Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39312e302f32342d3234203d3e203130373533.roa
File: 34362e31382e39312e302f32342d3234203d3e203130373533.roa (raw, json)
Hash identifier: UZYZ2FIM6pk/tjGBM548FlzMKMKf2fPDqM5zZinGv1k=
Subject key identifier: EE:BB:2A:28:9C:0B:A8:E4:F8:EA:88:74:8B:F2:B0:B9:36:4F:18:09
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 4838497DB09B629883CACC572FF0767CF6CC667B
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39312e302f32342d3234203d3e203130373533.roa
Signing time: Fri 11 Sep 2026 08:58:11 +0000
ROA not before: Fri 11 Sep 2026 08:53:11 +0000
ROA not after: Fri 10 Sep 2027 08:58:11 +0000
asID: 10753
IP address blocks: 46.18.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:38:49:7d:b0:9b:62:98:83:ca:cc:57:2f:f0:76:7c:f6:cc:66:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Sep 11 08:53:11 2026 GMT
Not After : Sep 10 08:58:11 2027 GMT
Subject: CN=EEBB2A289C0BA8E4F8EA88748BF2B0B9364F1809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:de:8f:a3:03:7b:3d:9c:d1:c8:84:a6:2d:
81:0e:1b:0b:7f:74:ab:d8:58:6f:11:7c:f7:4a:92:
c9:c7:7a:05:e1:9b:94:41:ff:4e:d7:bf:58:b7:d4:
8c:50:6f:05:32:6f:ad:c9:6c:7c:5d:5f:6b:cc:63:
b3:9d:7e:ec:2b:31:6a:9d:d8:db:da:c5:df:db:1c:
65:ef:69:2f:8f:00:99:0a:77:0a:6d:c1:fa:52:d6:
db:a1:99:39:55:b5:52:aa:35:1e:bb:4d:b5:9d:b9:
7f:bb:63:0b:2e:55:58:ab:fc:2b:92:c8:0d:dd:b2:
2a:35:3b:e9:9e:bc:a3:29:2f:98:de:c1:ad:89:1b:
8a:fb:c6:f1:89:cb:17:60:d6:c9:8e:bd:a7:99:76:
a2:fb:de:d9:e1:be:2c:0f:83:12:74:55:55:2e:c1:
5b:53:15:24:7a:9c:5a:fa:df:66:84:7f:ec:70:28:
df:31:dc:4f:80:32:0a:b7:ca:45:a8:d4:b7:2e:a5:
a6:d2:0f:b4:4d:bf:28:f5:77:99:63:89:fb:46:c0:
d5:d6:d6:bd:c8:10:85:f4:86:df:44:d5:46:87:c7:
d1:d3:e9:77:21:d2:ca:1c:ae:52:fb:8d:c6:49:39:
e3:41:25:b0:2b:32:72:e8:6a:a4:48:00:32:85:97:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BB:2A:28:9C:0B:A8:E4:F8:EA:88:74:8B:F2:B0:B9:36:4F:18:09
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39312e302f32342d3234203d3e203130373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.91.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c6:29:d5:6c:c9:b2:26:75:84:47:c9:4b:f7:88:4c:82:66:
48:3c:a6:8e:26:f0:51:3a:d6:92:36:08:86:bb:75:24:14:e0:
c9:56:88:61:e7:e0:34:2b:00:90:f1:8d:a6:90:53:32:d2:e3:
3f:16:4a:8d:2f:ab:5c:5b:f6:31:f6:3f:38:df:cf:46:c7:b0:
31:18:ef:48:b7:15:0b:65:46:63:80:5a:9e:1a:9b:56:34:16:
ee:53:7c:e3:b5:d6:26:ff:8d:28:37:f3:d9:88:91:c4:6f:19:
b0:26:07:24:20:4d:03:68:a6:f9:78:05:cd:ce:44:1f:a6:22:
7f:a4:d7:e0:e0:6d:e7:4f:dd:16:63:00:97:aa:18:83:0a:b1:
49:14:02:4b:5c:34:da:dc:5c:b1:c8:1f:50:d6:0a:4c:6e:63:
3b:75:74:54:a1:85:4c:27:77:ca:a8:66:88:0b:cb:69:95:66:
54:8e:df:0a:54:6e:ba:8d:cd:1c:c2:94:05:88:ed:65:be:eb:
50:76:97:29:58:5e:14:b2:cb:ee:14:df:13:3a:61:ec:2a:2c:
2a:92:9f:68:c0:b1:1c:77:8a:04:8e:3b:46:9a:62:10:ca:e6:
30:d0:03:3f:69:ca:3e:69:bf:86:96:b3:52:c3:76:79:c5:36:
34:d8:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:45 2026 by rpki-client