Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e20323131343430.roa
File: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (raw, json)
Hash identifier: 7bNrxcvUZ17BVt7tVCbbxISD5HLTvxOeQrmUPkwlG/E=
Subject key identifier: 14:3A:92:62:AD:39:9C:70:CC:25:5F:2B:5F:16:9F:21:70:C8:C0:26
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 7CFD32248FC250B4E55DCA07444339DD55AC5A70
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e20323131343430.roa
Signing time: Fri 27 Feb 2026 08:46:33 +0000
ROA not before: Fri 27 Feb 2026 08:41:33 +0000
ROA not after: Fri 26 Feb 2027 08:46:33 +0000
asID: 211440
IP address blocks: 43.230.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:fd:32:24:8f:c2:50:b4:e5:5d:ca:07:44:43:39:dd:55:ac:5a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Feb 27 08:41:33 2026 GMT
Not After : Feb 26 08:46:33 2027 GMT
Subject: CN=143A9262AD399C70CC255F2B5F169F2170C8C026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:e7:9e:c1:53:62:eb:ee:6f:c5:c7:c8:f4:
f6:eb:26:7b:90:d7:95:a4:11:7d:70:b6:eb:06:4b:
e5:3e:bf:a1:47:a0:f0:2d:2f:f8:ec:a7:ad:93:d3:
87:44:2d:50:87:53:54:ed:f7:9a:57:c7:6e:c5:c9:
c7:63:e9:b8:5f:3e:96:40:04:86:7d:00:c5:49:20:
04:2f:9b:dc:11:f3:7a:f2:42:f9:68:bb:5c:46:9a:
d9:f6:6c:eb:fe:d9:57:d2:85:ba:53:54:d7:5b:1f:
0c:45:ee:10:43:84:31:19:89:4f:68:4a:cb:8a:93:
71:2a:d1:8f:37:f2:f0:6b:86:d2:96:27:74:9b:04:
56:05:c8:5b:3e:0c:3b:96:9a:d4:8e:cf:d8:9e:c0:
0c:54:ff:fb:52:89:b5:a8:f1:56:73:ed:59:ec:7e:
c9:ca:4b:86:1b:6b:ea:45:04:08:17:e3:74:00:38:
2e:f8:ab:70:20:02:10:34:9e:f4:62:57:04:50:36:
d8:18:79:0a:a0:10:4e:af:b3:d6:be:5f:62:01:c8:
e2:d2:db:dd:f6:1e:54:c7:f0:4b:4c:5d:9a:58:fb:
15:be:75:0e:97:2b:4f:04:c8:4d:dc:3d:7a:50:47:
a1:2d:5e:4f:3b:9b:18:60:3b:72:e2:1c:83:83:35:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:92:62:AD:39:9C:70:CC:25:5F:2B:5F:16:9F:21:70:C8:C0:26
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e20323131343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.85.0/24
Signature Algorithm: sha256WithRSAEncryption
58:2a:d9:f9:d2:8c:01:66:12:90:71:fd:22:cc:05:a4:55:35:
61:02:c4:b4:4a:11:63:56:26:01:2e:33:25:97:70:d7:a2:c8:
b2:ef:38:5c:92:e3:ef:35:30:67:f1:15:14:08:41:56:5b:6e:
6a:20:b5:08:5e:25:2c:c1:d1:fb:98:5c:0f:55:62:ee:fa:41:
8d:7e:80:c0:09:a0:b0:5c:c7:70:05:50:53:b2:11:0f:31:7c:
9f:0c:71:20:c7:1e:ad:35:8c:f4:c4:b1:56:78:8d:75:98:56:
4e:a5:a0:02:b1:3e:1d:50:2f:b4:8e:45:1f:fb:a0:15:68:9e:
33:f3:91:99:ce:75:d1:71:01:86:27:cd:cd:1e:1a:42:0f:97:
2e:f9:70:87:7f:e2:9f:95:cd:b6:db:f1:0c:8f:d7:1b:b7:bf:
33:91:18:86:d2:06:81:86:48:3d:2e:07:56:7d:4a:78:4b:40:
50:52:e4:70:da:9e:a1:55:b6:24:06:f9:1b:e9:81:10:c1:9d:
4c:f1:09:06:a6:90:11:f6:af:76:60:11:63:3e:c7:0f:e3:0b:
03:41:98:96:49:47:20:8d:92:f6:d2:da:11:aa:93:86:30:8d:
e4:11:a9:79:fe:72:73:19:46:51:aa:2c:1e:8b:79:3d:e5:98:
22:cc:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:10 2026 by rpki-client