Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231362e302f32342d3234203d3e203537303433.roa
File: 34352e3133322e3231362e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: iFIYFzZ0AAs/Hdcr//kf3Pr5WdqPSN20qur2zwUlT8A=
Subject key identifier: B0:4D:35:A1:95:9F:DB:27:EC:FC:C8:F9:ED:76:94:FB:24:C3:EF:4B
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 05B126312B3EDDF7D786D4435B4906CBBEB928E4
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231362e302f32342d3234203d3e203537303433.roa
Signing time: Wed 30 Jul 2025 14:41:47 +0000
ROA not before: Wed 30 Jul 2025 14:36:47 +0000
ROA not after: Wed 29 Jul 2026 14:41:47 +0000
asID: 57043
IP address blocks: 45.132.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b1:26:31:2b:3e:dd:f7:d7:86:d4:43:5b:49:06:cb:be:b9:28:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 30 14:36:47 2025 GMT
Not After : Jul 29 14:41:47 2026 GMT
Subject: CN=B04D35A1959FDB27ECFCC8F9ED7694FB24C3EF4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:19:d1:fa:96:cb:b7:ad:84:f7:5a:9e:d8:
27:74:dd:fe:dc:e5:ef:9a:da:8a:1b:5e:d1:2e:df:
b3:4c:95:e4:83:06:54:5b:eb:b0:98:6b:a6:74:ec:
39:56:b1:db:c4:66:c7:5e:dc:3c:85:f7:12:87:b9:
99:5b:92:b7:9d:b0:15:87:c6:97:5b:eb:3e:01:ad:
f8:92:69:96:5d:bd:25:5e:0f:57:5a:9d:05:de:77:
52:d7:75:f3:b1:3f:ca:0b:1f:0c:26:03:5d:bd:b5:
c0:09:59:57:41:2a:31:52:66:7e:6b:c8:08:b4:16:
b0:84:78:b3:2c:8d:6b:70:b0:28:fc:51:a6:68:c8:
5b:d2:66:d0:1a:6a:49:fa:f0:a5:b0:48:7b:1a:aa:
52:b1:4a:50:73:e5:9c:26:a6:46:c0:a3:8e:6e:6f:
cb:dc:fc:a7:09:c6:05:54:cf:a1:41:f5:0d:4f:86:
48:4b:c3:0e:c9:78:82:a6:d2:79:50:2b:93:99:6c:
10:42:2d:23:f0:69:12:50:d9:b9:39:31:dd:de:8b:
8b:7c:e9:56:24:c3:bf:23:08:ed:17:6d:f7:90:64:
29:76:c9:7f:a6:da:49:7b:dd:aa:56:4e:56:a9:35:
d4:8c:4c:08:e9:af:06:5d:6f:0b:a6:3d:7a:60:ad:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:35:A1:95:9F:DB:27:EC:FC:C8:F9:ED:76:94:FB:24:C3:EF:4B
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231362e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.216.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c3:8c:38:16:cc:29:f9:a2:4e:d8:17:5d:30:11:7c:58:e9:
f8:68:0f:00:ff:d2:4e:bc:b3:18:ca:c6:8d:e3:cf:77:64:b7:
5c:5a:a2:b6:fd:94:14:1d:97:e2:f2:15:95:36:28:43:a4:87:
c8:81:e4:25:45:5d:f4:1f:36:b2:9c:b8:2c:b5:af:1c:ee:1f:
db:f4:ce:c4:26:15:3b:ae:8e:b8:e9:25:57:d8:76:8c:e0:b4:
df:3d:0a:fd:f3:e6:00:09:f4:70:48:04:19:00:b6:10:4e:38:
c5:eb:3c:ec:f1:98:ad:df:99:78:62:c2:69:82:cd:8f:fa:c8:
5d:87:c2:03:35:01:2f:3e:a5:9d:30:27:fa:ed:38:3c:97:e9:
33:16:6c:f5:ce:34:9f:b3:7c:18:02:fb:19:f8:c6:4f:bd:6a:
34:48:3d:bb:f5:d9:17:fa:9d:9d:0d:3e:d7:d0:5c:32:93:a3:
98:c5:60:93:ee:7a:ec:0c:82:8f:1b:09:45:01:f6:8c:6c:ff:
5b:39:4a:8d:55:b0:1c:6d:66:e9:db:87:16:72:b0:14:6e:64:
7a:a0:65:66:98:b6:8f:96:97:75:54:68:76:dc:2d:f4:a9:fc:
26:2d:e6:ce:02:5f:3a:b1:04:6e:1d:c0:72:0b:d3:8e:a0:95:
5d:2c:a9:41
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBbEmMSs+3ffXhtRDW0kGy765KOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNTA3MzAxNDM2NDdaFw0yNjA3MjkxNDQxNDdaMDMxMTAvBgNV
BAMTKEIwNEQzNUExOTU5RkRCMjdFQ0ZDQzhGOUVENzY5NEZCMjRDM0VGNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEThnR+pbLt62E91qe2Cd03f7c
5e+a2oobXtEu37NMleSDBlRb67CYa6Z07DlWsdvEZsde3DyF9xKHuZlbkredsBWH
xpdb6z4BrfiSaZZdvSVeD1danQXed1LXdfOxP8oLHwwmA129tcAJWVdBKjFSZn5r
yAi0FrCEeLMsjWtwsCj8UaZoyFvSZtAaakn68KWwSHsaqlKxSlBz5ZwmpkbAo45u
b8vc/KcJxgVUz6FB9Q1PhkhLww7JeIKm0nlQK5OZbBBCLSPwaRJQ2bk5Md3ei4t8
6VYkw78jCO0XbfeQZCl2yX+m2kl73apWTlapNdSMTAjprwZdbwumPXpgrf59AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUsE01oZWf2yfs/Mj57XaU+yTD70swHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzMzMyMmUzMjMx
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM3MzAzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYTYMA0GCSqGSIb3DQEBCwUAA4IBAQAyw4w4Fswp+aJO2BddMBF8WOn4aA8A/9JO
vLMYysaN4893ZLdcWqK2/ZQUHZfi8hWVNihDpIfIgeQlRV30HzaynLgsta8c7h/b
9M7EJhU7ro646SVX2HaM4LTfPQr98+YACfRwSAQZALYQTjjF6zzs8Zit35l4YsJp
gs2P+shdh8IDNQEvPqWdMCf67Tg8l+kzFmz1zjSfs3wYAvsZ+MZPvWo0SD279dkX
+p2dDT7X0Fwyk6OYxWCT7nrsDIKPGwlFAfaMbP9bOUqNVbAcbWbp24cWcrAUbmR6
oGVmmLaPlpd1VGh23C30qfwmLebOAl86sQRuHcByC9OOoJVdLKlB
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:15:23 2025 by rpki-client