Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233322e302f32342d3234203d3e203231383539.roa
File: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: WpG9gX//WKHDX5DGlDbw7tPwHCU7DWx+UmniDEM55WE=
Subject key identifier: D6:A7:AE:39:1F:5B:17:16:90:1A:C8:97:76:60:F0:F2:E9:3B:74:32
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 06CA2641F9CC3B61585BFD5DE87DF82F770220D9
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233322e302f32342d3234203d3e203231383539.roa
Signing time: Tue 22 Sep 2026 11:49:35 +0000
ROA not before: Tue 22 Sep 2026 11:44:35 +0000
ROA not after: Tue 21 Sep 2027 11:49:35 +0000
asID: 21859
IP address blocks: 46.102.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ca:26:41:f9:cc:3b:61:58:5b:fd:5d:e8:7d:f8:2f:77:02:20:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Sep 22 11:44:35 2026 GMT
Not After : Sep 21 11:49:35 2027 GMT
Subject: CN=D6A7AE391F5B1716901AC8977660F0F2E93B7432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:3e:3f:3a:68:b0:b6:56:68:1e:af:83:fb:
18:c2:13:4b:29:ea:2f:9c:fb:95:5f:3b:f1:4c:5c:
d5:ad:f9:d9:f8:63:2d:8f:2b:83:97:9a:c8:bf:28:
f3:18:02:82:30:14:3b:01:d2:04:71:aa:73:77:08:
1b:12:c5:36:fe:d6:3b:9d:56:00:5d:99:94:60:c1:
ed:51:62:42:4c:4a:ce:5d:fb:40:ab:90:85:50:5e:
09:b0:ba:21:e3:6d:3d:80:64:54:43:7b:4d:ef:69:
6a:f1:f9:6b:b4:ab:02:dc:f6:6c:62:37:61:9d:2d:
3e:6d:39:b6:36:ab:73:15:60:48:cb:d2:77:29:3c:
e4:51:d8:49:82:30:c8:29:0f:73:5c:b3:b4:03:77:
51:c4:5c:0f:16:f1:74:fb:56:76:f8:3e:6b:b6:6c:
f5:b8:ce:b2:64:84:33:c7:8b:9b:2d:f5:e7:86:76:
48:7d:26:e7:30:b6:5d:19:16:1a:65:8e:51:f7:97:
34:85:61:c5:e8:93:c1:d2:ec:d2:99:b8:31:f7:5e:
bd:65:00:04:01:ef:83:67:2c:6b:00:f1:fb:ba:b2:
6e:60:6b:89:a8:38:42:da:c3:d8:ef:da:bc:50:a9:
3b:c6:d4:c7:32:5d:7b:fa:67:eb:23:83:16:9a:9b:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A7:AE:39:1F:5B:17:16:90:1A:C8:97:76:60:F0:F2:E9:3B:74:32
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233322e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.232.0/24
Signature Algorithm: sha256WithRSAEncryption
99:35:a1:9c:71:19:4c:de:21:74:15:58:c1:d1:ec:48:97:c2:
e1:06:3e:6f:7b:69:f8:1b:e4:ef:34:5a:06:03:44:f4:ec:c6:
71:05:59:ff:3b:cd:e2:0d:37:1d:89:e9:73:e1:bf:4c:a9:92:
fa:a6:e6:6a:a2:f0:8c:7f:42:cd:c1:d4:59:c3:b7:78:7c:c5:
d2:7f:b5:b3:43:28:58:05:cb:b6:24:f2:1f:91:d8:d0:f4:44:
c6:92:ad:b8:40:65:27:90:b1:06:bc:4f:e4:95:40:3f:7d:99:
83:7f:ee:da:52:e0:b8:cd:14:79:93:76:14:e0:49:e1:3e:e9:
16:db:b6:f4:4b:e7:96:ab:3a:57:79:14:13:f1:88:c9:91:81:
8c:12:91:d2:d1:82:7a:5e:ac:b9:e8:e6:62:f3:05:f5:01:ab:
34:78:43:de:e4:e9:02:40:bb:5b:ba:d3:19:e8:7c:d7:a1:01:
43:19:cb:f3:28:15:fa:f3:dc:a7:8d:13:ed:05:50:53:ff:ff:
fa:87:40:30:c6:dc:7a:7a:d4:97:86:f8:ae:3e:11:32:33:d5:
9c:1e:1e:02:47:e5:13:e4:5e:cc:ca:57:ee:b6:42:97:9f:1e:
7a:ff:f6:05:62:55:01:d3:5e:92:80:fa:40:34:62:e6:10:02:
d9:2d:c6:41
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBsomQfnMO2FYW/1d6H34L3cCINkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi
ZmEyY2NhNDAeFw0yNjA5MjIxMTQ0MzVaFw0yNzA5MjExMTQ5MzVaMDMxMTAvBgNV
BAMTKEQ2QTdBRTM5MUY1QjE3MTY5MDFBQzg5Nzc2NjBGMEYyRTkzQjc0MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eD4/OmiwtlZoHq+D+xjCE0sp
6i+c+5VfO/FMXNWt+dn4Yy2PK4OXmsi/KPMYAoIwFDsB0gRxqnN3CBsSxTb+1jud
VgBdmZRgwe1RYkJMSs5d+0CrkIVQXgmwuiHjbT2AZFRDe03vaWrx+Wu0qwLc9mxi
N2GdLT5tObY2q3MVYEjL0ncpPORR2EmCMMgpD3Ncs7QDd1HEXA8W8XT7Vnb4Pmu2
bPW4zrJkhDPHi5st9eeGdkh9Jucwtl0ZFhpljlH3lzSFYcXok8HS7NKZuDH3Xr1l
AAQB74NnLGsA8fu6sm5ga4moOELaw9jv2rxQqTvG1McyXXv6Z+sjgxaam6lRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU1qeuOR9bFxaQGsiXdmDw8uk7dDIwHwYDVR0j
BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz
Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt
aXpLUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt
N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzQzNjJlMzEzMDMyMmUzMjMz
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzNTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LmboMA0GCSqGSIb3DQEBCwUAA4IBAQCZNaGccRlM3iF0FVjB0exIl8LhBj5ve2n4
G+TvNFoGA0T07MZxBVn/O83iDTcdielz4b9MqZL6puZqovCMf0LNwdRZw7d4fMXS
f7WzQyhYBcu2JPIfkdjQ9ETGkq24QGUnkLEGvE/klUA/fZmDf+7aUuC4zRR5k3YU
4EnhPukW27b0S+eWqzpXeRQT8YjJkYGMEpHS0YJ6Xqy56OZi8wX1Aas0eEPe5OkC
QLtbutMZ6HzXoQFDGcvzKBX689ynjRPtBVBT///6h0Awxtx6etSXhviuPhEyM9Wc
Hh4CR+UT5F7MylfutkKXnx56//YFYlUB016SgPpANGLmEALZLcZB
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:50:28 2026 by rpki-client