Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20383334.roa
File: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: AcqwW6yTpxI3OmkBZD3ZuGJOrkDWhhktOLo+79kUNdA=
Subject key identifier: F0:F9:03:C1:22:AE:4C:22:A9:5D:20:EC:31:B4:6C:8C:16:21:54:CF
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 744B3D80ECEED87A9DFE95DD72A2A2B4A149D42C
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20383334.roa
Signing time: Fri 02 Oct 2026 13:27:45 +0000
ROA not before: Fri 02 Oct 2026 13:22:45 +0000
ROA not after: Fri 01 Oct 2027 13:27:45 +0000
asID: 834
IP address blocks: 46.183.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 05:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:4b:3d:80:ec:ee:d8:7a:9d:fe:95:dd:72:a2:a2:b4:a1:49:d4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Oct 2 13:22:45 2026 GMT
Not After : Oct 1 13:27:45 2027 GMT
Subject: CN=F0F903C122AE4C22A95D20EC31B46C8C162154CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:03:cd:24:7f:ce:ce:d0:db:73:3b:aa:be:ae:
2e:e6:8e:1b:2b:7a:88:a7:82:17:c3:78:67:4b:30:
bc:72:c0:1f:74:c3:94:a8:03:52:51:22:92:91:93:
b9:13:fe:70:dc:9d:d6:88:66:e2:66:0b:5a:6d:b0:
e0:91:2f:c1:e3:5f:16:bd:f0:97:c4:f7:fd:96:69:
43:01:30:b8:51:90:85:f1:b4:44:02:e3:ce:a0:a4:
6e:d0:43:e7:42:4b:69:cf:a4:b7:c5:73:48:3b:6a:
2f:59:2c:65:3f:5a:57:e1:fa:9d:1f:7e:e0:b8:a8:
cb:b6:5b:50:d3:b5:30:c4:4b:07:e2:00:b6:ce:c3:
0c:60:df:3f:92:71:d1:87:cc:04:64:b5:d3:26:66:
16:02:c9:9e:4f:a4:19:aa:40:0e:2f:92:bb:dd:d3:
95:cf:80:af:4c:14:fe:a8:82:24:d1:33:a4:2e:54:
90:58:f6:14:07:59:c5:d2:4d:86:f9:a0:ac:b8:73:
59:88:f8:ed:6c:26:57:80:39:f6:de:cc:18:fb:4b:
15:1f:22:4d:6c:18:86:95:3c:d6:74:52:2a:17:2d:
5c:bd:21:15:63:5a:de:4b:17:c3:94:e9:d6:f9:5c:
1a:1c:e8:8a:d1:21:18:4f:92:d0:31:9f:d1:69:39:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F9:03:C1:22:AE:4C:22:A9:5D:20:EC:31:B4:6C:8C:16:21:54:CF
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.29.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:23:eb:8f:8c:ce:21:6b:82:45:f4:67:da:e1:0a:e6:0d:0b:
48:62:66:c7:30:06:81:23:b0:e7:60:b3:66:c4:d6:85:e5:ff:
90:a8:83:bb:1d:6c:94:11:4e:66:c4:51:29:65:27:e5:e0:ed:
70:21:52:a2:20:1e:ba:a5:2a:e4:e5:23:56:2b:97:0a:d1:ad:
cd:7b:bb:ea:2f:52:59:70:2f:6e:7c:dc:1e:a1:ea:5b:f5:8e:
46:ce:e1:32:5a:ed:12:80:a1:63:ee:a5:26:77:00:b8:5c:15:
00:08:93:ae:a6:9f:9e:a8:76:6d:2c:59:4b:ab:0b:b8:60:24:
d3:28:0d:5f:76:d0:75:f6:a4:6a:f3:69:ef:12:bb:85:66:b4:
89:0f:d0:da:ad:41:5a:b1:f3:8b:02:5e:a9:33:4a:c1:01:33:
30:d0:6c:9c:ab:74:dd:42:9a:34:9e:f3:45:6d:e3:f5:86:ab:
7c:e0:f1:15:b0:96:2c:3e:b8:46:fa:f3:25:a9:14:2c:2a:7e:
6b:35:a8:7e:e7:9c:26:43:e7:91:92:49:69:3f:8f:65:0e:90:
1b:0f:29:b2:9e:c6:24:f9:32:6e:c8:87:bf:e8:48:93:e3:b8:
12:20:b9:d4:8f:5e:a6:b8:79:e3:a8:1a:0b:2f:d1:f2:c1:b0:
82:ac:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:39:44 2026 by rpki-client