Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e38392e302f32342d3234203d3e2039333034.roa
File: 34362e31382e38392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: VIMT18voSTQDZeidsG2Rd4I/zCkFguTVSA8YrylW9cw=
Subject key identifier: C8:82:50:A0:68:7B:AE:6A:33:EF:B0:71:04:E6:F5:28:07:77:80:C7
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 1C0E5A38341567049C1263F9680C5B938D55BC07
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e38392e302f32342d3234203d3e2039333034.roa
Signing time: Thu 10 Sep 2026 14:51:01 +0000
ROA not before: Thu 10 Sep 2026 14:46:01 +0000
ROA not after: Thu 09 Sep 2027 14:51:01 +0000
asID: 9304
IP address blocks: 46.18.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0e:5a:38:34:15:67:04:9c:12:63:f9:68:0c:5b:93:8d:55:bc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Sep 10 14:46:01 2026 GMT
Not After : Sep 9 14:51:01 2027 GMT
Subject: CN=C88250A0687BAE6A33EFB07104E6F528077780C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:15:e0:9b:75:6c:e9:ba:7d:e4:41:16:54:
eb:ef:78:96:f8:6c:0d:41:41:f8:3f:80:7d:70:37:
82:38:10:a3:44:eb:81:2a:e1:19:cb:1f:72:e2:b2:
41:58:19:0f:9e:1f:46:10:e0:87:a1:ec:e9:40:03:
9d:f6:f8:1a:81:d8:4a:f0:9c:51:6c:5d:c6:b2:1f:
9e:d3:1e:d2:1e:04:bd:86:59:4c:5d:b3:60:97:1e:
53:25:29:ec:e3:82:ec:c8:3f:af:a7:c4:13:30:03:
08:22:bc:c2:da:5f:d4:00:65:23:f8:77:7b:39:c7:
d1:56:3e:be:e3:a0:37:df:e5:2a:fa:47:33:76:1c:
e7:32:fb:b7:06:09:86:43:97:53:ea:d6:6e:3e:63:
24:36:07:a7:4c:c0:c2:bd:74:89:cb:97:01:75:fb:
d6:15:5a:c4:2b:71:e5:b8:9b:a9:b1:f4:9a:7a:60:
18:e5:73:5d:6d:9e:1d:51:39:0f:83:17:fa:62:84:
43:a7:c8:d9:16:f8:5d:7f:34:e7:da:8e:32:84:0b:
0f:01:51:f1:bd:5b:51:7d:8d:b8:11:78:2f:8e:fe:
5c:23:07:8b:79:1b:0e:54:9e:6a:37:52:4d:59:92:
04:72:88:f7:63:82:0b:75:d4:74:e5:1f:c0:ad:84:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:82:50:A0:68:7B:AE:6A:33:EF:B0:71:04:E6:F5:28:07:77:80:C7
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e38392e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.89.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f6:95:8c:a7:3c:61:25:39:d1:d4:3a:df:6b:ee:d0:db:7d:
ec:0c:3a:ef:35:29:e5:0a:c0:b9:cb:0f:28:58:09:61:1b:3f:
98:96:20:08:1c:08:e1:2a:6a:aa:6c:c2:84:1e:ac:0a:ab:13:
69:cf:73:8f:6c:cc:1d:66:d1:7b:ff:24:24:36:ce:45:ec:33:
3f:0f:54:1b:cd:a3:5a:02:47:c0:6d:e6:5b:43:9c:30:f2:ab:
6b:72:a5:50:da:22:6e:e5:82:2c:67:0c:a7:4f:34:7b:60:fc:
3b:e0:6c:3a:a6:e6:7a:bf:03:3b:07:eb:5e:22:65:48:9f:98:
09:67:19:2e:d9:e4:6b:e1:d7:dd:11:91:27:5e:ea:e7:bf:ca:
ad:9a:31:50:8e:23:11:b2:91:75:90:90:d1:e6:d6:6e:9c:13:
2e:7a:ba:ef:b8:ce:67:e8:88:91:b2:23:fa:9e:e2:2c:0b:c5:
c2:bc:ed:e3:5f:d2:25:82:36:1a:0e:94:22:cb:7b:a7:4e:21:
5b:55:e7:c3:fa:8f:cb:2c:f9:1a:b4:9a:92:6b:d7:69:ab:2f:
9f:09:54:87:0e:b6:60:fa:da:12:9f:37:16:66:50:76:07:5f:
ef:a9:ba:62:30:99:fb:26:58:68:12:36:38:ef:4e:83:02:0b:
89:99:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:10:53 2026 by rpki-client