Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e36372e3231382e302f32342d3234203d3e203633343733.roa
File: 34352e36372e3231382e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: 0fRdUdqSxX3oMkG+qbz6UGsRldtO5SvNm0ZUrp4lNdM=
Subject key identifier: 46:1F:AC:26:52:85:09:E1:CD:78:50:1A:72:DC:22:D5:EC:50:BA:D9
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 602A48CF694585872880E6FCB12E08CC94B18BCB
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e36372e3231382e302f32342d3234203d3e203633343733.roa
Signing time: Mon 07 Sep 2026 11:28:35 +0000
ROA not before: Mon 07 Sep 2026 11:23:35 +0000
ROA not after: Mon 06 Sep 2027 11:28:35 +0000
asID: 63473
IP address blocks: 45.67.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:2a:48:cf:69:45:85:87:28:80:e6:fc:b1:2e:08:cc:94:b1:8b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 7 11:23:35 2026 GMT
Not After : Sep 6 11:28:35 2027 GMT
Subject: CN=461FAC26528509E1CD78501A72DC22D5EC50BAD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:d1:66:a6:fc:c7:88:d1:9b:ce:60:5f:43:
51:66:e1:ef:c9:ff:32:82:8d:a2:c1:30:3d:2d:e8:
88:19:34:9b:0c:1d:ec:8b:6e:15:d0:1d:d4:91:7d:
12:7d:fe:62:12:ad:c7:b8:ba:08:d0:7e:31:bc:b9:
f1:f8:d8:b2:01:55:92:e9:b3:66:a9:ac:06:a1:11:
5b:07:ec:4e:ba:50:09:1f:30:41:4a:7d:cd:83:88:
3b:b3:d8:c5:ea:fa:a0:dc:73:67:b4:84:e5:d7:d9:
6f:c4:d1:c1:3b:dd:44:e6:8b:d1:68:2b:57:95:d8:
56:2c:f3:c7:3e:e4:01:b5:86:f1:8d:96:24:ed:4d:
64:dc:25:be:66:1a:cd:55:2f:2a:7c:27:51:5b:a0:
58:de:6a:02:52:27:49:06:64:a2:55:f9:2b:73:fb:
0f:c4:6d:84:32:9e:60:29:6a:18:01:37:f8:d7:5a:
17:46:72:5a:01:e4:c7:0c:30:60:3e:74:47:89:47:
8a:70:13:43:4c:0c:5b:4c:db:8d:76:b3:2b:7e:9b:
12:ad:05:2f:b5:36:fc:51:92:a7:20:13:82:0f:74:
e4:52:03:62:ed:e6:ba:51:97:cd:ae:d8:54:7f:95:
8a:bc:2e:81:26:41:0f:a7:49:7f:b7:fe:2b:e5:82:
af:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1F:AC:26:52:85:09:E1:CD:78:50:1A:72:DC:22:D5:EC:50:BA:D9
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e36372e3231382e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.218.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:77:3c:f0:d8:b2:7b:3f:f5:5f:00:82:b5:dd:7c:0c:a9:cd:
05:12:8a:b0:1b:bf:ab:26:62:99:a4:f1:47:73:84:e5:47:05:
01:61:95:f6:1e:3f:9c:f9:98:18:f1:cd:37:b7:3e:3d:36:20:
82:d9:83:6b:3c:1a:70:3c:7f:ef:54:d6:c6:7e:32:00:d9:c8:
6f:90:73:11:20:63:4e:12:0d:e3:2e:af:8f:f2:b9:f6:c2:f0:
3f:01:6a:bd:18:5b:6f:e9:a8:b4:9d:b5:1c:bf:27:eb:38:31:
fd:b8:06:d4:b4:1f:02:27:41:42:2f:b8:10:c8:5c:3d:7f:1c:
39:a1:44:64:85:72:3b:ed:11:bb:c0:0c:68:c6:32:8e:27:69:
c8:af:6f:27:60:68:3e:f1:95:de:b5:e0:06:03:e1:0e:ca:a4:
5d:07:52:9a:41:84:24:e7:3d:63:ce:de:4c:8d:69:a5:aa:83:
68:d9:88:43:80:d5:32:bc:6e:88:09:bd:17:46:53:66:73:1c:
8a:0f:61:69:ab:90:79:32:20:ed:3a:de:fa:34:d1:39:12:69:
bd:ee:fd:36:81:79:4b:1e:1e:3e:f4:d9:ac:fb:f6:72:58:6c:
c0:fd:38:27:95:08:63:80:ab:ef:fc:4c:39:c8:f3:13:a4:1f:
f1:ce:84:d5
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUYCpIz2lFhYcogOb8sS4IzJSxi8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjA5MDcxMTIzMzVaFw0yNzA5MDYxMTI4MzVaMDMxMTAvBgNV
BAMTKDQ2MUZBQzI2NTI4NTA5RTFDRDc4NTAxQTcyREMyMkQ1RUM1MEJBRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWwdFmpvzHiNGbzmBfQ1Fm4e/J
/zKCjaLBMD0t6IgZNJsMHeyLbhXQHdSRfRJ9/mISrce4ugjQfjG8ufH42LIBVZLp
s2aprAahEVsH7E66UAkfMEFKfc2DiDuz2MXq+qDcc2e0hOXX2W/E0cE73UTmi9Fo
K1eV2FYs88c+5AG1hvGNliTtTWTcJb5mGs1VLyp8J1FboFjeagJSJ0kGZKJV+Stz
+w/EbYQynmApahgBN/jXWhdGcloB5McMMGA+dEeJR4pwE0NMDFtM2412syt+mxKt
BS+1NvxRkqcgE4IPdORSA2Lt5rpRl82u2FR/lYq8LoEmQQ+nSX+3/ivlgq+PAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQURh+sJlKFCeHNeFAactwi1exQutkwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzQzNTJlMzYzNzJlMzIzMTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM0MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1D
2jANBgkqhkiG9w0BAQsFAAOCAQEAa3c88Niyez/1XwCCtd18DKnNBRKKsBu/qyZi
maTxR3OE5UcFAWGV9h4/nPmYGPHNN7c+PTYggtmDazwacDx/71TWxn4yANnIb5Bz
ESBjThIN4y6vj/K59sLwPwFqvRhbb+motJ21HL8n6zgx/bgG1LQfAidBQi+4EMhc
PX8cOaFEZIVyO+0Ru8AMaMYyjidpyK9vJ2BoPvGV3rXgBgPhDsqkXQdSmkGEJOc9
Y87eTI1ppaqDaNmIQ4DVMrxuiAm9F0ZTZnMcig9haauQeTIg7Tre+jTRORJpve79
NoF5Sx4ePvTZrPv2clhswP04J5UIY4Cr7/xMOcjzE6Qf8c6E1Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:21:19 2026 by rpki-client