Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3234203d3e203133333335.roa
File: 34352e3132382e31342e302f32332d3234203d3e203133333335.roa (raw, json)
Hash identifier: Kl1FMB/Itc6QAARMXjrFYcnaEl8+WCl6eKpyc+Mm9yg=
Subject key identifier: 7B:84:1B:9B:0D:E9:90:E1:97:AD:B0:5B:EB:16:9B:17:38:32:35:0C
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 32CF35D48F9AAA3F1C5FAB78948A71BD0EDE5346
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3234203d3e203133333335.roa
Signing time: Sun 12 Apr 2026 15:37:24 +0000
ROA not before: Sun 12 Apr 2026 15:32:24 +0000
ROA not after: Sun 11 Apr 2027 15:37:24 +0000
asID: 13335
IP address blocks: 45.128.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 14:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cf:35:d4:8f:9a:aa:3f:1c:5f:ab:78:94:8a:71:bd:0e:de:53:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Apr 12 15:32:24 2026 GMT
Not After : Apr 11 15:37:24 2027 GMT
Subject: CN=7B841B9B0DE990E197ADB05BEB169B173832350C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:26:53:96:f7:d7:44:36:db:a6:f5:89:a0:
40:3d:93:02:ad:23:7d:22:c7:11:09:c0:d8:53:32:
a1:bd:2c:4d:ae:07:48:02:a3:67:49:0a:26:a3:55:
8e:c9:c7:fa:fc:83:fa:1e:71:f2:06:fb:95:82:a6:
4b:e9:85:c7:df:8e:f9:70:aa:fe:4c:46:02:66:77:
bc:c0:90:cf:ad:0f:cb:13:3f:ef:ba:a2:53:0d:e8:
3f:4d:d8:e1:e9:87:d2:95:c1:00:86:cb:77:68:53:
f9:47:0c:ed:14:0e:3e:2a:d1:e3:07:27:a7:31:90:
5d:60:9d:78:70:93:da:5d:5a:57:57:15:4c:0d:8a:
99:f1:13:ff:5c:fd:e5:c9:c5:cd:d4:28:ef:23:f8:
b3:ab:bf:67:a3:9b:fe:70:fe:55:1c:50:2e:62:ef:
e2:08:b0:67:17:8c:b0:37:c2:5d:ea:97:75:63:c6:
0f:43:9d:6e:23:2e:ec:00:74:0c:37:55:27:08:ab:
fc:12:b5:9d:37:37:95:f7:b9:7d:12:ca:6e:ce:73:
e2:d8:56:a7:cf:82:bf:e3:9f:6c:50:61:d9:9a:52:
a1:bf:b3:85:6c:53:32:1b:12:a1:67:9d:93:cd:24:
9a:41:ad:39:20:5f:8c:30:26:45:61:1c:0f:fc:cd:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:84:1B:9B:0D:E9:90:E1:97:AD:B0:5B:EB:16:9B:17:38:32:35:0C
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.14.0/23
Signature Algorithm: sha256WithRSAEncryption
76:2d:84:ae:89:e5:a0:a0:20:91:7e:d4:fb:ab:30:b5:6c:b0:
dc:88:a8:6b:20:0d:f2:70:8b:05:e9:7a:2a:89:41:a8:f8:5c:
40:34:77:53:7a:eb:40:ca:02:6f:46:2a:b9:39:4f:99:2a:60:
2a:da:fe:cc:2d:85:9e:22:00:0f:32:1e:90:fe:df:55:54:99:
41:ac:36:f8:d3:dc:c6:6b:70:b5:70:fe:0b:ed:c8:d7:70:ac:
49:70:0b:90:24:f4:cb:df:88:c7:c1:f4:dc:cf:04:00:6f:f5:
5e:14:bc:7d:14:c0:82:59:53:ea:23:81:da:17:85:72:3b:bd:
7f:ea:5a:ca:de:33:6a:94:ad:75:ad:0e:42:44:3e:9c:40:a2:
01:03:9c:ce:9a:03:3c:00:db:e9:c5:c8:a4:12:e6:d5:88:b4:
f6:92:80:c3:e5:db:3a:be:ab:21:8b:4b:f2:7f:ff:b8:cf:23:
fd:1d:a5:fe:38:c4:d4:61:07:9c:69:c1:0b:0a:fa:d1:7a:4c:
2f:56:1e:d9:5f:aa:e7:5f:f5:69:a4:40:f4:8b:a4:05:bf:2f:
8c:a6:ea:ed:b1:a5:3e:d2:15:eb:a4:75:24:01:51:39:d4:8c:
6b:02:bd:5c:58:ea:1a:a2:c8:d3:49:53:b3:05:8f:2b:d4:c8:
07:32:52:1d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUMs811I+aqj8cX6t4lIpxvQ7eU0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNjA0MTIxNTMyMjRaFw0yNzA0MTExNTM3MjRaMDMxMTAvBgNV
BAMTKDdCODQxQjlCMERFOTkwRTE5N0FEQjA1QkVCMTY5QjE3MzgzMjM1MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdGyZTlvfXRDbbpvWJoEA9kwKt
I30ixxEJwNhTMqG9LE2uB0gCo2dJCiajVY7Jx/r8g/oecfIG+5WCpkvphcffjvlw
qv5MRgJmd7zAkM+tD8sTP++6olMN6D9N2OHph9KVwQCGy3doU/lHDO0UDj4q0eMH
J6cxkF1gnXhwk9pdWldXFUwNipnxE/9c/eXJxc3UKO8j+LOrv2ejm/5w/lUcUC5i
7+IIsGcXjLA3wl3ql3Vjxg9DnW4jLuwAdAw3VScIq/wStZ03N5X3uX0Sym7Oc+LY
VqfPgr/jn2xQYdmaUqG/s4VsUzIbEqFnnZPNJJpBrTkgX4wwJkVhHA/8zToNAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUe4Qbmw3pkOGXrbBb6xabFzgyNQwwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzMjM4MmUzMTM0
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzMzMzMzMzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2A
DjANBgkqhkiG9w0BAQsFAAOCAQEAdi2EronloKAgkX7U+6swtWyw3IioayAN8nCL
Bel6KolBqPhcQDR3U3rrQMoCb0YquTlPmSpgKtr+zC2FniIADzIekP7fVVSZQaw2
+NPcxmtwtXD+C+3I13CsSXALkCT0y9+Ix8H03M8EAG/1XhS8fRTAgllT6iOB2heF
cju9f+payt4zapStda0OQkQ+nECiAQOczpoDPADb6cXIpBLm1Yi09pKAw+XbOr6r
IYtL8n//uM8j/R2l/jjE1GEHnGnBCwr60XpML1Ye2V+q51/1aaRA9IukBb8vjKbq
7bGlPtIV66R1JAFROdSMawK9XFjqGqLI00lTswWPK9TIBzJSHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:18 2026 by rpki-client