Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134312e3132332e302f32342d3234203d3e20313336373837.roa
File: 34352e3134312e3132332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 7qpiuHk1hNa+lgl4nfMD8qvfVVx2tMNXoS+b99bBqu8=
Subject key identifier: 25:99:DC:A3:D2:35:EE:05:64:F3:AE:10:2B:30:91:FD:AD:CB:6F:78
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1756495E345388A804F5D2145888825FA944A097
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134312e3132332e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 04 Feb 2026 20:23:15 +0000
ROA not before: Wed 04 Feb 2026 20:18:15 +0000
ROA not after: Wed 03 Feb 2027 20:23:15 +0000
asID: 136787
IP address blocks: 45.141.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:56:49:5e:34:53:88:a8:04:f5:d2:14:58:88:82:5f:a9:44:a0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 4 20:18:15 2026 GMT
Not After : Feb 3 20:23:15 2027 GMT
Subject: CN=2599DCA3D235EE0564F3AE102B3091FDADCB6F78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:bf:05:ec:18:b1:68:40:24:eb:68:26:a4:
3a:26:59:02:ef:a1:e3:4d:92:c1:9f:c7:5f:3a:68:
d6:d6:ed:4e:05:08:e4:19:e4:3b:17:7d:5c:cf:a4:
65:47:6a:c1:f0:7d:65:6c:2e:31:65:22:d6:29:02:
cd:b7:01:57:26:61:22:b7:bc:42:94:1b:7f:d4:22:
dd:8b:61:23:f0:c5:2a:35:fc:dd:1a:d0:79:dc:37:
5a:07:32:a7:05:6e:22:1d:cc:78:d1:b7:18:29:f6:
e3:79:13:ed:6f:44:b9:23:49:df:dd:7b:23:2b:e3:
ce:b2:ab:3a:fb:09:ab:c2:4b:75:3a:68:2f:d4:d6:
13:90:fa:74:01:d3:cc:fc:6c:c9:b5:3c:78:2b:84:
96:2d:e4:e5:ec:b3:5b:6a:53:8a:81:ff:71:ec:32:
8b:ce:1a:d2:98:29:6d:8d:ea:e4:75:63:3a:91:22:
20:a3:20:28:54:3e:ba:d6:5e:75:4b:24:cf:dc:bb:
10:99:95:4c:81:25:a9:c0:c5:16:01:c5:14:f5:74:
fa:d7:b3:2a:06:a1:07:08:6d:f4:e7:c6:5f:3d:5b:
89:03:53:7c:34:fc:5b:23:24:28:c6:7e:43:48:48:
3d:b9:75:6b:df:32:52:c8:7b:4d:ef:7a:cc:f0:f9:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:99:DC:A3:D2:35:EE:05:64:F3:AE:10:2B:30:91:FD:AD:CB:6F:78
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134312e3132332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.123.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c7:8f:dd:78:e3:7e:04:fa:9d:36:fa:94:89:57:8a:db:23:
f2:fe:17:bb:e9:75:bd:0f:be:d4:ad:1c:25:9d:73:48:ef:82:
ea:83:71:ff:26:fa:ee:fa:39:fa:48:10:5b:88:78:f2:9d:2c:
b7:0f:0a:ce:9e:99:d6:37:38:6a:e7:fe:84:e4:66:28:0a:c5:
66:04:5a:64:41:36:2b:3e:73:2b:0b:57:8a:77:b4:3d:d8:e9:
4a:24:9f:48:5f:e0:b9:f4:af:29:d1:5b:ae:5f:af:5e:26:93:
ab:43:66:fe:0f:c9:a5:1f:f7:1a:65:73:16:c1:90:78:97:21:
3d:9f:e9:6b:9e:4d:d9:b1:1a:2c:3f:46:e5:f3:2a:62:38:db:
67:ac:b6:1f:25:0f:81:28:80:18:6a:76:6a:3c:6c:1a:34:3f:
27:b9:29:29:06:a0:fa:49:16:38:17:9f:d6:c2:2f:e4:2c:f3:
37:78:86:4d:d1:63:bd:83:d0:64:87:b3:df:94:21:d3:23:76:
f3:cd:20:bf:ba:93:26:ff:9f:93:3f:02:e4:41:09:e3:f6:8e:
5b:9e:a5:54:43:cd:c3:eb:79:a9:7f:c7:c0:5e:6a:7f:92:2f:
d8:1a:37:16:13:90:08:cc:74:85:23:ea:89:10:58:98:9e:c7:
ce:6e:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:18 2026 by rpki-client