Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39362e302f32342d3234203d3e20323037393932.roa
File: 34352e3133322e39362e302f32342d3234203d3e20323037393932.roa (raw, json)
Hash identifier: zTkx6ethJk5GNvgY58qt1j+71GYO+nVWeXjRY2w4pio=
Subject key identifier: 29:87:65:21:1F:92:EB:A8:B8:E6:A1:FB:3A:AF:58:05:AB:52:B8:D8
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 7FAA7F9E966C04FCE1547143C5E71BD7A50BD337
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39362e302f32342d3234203d3e20323037393932.roa
Signing time: Thu 05 Feb 2026 11:55:37 +0000
ROA not before: Thu 05 Feb 2026 11:50:37 +0000
ROA not after: Thu 04 Feb 2027 11:55:37 +0000
asID: 207992
IP address blocks: 45.132.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:aa:7f:9e:96:6c:04:fc:e1:54:71:43:c5:e7:1b:d7:a5:0b:d3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 5 11:50:37 2026 GMT
Not After : Feb 4 11:55:37 2027 GMT
Subject: CN=298765211F92EBA8B8E6A1FB3AAF5805AB52B8D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:e8:69:e1:2e:fe:73:66:2e:38:44:48:d2:
e9:5b:b3:ba:2d:38:4a:42:83:18:aa:36:ed:60:61:
b5:e7:04:16:d3:20:0b:36:ab:d3:45:59:43:1f:65:
fb:bd:1c:7b:14:03:3d:30:61:d8:81:49:4e:9c:05:
93:cd:54:63:0a:97:c9:1c:fe:ea:92:cb:44:33:6a:
f1:18:4f:28:98:7e:e3:bb:54:a3:50:d1:3c:f8:54:
ba:aa:15:85:3b:8a:62:eb:79:0c:a2:6c:6b:26:fd:
56:ce:76:3a:aa:2e:6b:0a:29:43:d9:86:75:16:7c:
b3:b1:55:14:8a:09:20:80:33:99:b1:d7:a4:c0:75:
5b:0c:00:c9:f7:37:e3:74:19:c8:3d:5b:f8:29:32:
e3:ca:ee:78:f9:29:69:2f:ff:b9:0f:72:ef:5c:8c:
3c:18:25:e4:6e:c8:d1:43:07:f0:16:29:c8:5f:86:
58:02:70:4b:ce:bc:f7:d4:35:ed:1c:74:15:0b:8d:
ce:70:a1:f2:ef:90:8b:cb:e5:0f:76:62:37:ba:aa:
22:37:3c:d0:28:03:08:94:22:46:70:36:8d:b1:f1:
8b:23:34:e9:30:09:0a:93:90:c6:54:93:99:93:7d:
22:4e:19:e1:fe:bf:9f:ab:55:e1:83:a8:9c:21:b3:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:87:65:21:1F:92:EB:A8:B8:E6:A1:FB:3A:AF:58:05:AB:52:B8:D8
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39362e302f32342d3234203d3e20323037393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.96.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f7:7b:67:c9:0e:52:24:cf:6c:1d:59:48:8c:e8:4f:fc:20:
68:6d:52:78:e3:f1:a2:b4:34:d4:5a:0f:bd:8d:01:24:ec:3d:
68:c3:58:91:af:a7:15:a9:75:e4:ec:00:69:6b:e5:a5:83:0f:
ca:37:1c:12:16:c6:75:2c:5b:99:67:39:8c:df:db:1e:27:73:
6e:f0:24:7d:c0:be:85:84:35:35:f4:c0:a9:50:a3:ce:98:d8:
fe:29:89:a5:39:bc:57:27:6f:c4:71:7b:32:d9:e6:cc:0e:9b:
a9:4f:32:98:ed:8f:71:d6:1e:19:20:84:17:ee:e2:ab:bb:33:
db:4b:9a:7d:e1:58:ca:e8:ae:8c:f2:c6:4b:1b:cc:c0:f3:71:
82:0f:c9:30:66:31:15:6b:24:03:d3:14:e0:e1:23:91:d2:ea:
66:1b:9c:e2:b6:6f:f5:28:a6:7d:20:d0:52:06:6b:9d:55:5f:
21:44:3e:b3:20:fc:bb:e0:cc:d8:10:ad:2a:d3:77:c8:c1:38:
e6:37:ae:0b:5e:55:af:d7:b9:54:28:bf:0b:ef:64:d0:7b:42:
9a:d2:2f:eb:26:84:0b:c8:14:dc:2f:bd:f8:6f:fa:24:a2:09:
ab:46:10:cd:6a:15:49:d0:4d:76:7c:31:c7:90:39:af:29:ef:
40:91:35:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:59 2026 by rpki-client