Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39322e302f32322d3232203d3e2039343537.roa
File: 34362e31382e39322e302f32322d3232203d3e2039343537.roa (raw, json)
Hash identifier: VVrzaeHx3AmdfT9Rn92e13lFTMXROuF+W73HnTkEymk=
Subject key identifier: 6A:26:6A:7E:5C:90:44:6A:C3:C6:97:05:ED:FE:0A:2C:17:87:C8:C5
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 0348284223427CBF11E2F7C9DD5EB169C8FF7E2A
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39322e302f32322d3232203d3e2039343537.roa
Signing time: Fri 17 Apr 2026 10:51:31 +0000
ROA not before: Fri 17 Apr 2026 10:46:31 +0000
ROA not after: Fri 16 Apr 2027 10:51:31 +0000
asID: 9457
IP address blocks: 46.18.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:48:28:42:23:42:7c:bf:11:e2:f7:c9:dd:5e:b1:69:c8:ff:7e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Apr 17 10:46:31 2026 GMT
Not After : Apr 16 10:51:31 2027 GMT
Subject: CN=6A266A7E5C90446AC3C69705EDFE0A2C1787C8C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:e6:e9:98:f2:4b:09:e7:f0:c9:4d:73:30:
3d:bd:2c:b9:f0:dd:1f:e5:e5:00:fa:ca:b7:fe:90:
7b:82:29:21:44:14:1e:3f:c4:75:1b:01:1d:e7:85:
46:39:77:20:12:4c:94:0d:4f:6e:f2:4c:de:f4:31:
2d:4d:ec:0e:fe:87:d7:80:18:fd:97:9c:24:a0:1e:
16:04:19:a3:69:5b:cb:0a:bd:e7:1e:39:11:2d:d8:
21:27:e4:4b:50:69:18:e8:39:f0:03:3f:40:6f:64:
85:1a:2e:df:43:d2:96:d9:58:cb:7e:7b:3c:78:4f:
e4:e7:14:ad:56:4e:1e:35:15:d8:43:48:ef:de:d3:
3a:1d:27:a9:f9:62:6a:ca:f9:39:4d:f2:6a:95:46:
73:1a:2a:ef:6a:91:cf:17:cc:2d:26:69:86:31:3b:
e6:46:3a:f3:c3:6b:42:f0:59:ff:d8:a6:ac:4c:67:
95:ed:58:7f:42:7c:8d:0f:c2:bb:04:90:7e:bd:64:
da:c3:53:f4:22:3a:9b:54:d9:47:a8:95:92:5f:42:
fb:fa:ed:d0:18:0d:b3:3f:a4:3a:34:be:84:8f:08:
19:b0:8f:93:5d:5a:2b:df:83:a4:8f:9e:1c:0c:32:
23:84:a3:0d:7e:62:16:6a:4b:24:6b:9a:a3:b9:8e:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:26:6A:7E:5C:90:44:6A:C3:C6:97:05:ED:FE:0A:2C:17:87:C8:C5
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39322e302f32322d3232203d3e2039343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:d1:87:a8:e8:29:59:75:83:3e:0e:3a:69:b4:94:4d:15:ed:
e0:10:bc:62:56:40:5e:4a:46:d9:2c:9a:d1:bb:6a:8b:27:6c:
e2:46:47:e4:5d:f9:2d:9e:e8:a6:0d:76:87:8f:f9:37:24:0e:
9e:84:93:6c:b9:96:30:e8:dd:fa:9e:8f:25:bf:b3:0a:8e:56:
08:30:57:fe:3c:0f:a3:38:50:37:76:cf:6e:de:cc:95:78:a5:
bb:f7:40:54:3b:75:9c:16:23:fd:94:50:fc:4a:e7:99:df:f9:
ba:5e:4a:1d:cb:4c:c3:08:ec:9b:8d:ac:d3:c9:70:5c:96:ba:
1f:e4:29:64:ee:a8:73:35:66:57:5d:d2:64:97:2a:2b:51:e7:
60:3e:52:5a:29:fc:a4:ff:90:cf:8f:a0:dc:60:6e:05:34:eb:
98:be:48:6c:38:b8:b2:a7:8e:0d:35:ba:9a:56:d8:e3:62:9c:
1f:56:15:65:db:1a:e3:83:0e:f7:37:76:ab:82:3c:b0:19:fc:
68:26:c2:20:89:5b:67:4a:c4:5d:91:d3:3a:ff:02:8d:48:47:
d1:9b:b2:c3:f2:a7:f0:ca:41:00:c3:23:69:ed:ff:a1:25:cb:
81:a3:a6:5b:cb:91:7d:0a:e3:ba:4f:04:45:10:2a:2b:ae:bd:
45:f4:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:48:13 2026 by rpki-client