Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137342e302f32342d3234203d3e2037353632.roa
File: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (raw, json)
Hash identifier: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=
Subject key identifier: B6:25:1A:69:0A:D3:B6:46:BC:46:D2:E7:C6:66:26:1C:77:63:BC:18
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 5ADF2E7461E23335EAABAEC00F8A107573399EA2
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137342e302f32342d3234203d3e2037353632.roa
Signing time: Thu 09 Apr 2026 17:47:04 +0000
ROA not before: Thu 09 Apr 2026 17:42:04 +0000
ROA not after: Thu 08 Apr 2027 17:47:04 +0000
asID: 7562
IP address blocks: 45.8.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:df:2e:74:61:e2:33:35:ea:ab:ae:c0:0f:8a:10:75:73:39:9e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Apr 9 17:42:04 2026 GMT
Not After : Apr 8 17:47:04 2027 GMT
Subject: CN=B6251A690AD3B646BC46D2E7C666261C7763BC18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:40:89:e1:39:b8:67:09:f9:c0:04:32:55:
8a:3b:94:cb:56:6d:c1:d2:69:91:41:74:b4:b3:2c:
39:d7:2e:91:61:1a:40:15:35:94:95:e4:cd:fa:ca:
6e:4a:29:95:e8:fe:81:dd:85:d6:09:e4:3c:ba:dd:
3a:b2:8e:43:5c:77:19:ec:58:a7:31:6f:77:24:b0:
21:29:e6:86:ac:86:25:3c:a3:4c:ce:4f:09:1a:82:
40:f2:65:c0:64:45:ed:f1:30:0e:a7:4d:3e:59:28:
2a:2b:19:f9:09:12:30:5b:5e:e2:4d:a4:1e:e7:c7:
bc:35:36:84:82:45:90:75:63:40:98:31:80:0a:9d:
5a:bc:78:af:1e:1e:99:0a:46:30:03:fb:47:3d:12:
39:e9:85:0a:7b:eb:df:8c:3e:fa:54:8d:f6:99:16:
03:d8:a5:fb:9d:6e:69:68:52:1c:e6:68:0e:a4:1e:
99:35:77:72:c2:51:cb:5d:91:19:89:f0:6b:be:28:
9f:9f:f5:f4:0f:0d:c7:eb:9b:bc:a2:ac:85:57:ed:
18:1d:e0:0a:cf:ec:47:55:96:2c:9b:91:ed:56:d0:
43:bb:c7:5a:f1:89:4a:e4:49:97:9d:c0:13:c0:c8:
6c:34:b2:8f:17:ec:2e:90:ee:41:e9:df:70:df:c8:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:25:1A:69:0A:D3:B6:46:BC:46:D2:E7:C6:66:26:1C:77:63:BC:18
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137342e302f32342d3234203d3e2037353632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.174.0/24
Signature Algorithm: sha256WithRSAEncryption
16:cd:f4:49:f2:28:5c:35:87:84:a1:86:89:5b:ce:9a:c6:1d:
d9:c8:63:ba:91:d1:e1:77:a8:8e:cf:f9:ed:00:d1:1b:53:94:
a8:e2:4e:be:a3:a9:a1:ac:d5:94:f4:1d:d5:60:f1:7a:c3:72:
bb:f6:af:dd:6f:54:04:9c:22:36:7b:30:68:1d:e2:0b:51:e8:
fb:48:c4:16:54:dc:5c:8a:ce:44:f0:c3:52:4a:1b:ad:c7:c6:
33:d1:69:28:e6:26:fd:8c:cc:a3:2f:a4:ac:bc:ba:89:4a:ea:
93:3d:26:3a:31:10:6d:6e:2b:e5:ac:a5:fd:28:32:2b:07:be:
0f:ec:49:f8:18:aa:db:4c:44:7c:d6:6c:b8:3f:d3:42:fc:b2:
63:80:b4:f7:8e:cd:2e:94:cb:cd:68:1d:91:17:98:43:e5:0b:
84:30:05:48:88:23:af:6d:be:d3:95:27:66:00:93:90:41:aa:
ba:7e:25:5e:6d:fc:f2:de:21:c0:69:d6:67:55:c3:3a:96:74:
6e:ba:ad:cc:80:85:6a:b7:ea:af:88:52:18:29:68:56:3f:0d:
50:6c:66:31:91:66:55:54:8d:af:6d:59:cd:40:d0:b1:0e:b8:
d9:24:96:02:ef:a3:70:69:fa:c0:54:5f:28:84:c7:b9:2e:d0:
24:10:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:57 2026 by rpki-client