Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234322e302f32342d3234203d3e203239383032.roa
File: 34352e3134352e3234322e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: v8WZ7RYy4JJX3c+2bplIJcsM84fR+H/I4nQ04Jg2R9g=
Subject key identifier: F1:AC:36:CF:06:70:21:09:AA:2B:ED:1B:AC:7B:D4:04:DC:DE:6A:83
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 580F479914D6A0A706BE6E8E1E26D77F83A1B67C
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234322e302f32342d3234203d3e203239383032.roa
Signing time: Tue 10 Feb 2026 00:15:37 +0000
ROA not before: Tue 10 Feb 2026 00:10:37 +0000
ROA not after: Tue 09 Feb 2027 00:15:37 +0000
asID: 29802
IP address blocks: 45.145.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 01:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:0f:47:99:14:d6:a0:a7:06:be:6e:8e:1e:26:d7:7f:83:a1:b6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Feb 10 00:10:37 2026 GMT
Not After : Feb 9 00:15:37 2027 GMT
Subject: CN=F1AC36CF06702109AA2BED1BAC7BD404DCDE6A83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:0e:9a:be:13:7c:c8:8d:38:3c:e2:d0:61:
79:3a:9a:da:52:4c:dd:ed:06:52:01:35:38:c3:f7:
e8:72:63:09:7a:d2:8c:79:73:d1:04:4b:c7:68:d5:
37:ee:08:ee:cc:63:07:2d:e2:63:fd:d8:cf:e1:26:
bc:3d:60:67:92:d1:f4:fb:a9:54:01:0e:d8:dc:ae:
92:18:5f:d8:8a:fd:27:91:0e:72:b8:9b:54:6b:8b:
13:e7:ba:40:52:c3:13:b0:0f:34:84:87:a1:57:fd:
66:ea:40:50:bc:92:94:4a:ce:4e:bb:10:97:89:d9:
73:b4:41:76:1c:4b:bb:f0:fc:5a:27:fa:a5:b1:1b:
20:9c:81:b1:da:d3:d1:2c:e6:46:77:62:83:31:42:
cc:f7:37:31:a0:0d:b1:4f:36:ad:17:52:cd:45:15:
41:1b:ef:a7:3e:8d:e9:85:4e:a9:c3:f7:7a:64:6d:
5a:42:4d:dd:72:0a:32:3b:50:04:87:36:7d:87:9a:
93:61:e1:b1:ea:e8:51:89:1e:88:5e:8f:2f:a9:85:
b3:8f:6b:39:e9:12:3d:a6:d0:3e:68:42:ea:14:e0:
3c:fa:ee:78:79:90:a8:2b:91:32:d1:ce:c8:f3:d4:
5a:ad:64:39:68:55:18:e9:02:7a:5a:29:95:e7:36:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:36:CF:06:70:21:09:AA:2B:ED:1B:AC:7B:D4:04:DC:DE:6A:83
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234322e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.242.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7d:86:2e:6b:9d:0d:88:57:29:e8:67:b7:5e:3b:ea:1a:64:
98:ee:52:9a:38:f4:b6:50:c9:3f:85:84:1f:07:47:a6:8c:8a:
ea:4f:63:48:46:24:aa:fa:8b:f2:0b:62:92:27:d1:7d:96:2e:
7c:e0:00:bd:2e:1b:5d:a6:e3:3e:e8:9d:3c:3a:68:c3:7c:1f:
5f:b6:95:a6:ed:7b:03:eb:a5:e7:5f:34:e2:11:93:2c:fc:e3:
f5:81:7c:32:1f:d2:e3:7c:8d:a9:a0:5a:33:8d:db:b8:90:dc:
73:a7:3a:fb:27:f3:f7:f6:9c:42:c2:16:54:e5:3f:78:66:74:
72:fe:f2:90:f8:e9:ea:31:12:00:97:3a:69:f4:e3:a9:42:df:
b1:ec:1b:ab:6e:4f:38:a2:27:75:cd:8e:65:9a:d0:ed:a8:9a:
6d:83:6f:34:ae:72:27:45:a0:18:d0:87:c3:f6:6b:ff:70:0c:
34:06:43:84:58:d1:ae:f1:c6:dd:82:e6:3a:56:c0:87:c8:1d:
12:c9:dc:55:e0:31:a5:ee:42:76:0f:b8:18:ca:12:42:68:a0:
50:31:d2:76:53:73:8d:86:fc:62:cd:70:bb:d0:a7:f2:60:ad:
da:1d:6a:b5:11:99:e2:44:05:10:a9:bd:f9:80:15:34:78:57:
e5:06:e9:30
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWA9HmRTWoKcGvm6OHibXf4OhtnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNjAyMTAwMDEwMzdaFw0yNzAyMDkwMDE1MzdaMDMxMTAvBgNV
BAMTKEYxQUMzNkNGMDY3MDIxMDlBQTJCRUQxQkFDN0JENDA0RENERTZBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Dw6avhN8yI04POLQYXk6mtpS
TN3tBlIBNTjD9+hyYwl60ox5c9EES8do1TfuCO7MYwct4mP92M/hJrw9YGeS0fT7
qVQBDtjcrpIYX9iK/SeRDnK4m1RrixPnukBSwxOwDzSEh6FX/WbqQFC8kpRKzk67
EJeJ2XO0QXYcS7vw/Fon+qWxGyCcgbHa09Es5kZ3YoMxQsz3NzGgDbFPNq0XUs1F
FUEb76c+jemFTqnD93pkbVpCTd1yCjI7UASHNn2HmpNh4bHq6FGJHohejy+phbOP
aznpEj2m0D5oQuoU4Dz67nh5kKgrkTLRzsjz1FqtZDloVRjpAnpaKZXnNu9bAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU8aw2zwZwIQmqK+0brHvUBNzeaoMwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzNDM1MmUzMjM0
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LZHyMA0GCSqGSIb3DQEBCwUAA4IBAQARfYYua50NiFcp6Ge3XjvqGmSY7lKaOPS2
UMk/hYQfB0emjIrqT2NIRiSq+ovyC2KSJ9F9li584AC9LhtdpuM+6J08OmjDfB9f
tpWm7XsD66XnXzTiEZMs/OP1gXwyH9LjfI2poFozjdu4kNxzpzr7J/P39pxCwhZU
5T94ZnRy/vKQ+OnqMRIAlzpp9OOpQt+x7Burbk84oid1zY5lmtDtqJptg280rnIn
RaAY0IfD9mv/cAw0BkOEWNGu8cbdguY6VsCHyB0SydxV4DGl7kJ2D7gYyhJCaKBQ
MdJ2U3ONhvxizXC70KfyYK3aHWq1EZniRAUQqb35gBU0eFflBukw
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:32 2026 by rpki-client