Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e372e302f32342d3234203d3e203239383032.roa
File: 34352e38302e372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: uf7MkTsmUmcfwWZlwmONFUR+MG54zC454PvItoE4C3I=
Subject key identifier: 97:E5:23:8C:6D:54:8F:3F:A1:A1:CE:FA:6F:67:DC:23:A8:E7:B9:7A
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 6E27CC7A3DDFBB24DAF319F39383A4A7FC2F8D1A
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e372e302f32342d3234203d3e203239383032.roa
Signing time: Tue 10 Feb 2026 00:15:57 +0000
ROA not before: Tue 10 Feb 2026 00:10:57 +0000
ROA not after: Tue 09 Feb 2027 00:15:57 +0000
asID: 29802
IP address blocks: 45.80.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:27:cc:7a:3d:df:bb:24:da:f3:19:f3:93:83:a4:a7:fc:2f:8d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 10 00:10:57 2026 GMT
Not After : Feb 9 00:15:57 2027 GMT
Subject: CN=97E5238C6D548F3FA1A1CEFA6F67DC23A8E7B97A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:53:a1:41:d1:b5:11:16:80:10:83:05:c8:
5f:04:a2:15:39:c1:e8:dc:a8:5a:16:43:42:2b:4c:
59:3b:ae:c7:2f:0a:2c:dd:85:94:98:30:a9:61:2d:
f2:9d:9f:4f:a6:4e:85:c2:90:90:ca:94:eb:44:2b:
fe:8e:cc:fe:03:4e:45:df:b0:0e:81:77:ce:d3:ed:
d1:e3:23:fb:09:3b:6a:5f:12:56:c1:40:ec:2d:f4:
a6:09:e5:95:ba:2a:d6:62:05:91:bb:a3:72:41:f1:
9a:f6:cc:61:14:11:12:92:61:1c:00:d8:69:33:27:
15:b2:88:8d:62:63:2b:ca:52:40:69:b0:83:d1:a5:
1b:50:65:d3:40:25:f2:1a:61:8a:6a:d9:a2:08:28:
fd:fb:0c:1c:b9:5e:7b:ee:4d:5a:00:a9:28:b3:30:
50:fd:e9:b6:c4:8e:cb:9f:b3:5a:0a:b0:69:8b:02:
1e:45:ce:11:22:1f:cf:9d:15:db:2b:ee:9b:e7:e9:
4f:b3:e1:3d:fb:af:a5:c6:4e:de:69:0b:3d:af:17:
89:1c:d0:64:e2:6d:7c:ba:09:f9:e4:c2:89:97:68:
0b:49:e0:ef:37:6a:6e:c9:2f:d6:f2:35:77:15:3c:
a7:1c:9e:74:c7:c0:73:57:6f:18:8f:e1:fd:22:22:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:23:8C:6D:54:8F:3F:A1:A1:CE:FA:6F:67:DC:23:A8:E7:B9:7A
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e372e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.7.0/24
Signature Algorithm: sha256WithRSAEncryption
71:7d:6e:f4:98:5a:be:f9:ab:4c:f9:5c:02:d3:15:ca:cb:52:
6c:e0:c2:c9:42:24:4f:5c:b5:df:ac:7f:75:b1:0a:4d:c4:2d:
42:64:c0:6c:8f:13:03:b6:b2:9f:98:9d:78:2e:24:11:c3:b5:
ef:1d:3a:dd:cb:da:c6:b0:c5:4a:2f:95:ed:bb:ef:c9:0f:fc:
69:62:e1:64:d1:21:ed:aa:34:64:7e:57:22:6b:39:d2:b5:b2:
59:4b:ba:36:c1:ca:7b:ec:96:c4:05:4e:d1:e3:82:f3:62:0b:
55:c1:19:9a:87:f1:6d:76:37:48:48:4a:75:cc:34:d4:82:5a:
c4:99:e6:7a:b2:5e:c4:ee:17:d0:bc:cd:8c:62:51:15:e1:ad:
ea:5f:cb:46:0c:a8:92:5d:f6:9d:93:6c:a0:3a:5c:d6:8d:dc:
00:51:49:f7:14:4c:a4:28:25:21:5c:14:b2:cf:8c:5c:f2:91:
cb:0c:db:c6:84:e9:ea:e0:70:c7:bf:29:6c:7e:0e:16:de:4b:
01:de:d1:2c:bd:c0:d8:5f:31:2e:c6:41:cb:f1:4f:6e:6f:30:
ce:d2:bf:e0:cd:86:b6:f8:61:20:01:18:4b:4b:40:5b:54:bf:
31:17:47:f4:c4:c0:3b:2c:ea:7e:db:43:c1:3c:a8:4b:db:00:
df:32:43:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:17 2026 by rpki-client