Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32342d3234203d3e20323135333438.roa
File: 34352e39332e3138342e302f32342d3234203d3e20323135333438.roa (raw, json)
Hash identifier: E8zHs8seIqlHSXUhqDAcoK6a6CGz+XqKjhlWvcTQKqw=
Subject key identifier: B3:C3:CA:84:91:48:85:9C:00:4C:A1:41:7D:56:2B:D9:8C:B8:FE:2D
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 4A22401DDD2E45B6FEAE5E96B2A069D5D02AFF58
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32342d3234203d3e20323135333438.roa
Signing time: Mon 21 Sep 2026 07:49:35 +0000
ROA not before: Mon 21 Sep 2026 07:44:35 +0000
ROA not after: Mon 20 Sep 2027 07:49:35 +0000
asID: 215348
IP address blocks: 45.93.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:22:40:1d:dd:2e:45:b6:fe:ae:5e:96:b2:a0:69:d5:d0:2a:ff:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 21 07:44:35 2026 GMT
Not After : Sep 20 07:49:35 2027 GMT
Subject: CN=B3C3CA849148859C004CA1417D562BD98CB8FE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:5c:d3:71:dd:16:e1:9e:56:ae:2e:ff:db:
53:46:df:dd:34:e2:f7:43:3c:b4:d0:44:f8:2c:ae:
e8:cf:9d:f7:c3:33:f2:fa:d8:fa:77:eb:4d:99:f1:
9a:d6:a1:2e:bd:78:7f:cf:d5:55:94:cc:df:4f:95:
00:50:79:45:ae:da:af:13:1b:3c:62:e7:38:ff:0b:
c7:8a:97:aa:e7:23:73:eb:bb:59:90:59:0c:71:4d:
4a:21:55:99:d3:f6:97:8e:01:25:0f:db:ff:ed:86:
f7:b8:09:8f:ed:92:c4:13:9c:ea:05:84:92:04:ec:
8b:a9:c1:40:40:73:6c:c1:d5:24:51:11:40:bc:40:
95:c7:33:9a:09:2f:03:98:02:ad:fe:7f:9a:5c:f7:
ea:b2:94:f6:98:c6:87:5b:65:6e:b2:94:8b:46:b1:
15:81:7e:ba:80:4d:67:b9:a6:30:ca:ba:a4:b8:3a:
4e:bd:cb:2b:02:ec:a8:fa:ce:ab:0b:98:59:14:25:
c9:12:42:19:78:34:50:b7:d7:cb:7d:5a:33:24:99:
1d:1e:b6:7f:96:4b:45:4b:8d:58:5b:0c:27:14:ad:
db:29:0c:b6:5c:1f:2b:48:e6:c0:9c:a8:c9:18:df:
d0:29:35:ae:70:e6:83:04:4d:97:66:1a:f0:f9:cc:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C3:CA:84:91:48:85:9C:00:4C:A1:41:7D:56:2B:D9:8C:B8:FE:2D
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32342d3234203d3e20323135333438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/24
Signature Algorithm: sha256WithRSAEncryption
10:09:e1:d6:60:88:53:20:04:52:1d:4c:a1:74:05:89:be:fc:
c3:bf:f4:7d:a9:4a:71:d1:3c:36:e9:f6:1b:d2:40:f6:b1:01:
3d:51:54:de:d3:67:9e:06:06:50:5e:2c:30:b5:e1:09:43:8a:
41:73:1d:0a:67:84:e9:16:28:c6:4d:93:2d:c4:07:09:d1:1c:
cc:1e:ca:f5:a1:47:f3:eb:bf:5e:57:ed:1e:24:2f:6b:af:e6:
b4:8f:a2:f5:9c:2a:a2:02:97:e5:26:2c:26:86:dd:46:52:2b:
85:bb:b5:99:aa:dc:d7:59:7e:e5:27:18:c8:a7:4c:00:b5:e5:
ba:fa:3e:d5:9d:6f:1f:01:86:94:66:8e:2d:7d:28:0b:77:d1:
13:a6:d5:10:85:9f:2d:16:c0:3d:7a:3d:ec:a1:8d:c8:b8:20:
3d:6c:52:7c:df:9b:94:a3:40:0d:a4:a9:13:94:44:d6:5b:db:
b6:8d:7c:86:53:ac:da:a3:cc:ec:1b:34:8c:6e:b6:d3:53:20:
38:4f:b7:72:a5:de:f4:b5:9a:63:98:4b:0c:bd:1e:37:83:10:
09:23:ee:58:a4:83:19:5e:bb:d6:4a:78:bd:2a:c1:80:4d:18:
9b:95:b8:78:ed:c3:29:b9:aa:62:26:3d:16:71:c0:18:31:47:
4a:38:2f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:06:53 2026 by rpki-client