42:ef:f7:4a:2e:31:d3:ff:69:44:f1:6b:48:
f3:5c:34:d6:5b:61:3a:db:bb:6c:f7:fb:f5:f5:c3:
1a:70:89:fc:7f:8f:32:ea:51:94:86:18:cf:28:1a:
dc:30:61:a2:cb:93:55:32:c0:dc:31:e9:34:a5:f3:
a7:bf:3b:7a:fc:9c:88:71:0f:1a:34:3c:01:b6:c7:
90:48:e5:be:70:ab:ae:70:c1:76:14:ed:d7:b9:0d:
04:d9:34:8b:e6:a0:17:88:8d:32:8b:cc:bb:78:ae:
4e:2d:8a:11:bd:29:ef:8e:b8:13:5a:68:bf:00:28:
43:e9:33:53:cd:2b:c7:fe:54:ce:d9:e9:e5:89:cf:
6c:f8:3a:3a:ef:85:fc:87:10:15:f5:1d:5f:d4:0d:
03:2e:6b:f9:10:fc:8a:b5:73:2f:8a:47:95:a3:c0:
d3:b7:06:24:bb:89:6c:10:5a:6f:a4:e6:de:f9:c3:
29:50:49:17:57:15:55:27:08:35:b8:ae:77:8c:3c:
96:de:7b:73:99:18:4c:4f:94:ff:3a:95:51:f3:b5:
9c:6b:7a:e3:58:3b:12:8a:39:9c:63:43:47:db:16:
30:0b:74:9d:14:46:5a:68:7c:40:fe:6b:6f:87:ec:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:98:AB:C2:7A:AD:E0:BC:7B:DC:A2:4A:0D:D9:90:EA:EC:63:86:4D
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.149.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:fa:c8:6a:d4:5c:fa:f3:58:6e:be:6d:b3:f7:48:7a:9c:c3:
4a:16:2a:c8:75:3d:fd:9f:8c:27:82:db:c1:ae:3d:8c:20:5a:
b8:80:34:25:c0:af:7f:0b:e6:21:13:8c:ee:48:71:82:f9:95:
03:ce:cb:bf:6f:10:9a:11:b3:8a:81:3b:83:78:c7:04:b1:87:
ad:f9:85:41:a6:35:3a:ef:ea:8d:ad:7b:7f:51:48:f2:13:af:
dd:37:40:11:db:6d:fb:45:0c:c9:71:2f:9f:80:10:e2:53:b8:
6e:61:b1:fa:01:2c:0f:95:f8:2b:79:fe:02:3c:a6:97:3b:03:
1b:71:20:5c:fa:5d:46:be:93:da:06:17:5a:e1:28:07:59:e2:
d1:00:42:05:ca:8f:c8:d4:6a:90:ad:91:c0:d5:33:6b:78:83:
31:b0:1f:fe:37:7c:05:f8:8f:a3:4d:52:1d:22:d1:a0:c2:37:
72:25:50:10:8e:a5:fa:1a:38:fb:3f:cd:3c:b9:d0:35:f4:94:
76:60:a7:c8:e9:8d:84:37:8a:2d:58:dd:31:17:35:14:87:ec:
24:8e:02:01:fa:57:3b:9a:d7:75:73:2a:cd:aa:79:7f:e6:e0:
ad:a8:1f:89:ac:f9:1d:12:58:9b:5c:a2:ac:37:b8:af:83:70:
35:b5:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:34 2026 by rpki-client