Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/34352e3135362e35322e302f32342d3234203d3e2039303039.roa
File: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: NGe/TYEuKgS0CTEKSY3oR58VBhNHgF8nb5Jf49N07yQ=
Subject key identifier: 1D:2A:9F:48:04:7F:EE:C4:62:0A:16:5D:8F:BD:76:A4:63:4D:C8:52
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 697DD76359D48933164EC6E992A5565A777F2942
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/34352e3135362e35322e302f32342d3234203d3e2039303039.roa
Signing time: Sun 13 Sep 2026 01:49:35 +0000
ROA not before: Sun 13 Sep 2026 01:44:35 +0000
ROA not after: Sun 12 Sep 2027 01:49:35 +0000
asID: 9009
IP address blocks: 45.156.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7d:d7:63:59:d4:89:33:16:4e:c6:e9:92:a5:56:5a:77:7f:29:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Sep 13 01:44:35 2026 GMT
Not After : Sep 12 01:49:35 2027 GMT
Subject: CN=1D2A9F48047FEEC4620A165D8FBD76A4634DC852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:b0:cf:1f:86:0e:99:96:4f:8a:2b:da:40:
58:f6:de:fc:73:07:50:25:46:18:dd:63:04:02:2d:
ff:23:e9:98:43:b6:9b:7e:b6:89:b6:5a:56:c3:18:
16:45:fb:a5:14:da:4a:2a:c6:a2:fd:6a:14:00:7e:
90:7f:44:2c:91:03:49:54:fc:80:e9:bd:be:87:12:
b9:8d:cc:6c:00:12:f0:a3:40:45:93:f7:44:ae:7c:
31:27:e1:22:b3:3d:c7:a5:6c:1d:2a:c0:09:11:6d:
22:6f:7d:5f:f6:05:67:1f:96:25:88:bc:0a:30:6b:
2a:71:78:af:ad:d3:bc:b2:93:71:65:a4:33:2d:a7:
42:09:f4:a0:89:03:c7:e0:ce:9c:4e:54:10:62:f4:
6f:fa:42:46:83:a1:8a:7f:af:51:2a:8f:43:e8:90:
bf:19:4e:b3:2f:90:21:93:bb:5d:2e:81:bd:3e:b7:
51:9b:d1:6a:31:5b:8d:41:ed:f0:ff:77:0c:78:12:
6c:c1:41:4c:e0:43:9f:87:ee:74:91:ba:84:07:f0:
93:26:eb:f8:9d:9c:df:6e:73:12:77:71:8e:6a:c8:
5d:84:7c:5d:7f:42:d9:55:7c:71:46:46:e9:9a:03:
7d:85:49:98:58:57:0f:6e:d4:80:06:af:31:61:41:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2A:9F:48:04:7F:EE:C4:62:0A:16:5D:8F:BD:76:A4:63:4D:C8:52
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/34352e3135362e35322e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.52.0/24
Signature Algorithm: sha256WithRSAEncryption
48:fb:7d:61:5f:bd:e5:72:0b:7a:2a:0c:64:c8:29:ce:76:94:
9b:f8:6b:1d:dd:b2:e1:92:29:d9:69:91:4d:36:2a:b5:7a:7f:
d6:89:3d:91:ae:0f:8f:de:45:94:2c:4c:57:60:bb:17:d6:f3:
a4:cf:9a:4f:b4:5a:45:15:53:86:97:7c:ca:d2:b9:e1:c0:23:
96:e1:d7:4a:c1:0f:27:13:06:d6:c0:f8:3a:70:95:cc:1b:9b:
b7:0f:29:30:68:51:84:58:a0:fd:3e:a3:5b:9c:07:53:04:d9:
19:8c:77:c4:8c:b1:1b:a9:76:dc:c7:9f:07:65:23:1b:55:0f:
8d:d3:09:34:64:31:8e:05:ed:46:b8:44:54:11:c1:48:0e:00:
01:9c:88:68:7f:24:88:23:cc:11:b7:21:33:1b:9e:e3:cb:1f:
f2:f1:aa:c8:c4:44:e7:2c:69:8d:8b:da:8c:99:70:fb:90:6a:
ab:dc:0d:ee:e3:a1:e3:1f:d0:ca:0e:3c:13:9b:d9:db:ba:d9:
e3:86:8f:fa:5c:d7:d1:27:97:d2:a0:34:f8:64:a4:49:dc:e6:
6b:65:f3:8b:b0:be:f5:e8:43:5a:88:f0:05:78:79:68:bd:67:
d0:dc:8c:2e:35:25:b6:a4:56:c4:33:d3:7f:fc:d3:df:4b:e9:
ab:c0:9c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:48:11 2026 by rpki-client