Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e31312e3139312e302f32342d3234203d3e203138393738.roa
File: 34352e31312e3139312e302f32342d3234203d3e203138393738.roa (raw, json)
Hash identifier: ov3U3B+4EVQaApa4IH24lPA432qekHp+5znZF4E5ug0=
Subject key identifier: 8C:C0:82:B8:8E:F3:44:D0:6D:6D:22:FB:F2:D2:6A:F8:B1:EB:07:F1
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 35133CBA4EAA993B452EDBA1804E196BF39EDA51
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e31312e3139312e302f32342d3234203d3e203138393738.roa
Signing time: Sat 06 Jun 2026 15:42:59 +0000
ROA not before: Sat 06 Jun 2026 15:37:59 +0000
ROA not after: Sat 05 Jun 2027 15:42:59 +0000
asID: 18978
IP address blocks: 45.11.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:13:3c:ba:4e:aa:99:3b:45:2e:db:a1:80:4e:19:6b:f3:9e:da:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Jun 6 15:37:59 2026 GMT
Not After : Jun 5 15:42:59 2027 GMT
Subject: CN=8CC082B88EF344D06D6D22FBF2D26AF8B1EB07F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:79:02:86:66:93:68:74:82:0f:ea:cf:92:
77:42:9a:33:4b:be:2d:3b:b6:30:08:26:2f:5f:49:
fc:70:e5:e9:27:0d:8b:54:e8:69:5c:72:16:f8:6a:
79:0d:33:9a:f7:6a:ef:3c:43:13:07:cf:83:34:10:
32:ab:9b:8c:fe:76:65:f2:08:6e:f9:89:d3:30:a2:
ef:19:4f:98:b8:c1:03:da:2d:ac:fe:73:85:75:e0:
bb:8f:6c:87:6a:3e:4d:db:b6:bd:ed:db:9f:f3:e5:
33:7e:6c:e5:f3:8f:bc:c8:ac:27:49:0b:bb:f1:b0:
30:40:2c:21:24:98:9f:25:d5:df:df:c9:75:cf:11:
38:f0:e5:9c:30:2a:6f:ed:39:20:5f:ae:f5:8a:32:
25:55:32:54:bb:a2:b4:d3:e0:d1:e2:ad:78:d2:7d:
09:9b:9f:88:c8:d1:e8:d5:5e:7d:d9:1a:a3:fc:2e:
f0:1c:9a:3b:77:05:23:27:0b:11:37:50:49:fd:0c:
72:ab:76:45:e0:cc:bf:07:f3:fb:ae:1f:b4:1e:6c:
55:c5:ea:6d:72:34:ec:fd:cf:e1:0d:ca:74:4b:37:
32:80:91:73:bd:df:20:15:fd:57:05:32:f2:09:ce:
b0:eb:66:b7:ad:f1:37:91:d1:77:30:15:c0:f0:96:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C0:82:B8:8E:F3:44:D0:6D:6D:22:FB:F2:D2:6A:F8:B1:EB:07:F1
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/34352e31312e3139312e302f32342d3234203d3e203138393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.191.0/24
Signature Algorithm: sha256WithRSAEncryption
48:63:9b:b7:40:c4:5d:d8:69:fc:50:72:fb:ea:d8:ac:88:71:
1e:da:b6:5a:43:e8:bb:c0:1e:a0:c9:ec:de:36:1a:4a:cc:28:
1e:15:1f:fc:cb:f5:7b:f7:e6:5a:af:d7:6c:dd:e3:f4:3d:24:
9f:b4:cd:e8:80:e2:f9:99:7a:d1:85:51:f6:f3:09:ba:41:93:
0f:b8:53:70:8d:56:f4:08:ce:dd:db:3e:d6:af:4b:7f:e1:3a:
f5:de:2e:eb:ad:16:56:88:df:39:df:6a:c2:a7:32:59:15:73:
c6:61:e7:66:56:63:cd:c2:57:52:4a:c4:c1:ec:98:3a:27:02:
55:b8:64:d8:14:02:e6:c8:f8:94:cc:c7:e6:05:91:c9:6b:94:
33:57:50:e2:92:3e:3b:41:81:06:50:8b:ea:48:59:0e:8a:be:
76:40:bb:49:ef:80:05:71:15:43:0c:90:ef:2c:35:31:00:88:
75:16:3e:16:8c:8e:3e:d7:f9:20:83:68:27:ab:4c:f0:c0:cb:
5d:30:fa:33:4d:f4:48:3e:18:30:49:a1:22:d6:fa:83:6b:14:
95:c3:f8:73:05:96:8d:60:da:89:85:36:f4:06:7f:3c:46:e6:
2a:bb:49:46:bd:7e:4e:e0:f3:50:8c:00:6f:82:a7:86:5a:ee:
5d:2a:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:08 2026 by rpki-client