Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20323132323338.roa
File: 34352e3133322e39382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: IjI9ZD1Kx83Lvao0YPPtJ59ScqKzY1bnrvhzqI3P4Tk=
Subject key identifier: BD:6B:84:CF:B2:C1:19:AB:7A:FD:28:B8:B2:38:2C:0E:D5:F8:FD:E9
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 243A23D3A606EB97F48E49CBAC3D7BC25DA94526
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 02 Oct 2026 12:32:00 +0000
ROA not before: Fri 02 Oct 2026 12:27:00 +0000
ROA not after: Fri 01 Oct 2027 12:32:00 +0000
asID: 212238
IP address blocks: 45.132.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:3a:23:d3:a6:06:eb:97:f4:8e:49:cb:ac:3d:7b:c2:5d:a9:45:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Oct 2 12:27:00 2026 GMT
Not After : Oct 1 12:32:00 2027 GMT
Subject: CN=BD6B84CFB2C119AB7AFD28B8B2382C0ED5F8FDE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:5b:86:d2:55:0e:aa:52:a8:de:23:9e:1d:
af:86:28:77:cf:32:9d:8a:5f:1b:87:62:65:ca:bc:
f3:54:75:e5:14:35:02:2b:82:bb:0a:7d:ac:a1:83:
8c:84:67:57:be:81:87:34:e0:98:a6:6b:9e:6f:2f:
a0:b7:c0:3a:fa:db:62:e0:57:ed:f5:0f:ea:f6:4d:
0d:da:de:6d:df:3e:82:35:99:32:07:86:40:9d:05:
91:ed:26:05:21:74:3a:2a:e4:fc:41:09:d9:46:59:
35:69:55:8a:c6:46:5d:89:bb:30:7c:35:5c:33:ed:
07:0e:05:63:d2:75:fa:1e:57:d2:aa:1a:89:e6:a3:
6f:d3:9c:15:9a:3c:38:aa:b9:18:70:ee:f7:3c:02:
85:c1:3f:98:ce:e0:ae:01:a4:c2:19:b5:23:62:07:
c0:c3:09:f0:05:15:5d:59:0b:1d:07:c5:99:ef:7b:
4f:4e:1e:ae:15:1f:b9:98:f7:47:e4:05:f6:3a:d1:
b6:2a:e6:03:9e:92:aa:ef:d5:c9:4d:64:3f:9a:f8:
5c:74:64:ae:4b:64:a0:20:98:c7:6c:b6:8b:78:6d:
5e:d0:16:5d:2a:98:9f:ec:88:3e:9f:43:1c:18:5a:
eb:73:ef:82:27:4d:8e:36:60:4c:92:1b:75:7a:52:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:84:CF:B2:C1:19:AB:7A:FD:28:B8:B2:38:2C:0E:D5:F8:FD:E9
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9a:2f:de:9d:0f:f0:ba:d3:3b:49:0a:ca:fc:46:21:83:10:
73:d3:b7:fe:59:5f:35:c8:4f:cc:77:80:72:f4:4d:1a:b1:18:
98:93:fe:99:27:6d:07:b1:91:fd:8c:75:53:81:ee:c5:32:93:
2c:97:d5:6f:d9:c8:a8:a7:dc:a1:99:7f:72:dd:5a:35:3d:1e:
f8:b0:81:c4:21:10:47:97:59:6b:83:d6:08:9a:6c:dd:0f:9d:
91:ef:48:0d:fe:c1:18:d6:14:96:c0:bc:db:53:71:d6:4a:f4:
cb:c1:25:da:c2:fc:d4:8c:bc:4b:4f:f1:dd:d9:25:55:78:e4:
d6:87:2f:e7:7a:92:c6:ca:a0:18:83:eb:3e:27:17:2d:8e:de:
8f:b1:af:d0:cd:84:3e:71:5f:f8:9f:75:cc:ea:a8:5a:52:5f:
f0:65:5d:6b:48:b7:0a:dd:96:30:99:3d:7d:f9:19:fc:e2:4d:
3b:17:24:de:ad:f2:53:55:af:95:9e:88:09:79:70:e1:5d:49:
a7:2b:8c:24:c9:33:d6:2d:c5:4e:d4:63:3f:bb:e7:ea:74:4e:
4a:f2:1d:71:16:b6:2f:cd:f6:05:7e:27:14:a5:21:93:12:45:
0d:3b:cf:e4:84:f1:f9:b0:5b:1e:cb:2d:b4:40:fc:25:4d:38:
c9:c5:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:15:30 2026 by rpki-client