Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e36372e3231392e302f32342d3234203d3e203633343733.roa
File: 34352e36372e3231392e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: Q7lnt3tVh6RDSjLuelMYJyj4FA1FfckQuwsuXGe4CMQ=
Subject key identifier: C8:2A:D1:9F:53:30:D6:7B:B9:37:34:BE:22:8F:56:77:8D:67:CC:52
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 7264772CD2C10F1A78473E94AF7B9D04E41CAC2A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e36372e3231392e302f32342d3234203d3e203633343733.roa
Signing time: Mon 07 Sep 2026 11:28:35 +0000
ROA not before: Mon 07 Sep 2026 11:23:35 +0000
ROA not after: Mon 06 Sep 2027 11:28:35 +0000
asID: 63473
IP address blocks: 45.67.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 15:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:64:77:2c:d2:c1:0f:1a:78:47:3e:94:af:7b:9d:04:e4:1c:ac:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 7 11:23:35 2026 GMT
Not After : Sep 6 11:28:35 2027 GMT
Subject: CN=C82AD19F5330D67BB93734BE228F56778D67CC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:30:70:a6:d0:76:db:c5:85:84:90:a6:63:
6d:41:20:9b:f5:48:e2:7d:36:bd:ec:ec:15:8d:db:
73:ed:1b:d7:18:c3:22:f5:9a:7c:90:33:06:8a:57:
0c:05:03:61:f2:d9:a2:28:f1:c5:ef:7d:35:e9:f3:
79:b4:8d:75:31:ba:b0:f2:07:ac:f1:a4:f7:19:70:
11:5d:50:5f:03:d3:b9:ee:30:93:88:4e:d5:e7:be:
83:8d:8b:9e:1d:00:3d:fc:8e:d6:d1:e6:1a:27:41:
d0:04:2b:fd:5b:53:bd:3e:88:91:6f:42:ee:b9:11:
08:9b:96:9d:11:b2:bb:56:38:12:0d:86:20:5a:af:
0a:19:14:e0:a7:c0:57:7b:9e:45:23:bb:c6:ed:b5:
91:53:6c:2e:f8:cf:b2:6d:b5:22:c5:90:5b:dd:0a:
50:00:46:10:8f:2d:a2:e6:fc:db:19:76:93:3a:27:
2f:d9:b8:f5:1a:6c:06:c9:d9:9b:b9:52:86:e4:f9:
44:c0:60:2c:95:dd:6f:92:fe:75:c5:40:3a:4e:6f:
bc:33:5e:71:98:57:71:21:b4:21:5f:67:6b:df:1b:
ff:e5:e3:ed:b2:28:39:4c:58:48:d1:43:24:0a:18:
d3:62:e1:45:47:fc:d8:d4:90:bd:96:8f:09:2a:bf:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2A:D1:9F:53:30:D6:7B:B9:37:34:BE:22:8F:56:77:8D:67:CC:52
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e36372e3231392e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:b2:1a:33:51:f2:8e:a3:e9:b2:9e:0f:1a:32:0c:0f:6a:8f:
5a:b3:70:8c:5d:af:71:71:68:f9:20:d0:4c:3b:65:a9:81:d6:
46:31:26:79:b5:e1:c1:cf:66:5f:39:c2:92:13:97:73:ed:4c:
ce:8e:01:ed:1a:9e:43:e2:1f:42:1b:a1:33:ff:d5:43:89:fb:
45:bc:8a:81:81:f3:03:f6:f6:f1:39:4f:5e:ea:a0:9d:70:69:
0c:70:32:6a:a7:22:18:cd:73:76:95:0f:f4:8e:1a:2a:9b:ab:
06:27:24:4a:99:f9:13:56:65:2b:b7:c7:54:6b:08:14:9c:d7:
f6:1c:c3:b9:ea:bb:c4:bd:41:52:94:07:79:a5:f6:13:6d:a4:
2e:16:15:47:82:d0:20:c2:36:1d:8a:0d:05:30:d7:03:4d:24:
c2:b7:fc:28:97:0e:f9:84:5f:9d:2e:56:56:a3:60:08:e1:a8:
da:69:21:51:56:d5:2b:d6:90:de:95:61:cb:d9:0b:3e:4a:b8:
c2:98:cf:31:cd:8c:ca:49:7e:65:86:25:9a:b3:79:62:51:a7:
8a:4d:31:ce:d7:ea:36:9a:ea:20:c6:d4:1d:e6:83:60:dd:43:
46:3c:3c:84:29:71:bc:87:d8:1c:55:41:fb:c8:73:8b:fe:96:
32:d4:38:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:40:01 2026 by rpki-client