Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33382e302f32342d3234203d3e203330363434.roa
File: 34352e3134302e33382e302f32342d3234203d3e203330363434.roa (raw, json)
Hash identifier: pgys4dKx+35Hg2BzEkcta2TxxholJ1T4995uIhT8Aeg=
Subject key identifier: 73:A3:BC:CB:87:C0:B3:D8:D5:44:70:0B:C9:53:1C:61:83:A8:55:5A
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 0909C02958F111E0570042101A926B017A043F45
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33382e302f32342d3234203d3e203330363434.roa
Signing time: Wed 30 Jul 2025 13:54:13 +0000
ROA not before: Wed 30 Jul 2025 13:49:13 +0000
ROA not after: Wed 29 Jul 2026 13:54:13 +0000
asID: 30644
IP address blocks: 45.140.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:09:c0:29:58:f1:11:e0:57:00:42:10:1a:92:6b:01:7a:04:3f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 30 13:49:13 2025 GMT
Not After : Jul 29 13:54:13 2026 GMT
Subject: CN=73A3BCCB87C0B3D8D544700BC9531C6183A8555A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:4b:e9:b7:96:ad:bd:73:28:3a:11:a0:b3:
bc:f3:b1:f8:d3:b7:34:62:95:84:b6:8e:c1:5b:2b:
08:63:77:28:3e:0c:18:ad:07:b2:c0:6b:40:17:f9:
02:37:8f:1d:90:8a:ed:93:0b:e8:c5:1e:37:bf:89:
d9:4b:2e:a3:56:1b:e8:d5:9d:f8:51:4c:d2:51:1f:
45:68:85:28:4e:8d:6a:3b:ba:d9:99:8c:f2:64:c7:
e0:86:61:08:12:dc:6b:2e:5c:ab:1e:03:33:ac:2a:
42:f2:e6:93:c7:47:af:d0:c2:55:86:6a:d2:00:5f:
bf:c6:04:d0:d1:ac:d8:07:6b:84:c8:75:e1:a3:90:
45:be:ea:0e:3a:a6:16:de:0b:9c:f2:56:d3:df:f0:
69:c3:05:1f:22:c7:35:62:a7:e3:68:b9:09:7b:fb:
69:2a:8e:33:26:01:b9:29:0b:d6:99:4d:e4:90:55:
68:a7:17:50:62:0c:f9:bf:64:31:d3:6c:16:01:05:
7d:09:45:de:f0:6b:ec:26:8f:1e:63:70:d6:45:28:
3e:ba:df:85:64:7b:9f:37:42:07:ee:52:f5:e8:20:
6c:a6:29:bb:a2:1f:f3:41:65:14:00:2d:40:1a:a1:
4e:f2:1d:27:9f:59:60:82:04:bb:a2:56:52:60:0d:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:BC:CB:87:C0:B3:D8:D5:44:70:0B:C9:53:1C:61:83:A8:55:5A
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33382e302f32342d3234203d3e203330363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:75:a4:de:80:a5:5f:d9:4a:89:05:a6:d5:b3:d4:cf:72:4e:
9e:63:4b:fa:ae:16:da:5a:53:7e:22:fb:50:1f:8a:bf:01:57:
8b:83:db:78:b6:2f:04:c8:72:c4:e6:44:39:8b:83:e8:b5:ca:
68:dd:6c:61:7f:1e:01:3c:d0:aa:0a:78:d6:64:ff:0b:db:31:
58:9b:eb:1b:c2:12:bc:49:96:f4:b5:4d:6e:0a:bb:bf:ba:07:
b2:00:95:10:ba:2e:f1:d7:ac:a2:a9:e8:9c:f5:4e:86:eb:7b:
02:c7:9a:13:0f:0a:5f:96:32:5c:fc:b8:57:06:39:a4:5a:e4:
e5:5b:c0:b3:56:86:b0:af:8b:fe:5c:c6:14:89:d3:81:7f:b9:
fa:33:7e:3b:b2:f6:b5:f9:f7:be:c8:c3:9c:48:6d:fb:3c:87:
9f:bc:68:27:b0:71:25:cc:86:6f:15:9d:df:85:0f:46:b9:9d:
63:b5:f8:50:32:74:48:be:e6:32:6f:f0:08:ec:f0:cc:01:d5:
d9:93:8f:59:f0:ce:61:a2:cd:d9:0a:fd:11:95:d5:0c:f2:18:
80:ff:61:94:fb:7c:61:26:98:2a:81:b8:1a:97:61:59:f8:74:
c3:c8:9d:15:09:53:37:92:09:9b:29:e8:75:42:b0:9d:e6:8c:
6e:be:1b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:56:30 2025 by rpki-client