Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e352e302f32342d3234203d3e20323039303433.roa
File: 34352e38302e352e302f32342d3234203d3e20323039303433.roa (raw, json)
Hash identifier: xEbHzWDrK9qb49s7Sh7bzbMji3lX1NO1D6/xKNr3tPo=
Subject key identifier: BD:7B:D2:6A:F3:41:7A:AD:3F:7D:E0:CF:BE:9B:54:A2:6D:3B:16:18
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 1D9D8F5F1A163A511207E912A3AFBCED281BA3E6
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e352e302f32342d3234203d3e20323039303433.roa
Signing time: Thu 05 Feb 2026 11:55:36 +0000
ROA not before: Thu 05 Feb 2026 11:50:36 +0000
ROA not after: Thu 04 Feb 2027 11:55:36 +0000
asID: 209043
IP address blocks: 45.80.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:9d:8f:5f:1a:16:3a:51:12:07:e9:12:a3:af:bc:ed:28:1b:a3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 5 11:50:36 2026 GMT
Not After : Feb 4 11:55:36 2027 GMT
Subject: CN=BD7BD26AF3417AAD3F7DE0CFBE9B54A26D3B1618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:69:7e:1f:23:25:74:12:38:21:9f:b3:fb:
b4:99:0e:b2:31:45:82:ea:32:1b:0b:04:35:6f:36:
fa:4a:89:29:c3:9e:bf:15:c2:0f:67:d4:2c:a8:ff:
ce:cd:b6:ce:39:b4:9d:69:8c:a7:0e:4c:04:09:74:
c6:05:b2:3d:cb:3a:70:04:c9:08:13:29:30:ef:7d:
00:42:96:25:a2:b9:f4:81:be:96:d8:44:21:e8:64:
41:19:e5:0d:c5:95:c2:e5:4e:da:61:d6:de:34:bc:
99:c7:ae:d9:7f:1d:15:f2:78:f8:8e:69:aa:7c:f1:
a0:f9:dc:37:8d:f8:6e:a9:c7:8b:2a:fd:23:24:f9:
b3:67:03:9b:0a:3a:74:89:c9:ff:8a:e5:5b:16:37:
2d:c2:52:28:ac:de:46:16:33:d4:e5:b7:db:18:26:
81:5c:2e:27:13:c6:b2:3f:f1:a7:2f:ba:09:2e:a7:
3d:1c:34:c4:f5:3d:30:2b:52:8a:18:85:4f:ea:1c:
25:d1:cf:e5:97:65:60:64:0c:26:d6:d5:7b:51:52:
20:9e:53:ce:72:4e:0d:05:3b:17:72:df:69:a7:65:
1e:c1:70:54:ea:26:e2:eb:9d:69:af:52:f3:5e:35:
a5:84:62:96:e9:ea:51:52:a0:ca:ee:3a:c2:2d:91:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7B:D2:6A:F3:41:7A:AD:3F:7D:E0:CF:BE:9B:54:A2:6D:3B:16:18
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e352e302f32342d3234203d3e20323039303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6c:fc:48:94:62:c4:fb:e3:9b:8e:16:3e:62:0a:69:61:39:
87:5a:f8:71:69:60:97:82:ef:ad:b6:3d:35:3b:c8:39:c5:ab:
7f:69:24:67:1b:3b:e7:d7:a5:8e:7a:44:92:b5:7a:66:23:2a:
56:bc:78:3c:2e:2a:4d:7b:6e:ee:3c:ec:69:d8:3e:5a:6b:bc:
50:84:bb:cf:fe:db:a6:9c:ec:03:60:90:c7:ad:9f:89:08:34:
f6:f4:80:53:34:45:72:8c:d0:f3:e5:13:6c:b4:67:bd:65:5c:
0b:cd:53:2d:47:00:01:06:6b:3b:77:ff:d7:77:76:79:85:ec:
dc:90:04:7c:54:cb:fd:70:8b:75:e2:40:17:0b:7d:2e:6e:a7:
9f:9a:5b:00:a0:df:6b:b1:f7:92:87:48:33:43:9b:c8:cb:11:
95:c8:44:26:c0:c2:81:c3:91:b7:35:57:65:f0:25:0e:57:78:
c9:3b:7e:6f:8d:87:af:63:56:2d:4e:ce:74:1a:17:46:ab:f6:
e5:75:09:7b:b0:40:3e:68:d6:3e:1f:b8:d3:f5:71:d2:eb:49:
5e:64:c5:89:5e:69:20:a1:a0:5e:5a:c6:75:3e:d2:05:6a:0c:
26:88:f4:2d:2f:99:ce:9d:45:56:75:9b:74:78:28:f6:94:2c:
aa:b1:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:03:06 2026 by rpki-client