Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e2039333034.roa
File: 34352e3134392e36302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: z9ItEX8PaLlf+9uchVJAZNUpHljuvgQ+N1QS8/y6ykI=
Subject key identifier: 85:E8:95:B6:38:BA:7D:17:0A:CB:25:86:5B:66:8C:DE:84:BD:82:8A
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 703E99E6C78AD098C4948E11478246E4F72D11D0
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e2039333034.roa
Signing time: Tue 08 Sep 2026 06:25:20 +0000
ROA not before: Tue 08 Sep 2026 06:20:20 +0000
ROA not after: Tue 07 Sep 2027 06:25:20 +0000
asID: 9304
IP address blocks: 45.149.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:3e:99:e6:c7:8a:d0:98:c4:94:8e:11:47:82:46:e4:f7:2d:11:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Sep 8 06:20:20 2026 GMT
Not After : Sep 7 06:25:20 2027 GMT
Subject: CN=85E895B638BA7D170ACB25865B668CDE84BD828A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:d3:06:ac:05:b6:18:6f:7e:49:38:4d:26:
67:8b:c7:1a:e8:38:b9:ae:2a:cd:a0:a6:3b:1b:5c:
df:25:40:f8:77:d2:14:9a:d0:e5:6a:7d:c7:a2:5f:
3e:b8:52:df:74:ad:55:d4:40:51:93:ef:81:36:30:
b4:96:e8:48:2e:68:6e:f2:6f:5a:a6:25:a2:84:8e:
95:b4:7e:36:f9:6e:54:46:9e:d5:b8:cf:05:91:32:
64:89:07:7a:52:f2:6e:57:7a:d9:62:a0:ce:b3:13:
7e:93:32:c3:bd:5f:1a:00:79:d5:d7:38:1b:e6:e1:
0d:ab:e2:8d:d6:fd:f7:43:72:a3:cd:57:d5:e5:0f:
ba:26:4f:9c:d2:32:f6:08:85:24:29:2f:d2:05:80:
e2:82:fd:11:80:55:e1:9e:b9:b3:71:8e:11:4f:50:
44:bd:ec:11:48:45:97:3d:d5:67:da:ee:54:ba:81:
87:b5:52:4d:60:82:d3:7f:1f:0f:94:ce:bd:4e:d7:
b8:e7:52:b9:50:89:12:ca:52:bb:18:59:d1:22:3c:
56:19:61:35:ed:d3:8e:83:8f:17:c2:36:f5:dd:73:
15:13:b3:88:d7:2b:7c:1b:02:d9:6b:56:70:34:f3:
07:a9:89:9c:c1:8c:54:82:bb:e0:ed:75:c8:ed:19:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:95:B6:38:BA:7D:17:0A:CB:25:86:5B:66:8C:DE:84:BD:82:8A
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:6e:4c:1d:b5:44:b1:25:8a:99:f4:4d:cf:b9:72:71:46:40:
87:a4:f1:2a:e3:9a:03:fe:1b:ae:dd:95:a3:4a:81:2a:a9:c5:
d1:cb:c6:15:29:e0:9a:c6:c7:6c:fc:8d:db:57:db:cb:4e:ba:
06:ca:fb:44:8b:dc:3d:b4:79:f4:51:97:4a:9f:39:0a:39:ab:
56:dd:78:6d:5f:cf:7e:56:cb:90:01:53:82:da:4c:a6:af:67:
11:30:91:63:c0:25:fe:d1:1c:99:58:53:8a:32:29:73:1d:62:
4a:9f:6b:55:78:5d:5b:95:58:b3:f8:94:9c:a7:47:f8:77:28:
df:49:16:fa:46:35:6e:b0:6b:4f:57:72:13:9e:0c:4a:30:c1:
c2:72:4c:da:44:e1:4b:ab:c3:d7:aa:80:65:f8:c7:4a:48:45:
41:4c:82:dd:3c:56:9a:b3:ed:df:53:b2:33:76:be:1b:bc:5d:
05:22:f0:bd:8c:a2:ab:79:24:33:e6:09:6c:52:74:98:fb:ce:
19:98:30:e7:91:c8:90:8d:78:6a:49:b6:c9:82:4c:6a:32:81:
06:81:72:9a:66:06:94:cf:4e:a9:45:86:0d:83:25:01:1b:50:
7c:8e:7b:a3:38:66:9b:73:6e:42:26:30:45:68:84:87:9e:15:
44:c5:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:36 2026 by rpki-client