Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231342e302f32342d3234203d3e20383334.roa
File: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=
Subject key identifier: EC:E8:79:8D:8D:44:2C:20:75:9B:DF:8F:90:FF:8F:2F:A4:AA:D6:DE
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 48BA80E09A9E7FF02A9E32D3A5FD363BE5A0080F
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231342e302f32342d3234203d3e20383334.roa
Signing time: Wed 10 Jun 2026 07:06:43 +0000
ROA not before: Wed 10 Jun 2026 07:01:43 +0000
ROA not after: Wed 09 Jun 2027 07:06:43 +0000
asID: 834
IP address blocks: 45.95.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ba:80:e0:9a:9e:7f:f0:2a:9e:32:d3:a5:fd:36:3b:e5:a0:08:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jun 10 07:01:43 2026 GMT
Not After : Jun 9 07:06:43 2027 GMT
Subject: CN=ECE8798D8D442C20759BDF8F90FF8F2FA4AAD6DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:f8:f0:8a:ce:7b:89:73:a8:88:47:e4:f1:
ae:4a:12:05:e0:84:8f:c5:92:4a:45:4e:c1:e7:ec:
93:8e:81:9c:b2:c9:95:3b:3b:b1:f2:95:4b:47:d5:
52:bf:b9:7b:c8:20:67:5c:7f:0b:3d:72:94:ae:3b:
fb:84:54:9a:7e:ff:ed:82:66:03:70:d5:c4:a4:29:
08:62:0a:0b:c2:70:62:f2:e2:b5:b6:79:a4:00:4a:
d7:55:dc:e3:a3:f2:8d:cb:46:11:45:23:7c:7b:fd:
98:f4:c9:19:dc:5a:f7:ff:05:4c:d8:1d:2f:bc:a4:
bf:6e:74:05:55:a3:e1:5d:66:b6:55:11:49:98:f6:
10:a2:81:b1:bf:ad:85:b5:0b:b2:eb:f4:bb:51:34:
ff:f1:25:57:8e:62:f3:b0:59:8f:21:3a:96:3d:f8:
33:d3:73:18:4b:5f:5e:55:00:80:ac:21:a5:53:0f:
f9:c8:9b:48:80:7c:02:c3:ab:38:4f:9b:13:de:5b:
8b:98:ca:d7:ec:3d:b5:1b:84:ec:e6:0b:ec:6d:0d:
08:86:c1:4f:51:7e:0a:ee:a5:74:1b:34:8a:22:83:
82:74:d4:b2:f5:61:9d:62:ee:fe:b0:b4:ce:67:6f:
b3:fa:21:3c:d8:c9:08:ef:70:29:fd:24:62:2d:5d:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:79:8D:8D:44:2C:20:75:9B:DF:8F:90:FF:8F:2F:A4:AA:D6:DE
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.214.0/24
Signature Algorithm: sha256WithRSAEncryption
41:87:0e:cf:4d:5c:8b:f1:21:2b:e6:41:da:40:50:f3:31:5a:
af:d2:9b:c0:83:90:d6:03:5a:a2:4c:f5:19:7c:dc:32:10:5c:
81:f7:7b:76:1b:1b:83:ff:93:f7:ab:e7:79:0c:f2:c5:d7:0b:
14:96:13:82:ff:ad:9a:22:bc:34:ef:8a:1c:c8:2f:15:26:09:
32:4f:cb:2b:94:e2:0a:b0:9a:3c:bb:f2:e2:cb:49:b1:2b:2d:
f8:97:2a:df:b0:1c:fa:5c:a3:f7:72:95:dc:c9:19:a6:a9:b3:
c1:63:4c:29:43:c0:f9:4e:f1:3c:8a:ec:34:90:4f:4d:07:56:
4f:ba:d0:e3:35:90:96:52:97:51:77:ad:f0:13:b8:99:4d:a0:
81:17:0a:bf:6f:6e:fd:ab:73:ad:7d:2b:f8:ae:a0:d8:5c:85:
bb:d7:71:60:da:2e:84:e9:6f:48:57:08:fd:aa:87:35:69:e6:
6b:5c:db:ab:a6:8e:fa:3e:63:f9:c3:ba:7a:48:36:62:06:9d:
0b:d9:27:e0:f6:f7:ac:a6:30:d1:cd:9b:5b:9d:c6:3f:34:45:
82:ad:5c:72:42:5b:29:68:5b:ad:80:e5:a4:c5:af:17:b9:c9:
de:bb:53:28:07:18:95:b4:49:0e:17:5c:bd:cb:cf:cd:05:0a:
e7:a6:0c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:19 2026 by rpki-client