Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e203239323038.roa
File: 34352e38392e3134382e302f32332d3234203d3e203239323038.roa (raw, json)
Hash identifier: 1Nfh1VLDTlm3mX16h4DdBDZdtN8HRIROVIY0BOsOd2o=
Subject key identifier: 38:EA:53:C1:96:B3:3C:16:FC:F3:8B:DB:B0:BE:91:C3:98:43:83:88
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 34D2E89B62E5964725E12FC772276BA73CA9B6E2
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e203239323038.roa
Signing time: Thu 02 Apr 2026 10:40:04 +0000
ROA not before: Thu 02 Apr 2026 10:35:04 +0000
ROA not after: Thu 01 Apr 2027 10:40:04 +0000
asID: 29208
IP address blocks: 45.89.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d2:e8:9b:62:e5:96:47:25:e1:2f:c7:72:27:6b:a7:3c:a9:b6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Apr 2 10:35:04 2026 GMT
Not After : Apr 1 10:40:04 2027 GMT
Subject: CN=38EA53C196B33C16FCF38BDBB0BE91C398438388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:cb:ac:1f:a1:2a:4d:44:15:24:9d:3c:4a:
58:57:45:4b:d8:91:ed:52:66:31:43:64:a6:74:bb:
9b:ff:1f:7d:4a:dd:f2:99:6c:1d:d6:8e:30:9c:eb:
9f:67:ba:8b:48:71:49:8e:e6:20:e4:5e:d6:07:21:
4e:43:f4:6c:e5:bb:11:35:39:ad:53:a2:74:7f:03:
c7:b9:56:b5:70:32:1e:40:40:79:5f:26:96:6a:d3:
b7:87:9d:04:0b:37:9d:ab:26:25:f1:0f:83:f7:9b:
30:84:39:b6:de:b7:52:76:e3:a1:e7:c4:8c:3c:23:
b1:c7:b0:2b:73:5f:60:f4:fa:63:b6:27:7a:0e:4b:
40:16:e5:4a:b5:82:07:8e:ba:18:06:bd:dc:ff:11:
2a:f2:6f:ed:e5:7d:37:39:da:0c:50:63:da:ad:4f:
8e:03:72:1c:4f:f6:d3:cd:3e:6d:c2:a2:bb:dd:42:
a8:0d:92:58:0f:e4:a8:4a:45:3d:b7:8b:9b:79:d9:
f7:fb:7a:6c:ee:51:a3:f9:6e:22:15:8b:72:1c:17:
c0:7c:fc:cc:04:db:0c:2f:9f:60:94:13:31:45:ff:
f8:24:3c:53:9d:24:43:dc:3c:cc:3a:11:48:62:1e:
37:3c:af:1e:61:96:54:49:66:c9:b4:e8:6f:22:36:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EA:53:C1:96:B3:3C:16:FC:F3:8B:DB:B0:BE:91:C3:98:43:83:88
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e203239323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.148.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:de:66:f5:91:5f:f7:66:13:37:a6:09:d3:01:a8:b5:10:e9:
7f:1b:ba:0b:b6:0c:46:d1:c7:a7:df:94:7a:fc:4b:52:50:ec:
26:b3:81:fe:e8:76:5f:2c:27:f0:ab:4a:1c:83:7c:6b:83:fe:
c6:c2:aa:da:4b:f1:c3:b6:95:39:64:b0:19:63:fe:5f:da:3d:
16:8f:b4:15:f7:5c:de:cf:6d:2f:25:74:4c:fc:95:03:cb:32:
4a:f3:c2:6a:4e:6d:2c:bd:c6:84:30:46:22:e7:f6:96:75:6e:
12:e2:7d:40:b9:01:19:b8:28:7b:d2:68:9f:39:11:cf:6e:4f:
70:34:42:8e:9f:10:17:7b:88:f1:cd:8a:c4:83:54:83:b0:d6:
54:19:90:34:1b:21:ac:30:5f:55:bf:62:29:72:78:31:2c:bb:
63:fe:9b:de:7f:ee:a5:4d:5a:08:e5:8d:5d:11:f6:4e:3e:2b:
2e:90:55:f3:d6:89:e8:bb:87:31:b3:0c:9b:97:aa:47:2a:63:
5a:a6:9b:c8:54:2e:46:98:a5:78:26:58:8d:56:e0:65:2e:40:
37:f9:92:8b:66:0e:95:c4:33:7a:a0:d2:de:9d:da:e4:8a:82:
c5:8f:3b:6c:7d:35:d6:29:6e:df:88:3b:0b:93:c2:00:60:e4:
8f:c7:61:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:13 2026 by rpki-client