Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/34352e3135362e35322e302f32322d3234203d3e2039303039.roa
File: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (raw, json)
Hash identifier: 224B9F8oiHE/vw3qHd8MU41T+mxrr6Po3u/q7l+kB48=
Subject key identifier: 7C:4C:D6:14:54:35:5E:A3:5B:8A:C6:93:11:72:45:C5:8A:50:85:01
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 16CBA99ABF9264F0EB0F1A59FDFB71B26F37E698
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/34352e3135362e35322e302f32322d3234203d3e2039303039.roa
Signing time: Sun 13 Sep 2026 01:49:35 +0000
ROA not before: Sun 13 Sep 2026 01:44:35 +0000
ROA not after: Sun 12 Sep 2027 01:49:35 +0000
asID: 9009
IP address blocks: 45.156.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:cb:a9:9a:bf:92:64:f0:eb:0f:1a:59:fd:fb:71:b2:6f:37:e6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Sep 13 01:44:35 2026 GMT
Not After : Sep 12 01:49:35 2027 GMT
Subject: CN=7C4CD61454355EA35B8AC693117245C58A508501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:81:b2:c7:f9:75:05:71:69:cb:a5:9b:b8:
1c:1c:09:7c:65:56:46:ca:b0:cf:f9:71:59:ce:77:
47:df:be:d9:be:45:3f:02:87:4e:99:41:c2:65:08:
80:23:41:68:41:6a:48:75:6c:ef:12:4b:ac:20:53:
b0:bb:e6:ff:90:f4:4f:15:1e:a5:de:85:c2:42:f4:
4c:f1:54:58:8e:a1:ef:02:2d:65:ec:ba:f8:58:a3:
45:aa:4e:e9:87:99:f6:69:02:55:3e:1d:13:64:51:
a5:de:27:b9:52:6f:31:a8:c0:5d:dd:82:a2:6c:b0:
96:4b:65:4b:eb:d0:2c:a0:f0:7e:39:a5:b6:ec:46:
6b:ac:3d:fa:37:a4:23:d0:0d:b8:52:51:5f:2e:36:
e9:6c:e3:48:30:e5:3e:b4:85:81:f1:5e:11:52:5e:
17:6e:77:a9:ff:96:61:7b:cd:23:14:76:9d:be:03:
72:27:bd:3d:5a:00:2d:f3:de:4c:5e:41:13:12:cd:
59:08:d1:fd:ef:76:d1:1c:b8:b6:f8:d3:77:bc:9f:
a9:73:b9:cd:93:df:a9:83:c8:c6:1e:b5:6f:e7:0d:
a5:33:44:0b:0c:42:72:3a:81:2e:c2:37:b6:77:6e:
a2:4e:00:a1:e4:36:fc:88:c4:b8:9b:6b:29:73:be:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4C:D6:14:54:35:5E:A3:5B:8A:C6:93:11:72:45:C5:8A:50:85:01
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/34352e3135362e35322e302f32322d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.52.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:db:82:92:ae:e9:f6:53:47:55:82:c6:8b:0f:39:41:f9:9a:
f6:fc:55:72:2a:ef:43:1f:93:c6:2e:00:55:8a:89:a9:d4:54:
a7:04:22:b4:38:76:95:9e:e8:33:f6:28:24:b8:e4:67:f9:d6:
c8:f5:c9:2f:a1:26:07:e5:8e:39:ca:73:0a:d4:af:de:e2:08:
36:35:ed:9a:0f:4d:e7:30:37:8b:d6:e4:18:33:e2:ad:2c:74:
50:74:30:13:7a:1f:3e:96:c0:77:7a:d5:ba:f9:d4:3a:d4:2f:
fe:0b:31:ce:eb:29:2f:d6:53:57:67:61:97:32:7b:d1:59:b0:
ff:4d:67:c7:be:e3:29:17:9b:50:bd:04:2f:3a:40:44:50:ed:
f1:da:a5:f4:3d:ad:3e:3f:94:1f:83:87:5e:d9:f2:53:03:1e:
07:12:08:f5:90:54:b5:43:02:f6:31:2f:7e:bd:50:33:2b:9e:
67:47:3e:c1:ce:e5:17:23:5b:f2:cc:64:40:7c:b5:24:ec:f8:
b5:b4:8e:c9:96:79:5f:88:4c:68:62:63:fa:27:0f:48:2c:e5:
4d:69:77:f5:10:fc:b7:84:b4:35:d5:86:44:4a:0e:42:9b:e8:
a3:98:24:8d:24:da:f7:90:28:17:bc:59:11:4a:3f:28:39:6b:
b7:a1:1f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:52:53 2026 by rpki-client