Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e20383334.roa
File: 34352e3134302e33362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: euvRsEca9sGK2+nLjrDgUCotROV4jRFSS1j9znZDPSo=
Subject key identifier: BC:7E:D5:7E:B2:CD:8E:8E:67:53:FD:30:13:C6:20:34:3D:F4:9C:7D
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 1222BCF99A55884162DC564E0629F64D61CA54E9
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e20383334.roa
Signing time: Sun 20 Sep 2026 06:39:49 +0000
ROA not before: Sun 20 Sep 2026 06:34:49 +0000
ROA not after: Sun 19 Sep 2027 06:39:49 +0000
asID: 834
IP address blocks: 45.140.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 07:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:22:bc:f9:9a:55:88:41:62:dc:56:4e:06:29:f6:4d:61:ca:54:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 20 06:34:49 2026 GMT
Not After : Sep 19 06:39:49 2027 GMT
Subject: CN=BC7ED57EB2CD8E8E6753FD3013C620343DF49C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:a7:ed:fe:47:e0:63:0e:32:4e:73:d9:04:
68:f7:8f:e3:05:4c:e0:7b:86:42:c2:51:94:16:71:
da:8b:2a:94:3f:41:aa:67:82:99:df:77:a1:af:77:
2c:b3:24:eb:6b:e3:31:6a:48:32:ca:25:bd:52:ee:
c9:90:9d:77:dc:9c:3f:7c:7a:51:1e:cb:69:8e:9e:
c0:bf:5b:8c:da:c1:73:24:a8:87:0d:0d:bb:52:60:
c2:91:a2:2e:74:d4:e7:7e:77:49:9d:b3:2f:62:30:
4c:90:d3:96:d5:08:61:53:32:17:ae:8c:83:ee:17:
b0:d0:f6:cc:82:7e:36:61:3b:77:4d:ec:e7:a2:fe:
71:2d:a3:54:ea:9e:ff:64:29:51:8b:e9:f5:df:1d:
23:b0:76:4d:3f:be:99:a6:b4:c9:97:5d:f6:5f:e0:
4a:28:3a:c1:41:07:4b:2d:c5:55:35:85:2c:ba:62:
da:3f:4f:6d:02:de:87:df:82:0d:16:8a:a0:10:e3:
25:36:09:0f:68:b4:81:e5:6f:46:82:4f:e9:24:8e:
29:cc:00:56:92:18:01:f2:9e:5c:96:1b:15:66:e5:
4b:c3:63:89:86:23:51:d5:eb:66:48:80:4d:91:d7:
a2:db:62:df:17:f1:9c:a6:b8:51:e6:fe:0e:45:1b:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7E:D5:7E:B2:CD:8E:8E:67:53:FD:30:13:C6:20:34:3D:F4:9C:7D
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/24
Signature Algorithm: sha256WithRSAEncryption
09:87:71:83:35:11:d1:c9:76:12:fe:21:74:9f:17:c0:14:91:
40:62:3c:1a:48:3f:32:5a:b5:71:3a:6d:25:04:57:e2:19:37:
03:e2:3a:93:00:4f:7c:cf:b3:1c:20:0a:74:49:f3:3f:32:51:
39:37:c5:65:59:1f:6e:5d:37:40:4a:e9:f9:7a:fe:6c:ce:4d:
53:1d:fd:da:e1:ba:a3:fb:a2:e2:87:cf:82:94:b4:2b:38:83:
3d:0e:2a:16:99:79:b7:3e:02:be:ea:19:98:6b:29:08:4b:a9:
72:71:c1:ad:bb:89:38:7e:9b:e5:1b:35:5c:63:ee:4a:6d:bb:
8e:47:c3:b1:dd:2d:2c:9a:f9:0f:af:65:da:66:36:eb:24:1b:
87:0a:41:ea:e0:44:ec:53:7b:17:e7:57:59:66:b9:4d:6d:65:
a0:10:d1:41:02:1e:f0:14:83:60:b4:c5:99:6e:72:a4:c6:98:
49:c5:7f:37:ba:10:21:3a:32:59:fa:eb:c9:1a:bd:e8:85:71:
dc:ae:03:4a:c3:34:a3:d5:42:98:d8:8b:8d:36:13:4e:ea:96:
d6:4e:3f:82:26:21:48:a2:53:d0:a5:a7:c3:4d:88:e9:1f:71:
94:b4:20:af:15:1a:c4:94:0a:72:e6:87:ca:36:75:8a:c8:de:
2e:bf:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:33:45 2026 by rpki-client