Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231372e302f32342d3234203d3e20383334.roa
File: 34352e3133322e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mRG+S+yDVu6vkwaj72RWAMiHFM0ykcWKkjSmKrkvzhM=
Subject key identifier: 2E:6C:62:AE:39:F9:22:69:AD:48:F6:B7:1B:01:72:88:86:68:D4:98
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 0DE5F3012DAD7246A08F0D497F285885E070C466
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231372e302f32342d3234203d3e20383334.roa
Signing time: Sat 19 Sep 2026 12:34:05 +0000
ROA not before: Sat 19 Sep 2026 12:29:05 +0000
ROA not after: Sat 18 Sep 2027 12:34:05 +0000
asID: 834
IP address blocks: 45.132.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e5:f3:01:2d:ad:72:46:a0:8f:0d:49:7f:28:58:85:e0:70:c4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 19 12:29:05 2026 GMT
Not After : Sep 18 12:34:05 2027 GMT
Subject: CN=2E6C62AE39F92269AD48F6B71B0172888668D498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:24:82:ab:8b:2a:6f:53:8a:e0:93:c4:99:
1a:da:27:0e:0a:dc:02:42:d6:20:c7:65:d1:9f:28:
87:a6:d9:b1:c1:64:09:71:d6:4c:b4:e3:fb:6c:82:
c3:0f:b5:bd:b5:b2:d5:05:5f:f0:6c:4c:40:8d:2d:
9b:b2:4d:04:af:6f:e0:bf:a2:ce:46:e1:af:38:1d:
7f:fd:e6:24:c2:12:cc:75:07:76:91:00:3b:de:4b:
9e:8b:0b:66:63:60:7c:c6:eb:3b:f5:da:60:62:ba:
a0:8a:df:f6:30:30:b6:47:a3:24:aa:af:86:95:a0:
98:c5:3b:79:61:7b:de:ac:43:52:b8:b9:2b:c8:c4:
85:12:24:30:f9:57:ad:6f:c8:10:03:de:c3:9d:f2:
70:fd:43:49:aa:f5:e3:3c:a7:53:2f:c1:81:38:04:
5a:f8:57:88:c3:5c:b3:43:d0:36:94:6a:0f:9e:04:
33:f2:33:a4:5f:09:fb:2c:14:f5:69:85:a2:4d:bc:
56:71:fa:20:20:b1:9f:71:d9:90:ec:32:41:30:ab:
69:4a:f9:2b:cf:17:fa:0c:cf:34:46:81:29:1c:25:
23:21:8f:c1:4b:c8:d2:b6:97:b4:a2:44:cf:b1:49:
72:e4:37:05:90:ff:56:6a:fc:b4:3a:d7:8e:bb:5c:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6C:62:AE:39:F9:22:69:AD:48:F6:B7:1B:01:72:88:86:68:D4:98
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.217.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:74:b8:6f:22:48:cf:ba:08:b2:d1:07:e5:49:03:2a:bc:af:
e9:45:63:97:e9:37:d2:28:11:7a:57:12:37:59:db:05:f6:bd:
8f:f8:d5:26:31:94:b8:73:e9:ec:5b:05:25:1d:38:31:27:59:
fb:1a:59:f4:fe:2a:1d:92:f5:78:56:6c:32:ab:f4:fc:fc:d0:
0a:8c:a7:eb:b7:61:1a:62:37:42:c7:b2:fd:e7:a3:4a:a5:22:
fb:34:bb:d8:43:bb:23:4c:ff:dd:34:d2:9f:be:c9:da:e4:a1:
1f:98:9f:a7:e3:91:ab:1e:44:0b:f1:e0:21:db:f9:a8:45:f8:
3c:4e:19:f2:d7:8c:06:ce:59:c3:b6:cd:7f:78:20:e4:16:e4:
80:f4:dc:93:90:b5:ca:2b:c5:3e:82:f6:b1:ea:7f:7b:04:6b:
b0:1a:9c:3b:99:44:c9:86:02:88:e4:44:c0:86:72:1e:bf:38:
8a:2d:ca:18:1e:34:7e:0d:ca:62:5c:fa:e8:d8:ba:98:f0:34:
3f:9d:ab:af:1f:1a:76:0e:1f:21:bc:50:74:cf:e0:14:df:00:
06:43:b4:20:81:b8:1d:92:47:71:d4:28:40:2f:d2:e6:a5:8f:
f5:dc:7d:e4:49:07:c6:ab:a6:3f:0f:d7:4b:00:d6:22:ba:c0:
1b:36:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:37 2026 by rpki-client