Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130342e302f32342d3234203d3e20323039303433.roa
File: 34352e3134362e3130342e302f32342d3234203d3e20323039303433.roa (raw, json)
Hash identifier: tzVyCbi/1s2sAONAoNlHgjzWVTtlSGS7jXqFeBq7bKc=
Subject key identifier: 6D:F6:A3:90:B7:E4:B2:4D:13:C7:22:D5:BD:55:43:04:FC:43:29:4C
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 038BABD58EF9E55DCADA3F31FB1DF060D7C1C911
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130342e302f32342d3234203d3e20323039303433.roa
Signing time: Thu 05 Feb 2026 11:55:36 +0000
ROA not before: Thu 05 Feb 2026 11:50:36 +0000
ROA not after: Thu 04 Feb 2027 11:55:36 +0000
asID: 209043
IP address blocks: 45.146.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8b:ab:d5:8e:f9:e5:5d:ca:da:3f:31:fb:1d:f0:60:d7:c1:c9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 5 11:50:36 2026 GMT
Not After : Feb 4 11:55:36 2027 GMT
Subject: CN=6DF6A390B7E4B24D13C722D5BD554304FC43294C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:5d:89:db:94:49:47:48:a5:f8:7f:f1:79:
08:a7:61:3e:46:2c:13:a5:dd:26:e6:75:c0:5f:3e:
16:b5:e5:68:6d:5c:e1:e5:ff:fe:05:98:86:dd:4d:
c8:5b:82:6e:48:5a:42:27:52:fb:79:06:9a:a4:3a:
97:aa:d7:1a:98:cd:bf:9b:79:2b:d9:47:0f:be:c2:
00:5d:5f:fb:46:85:dd:61:31:4e:c1:c1:fc:28:02:
67:dc:84:09:f6:a7:d2:e8:ca:ba:c0:fa:12:50:48:
1e:c9:2f:f3:96:dc:ec:63:50:82:5c:8e:9e:4a:bc:
a3:d5:ac:0c:f0:b5:05:41:a3:52:4a:1c:37:e5:85:
5e:a8:40:68:3c:48:8a:68:62:05:5d:8d:b4:8c:0b:
eb:83:50:81:b6:10:61:af:d2:57:01:8a:0e:48:cf:
60:83:3a:65:eb:7b:d1:32:f7:b9:dd:c1:2c:4f:b0:
f0:2b:d5:ed:bc:1c:0f:f7:f0:42:bf:53:ec:57:8f:
30:68:66:3d:78:3a:c2:6a:c0:b7:11:f2:71:da:29:
65:6c:52:71:8e:3a:30:66:88:1e:82:ed:04:0a:1a:
c7:3b:28:4c:f5:ba:97:15:b6:a0:bd:49:f7:e6:a6:
d7:0d:68:b5:ca:69:6c:c4:50:42:3c:c0:ac:6b:63:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F6:A3:90:B7:E4:B2:4D:13:C7:22:D5:BD:55:43:04:FC:43:29:4C
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130342e302f32342d3234203d3e20323039303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.104.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a5:f3:54:40:fb:f4:b1:a3:0d:49:52:69:1b:93:2f:79:e1:
2b:23:a3:1d:47:74:0c:4d:df:38:a9:b8:91:51:8d:93:0e:a9:
ef:84:e9:30:d6:1b:28:55:84:bd:33:e8:6c:be:c9:a2:6b:59:
70:2c:71:85:95:a2:c7:13:c6:57:9e:5a:50:ee:fc:85:9f:d7:
08:70:70:b2:68:4e:83:7d:cf:88:a5:03:a8:07:93:9f:9f:d0:
b6:3c:90:d4:26:f6:cb:ef:95:76:6f:51:13:dc:38:06:5c:73:
f4:93:88:06:20:9b:68:3f:62:33:c2:b2:33:a8:4e:a5:6a:73:
ca:f9:f9:de:69:c9:85:83:33:e7:42:ac:bb:f2:a2:9d:2c:53:
3e:c3:05:ad:5d:c9:eb:6c:b7:05:f8:9a:4e:3b:8d:a7:44:b2:
7a:43:75:d1:6c:5b:2d:f4:5e:94:f5:c1:af:29:28:76:cc:0a:
10:16:5b:09:af:29:38:fd:a2:db:fc:7e:c8:64:23:0e:28:fe:
f9:f8:cb:8d:53:80:02:62:96:e8:7f:37:ee:52:1b:b7:c5:75:
27:c2:88:d7:e0:cb:1e:dc:89:ce:b6:ae:f9:9f:db:71:6c:4d:
f1:4e:6c:89:9c:fe:2f:15:7e:77:d1:fe:7f:f0:78:4f:08:88:
d2:74:78:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:33 2026 by rpki-client