Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133342e302f32342d3234203d3e203130363438.roa
File: 34352e382e3133342e302f32342d3234203d3e203130363438.roa (raw, json)
Hash identifier: R9kro7Et3ygIQ0uFO4V9FwvMIahiEMowdsm+aMDY8BE=
Subject key identifier: E9:A7:70:41:A0:3A:A8:CF:AE:6F:C0:7F:EF:30:44:C6:22:C4:28:60
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 0F64F4FE98E35F2DC6A25A349B453606D6BB1402
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133342e302f32342d3234203d3e203130363438.roa
Signing time: Sun 20 Sep 2026 12:16:40 +0000
ROA not before: Sun 20 Sep 2026 12:11:40 +0000
ROA not after: Sun 19 Sep 2027 12:16:40 +0000
asID: 10648
IP address blocks: 45.8.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 15:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:64:f4:fe:98:e3:5f:2d:c6:a2:5a:34:9b:45:36:06:d6:bb:14:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 20 12:11:40 2026 GMT
Not After : Sep 19 12:16:40 2027 GMT
Subject: CN=E9A77041A03AA8CFAE6FC07FEF3044C622C42860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:9e:52:1a:fa:2f:93:bf:8b:ae:63:f1:8c:
11:af:11:b2:32:f4:e0:9b:2c:08:ff:84:d3:1c:0f:
51:b6:1d:6c:2b:8d:f9:65:97:51:03:d8:03:ce:3f:
3f:ee:56:26:93:69:65:14:b6:d2:15:0b:ef:8d:58:
7e:bb:1b:9b:da:62:f9:5a:fa:02:6a:f8:ce:96:aa:
69:0e:82:2e:f9:05:cf:02:ff:7d:a7:32:59:81:e2:
4e:17:68:c2:5b:10:77:3d:55:0b:56:e2:7d:4d:43:
5f:68:17:03:b0:19:a4:0c:db:ef:f3:02:5c:58:7d:
1c:ed:67:cf:ef:53:14:71:71:55:4a:6f:20:9b:03:
4e:1e:2e:64:f7:d3:9e:49:20:ac:c6:4f:59:60:b6:
ea:89:a1:b6:43:6f:48:3f:71:3b:ab:42:9f:34:67:
0c:8f:eb:82:5f:84:21:b1:df:87:e4:ee:ad:7b:82:
ae:0c:f1:57:cf:6e:91:0c:f3:70:47:fc:8a:12:52:
99:cb:be:79:84:e9:d8:6f:a1:1d:89:5a:e3:f9:6a:
25:2a:50:d9:dc:0f:ec:e7:74:23:70:62:d3:2f:93:
63:ec:ba:10:07:6d:a8:e8:3f:fa:22:7b:36:b1:3b:
5c:6d:fe:62:2d:ff:4b:64:a8:53:b8:6b:30:26:97:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:70:41:A0:3A:A8:CF:AE:6F:C0:7F:EF:30:44:C6:22:C4:28:60
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133342e302f32342d3234203d3e203130363438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.134.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a6:a6:51:4a:c3:db:3b:c8:67:07:18:78:3d:62:f6:fe:37:
d7:ee:ee:25:a2:0a:18:42:6d:6d:af:ca:1a:90:f5:a1:2a:40:
e2:84:a3:60:a7:fb:27:d0:07:84:05:0e:4c:01:d4:86:62:eb:
cf:e8:e5:0f:40:0b:9b:79:15:0f:6b:ee:d4:e5:e8:b0:be:ac:
2e:12:fc:f5:ac:a3:2f:6d:ba:00:72:3e:8f:7d:8f:19:8c:f4:
20:56:74:74:61:3d:9e:32:6b:59:3e:36:fd:a6:5d:78:43:aa:
4a:d1:7a:47:d4:fd:bf:38:2e:ed:56:a9:88:2b:67:7a:59:5a:
7e:97:06:95:03:ed:26:83:f9:9f:3f:f2:51:f3:a3:4c:97:85:
14:ce:db:6c:b9:93:0f:92:8c:04:1d:a5:ed:82:5d:92:16:98:
4e:f8:fa:40:14:a3:a6:92:10:b6:e4:4c:d1:ce:43:9a:b5:bd:
55:3e:c0:5e:97:53:4c:6e:4a:63:27:30:aa:0a:e8:67:ca:ac:
ce:4f:1c:3e:f7:ce:9f:c9:4c:f6:80:03:48:b3:fb:97:6a:29:
2b:a1:ee:ab:ba:08:56:8c:5f:4e:25:ba:bc:15:d6:8f:3b:08:
94:bb:e5:bb:5d:b9:8d:63:ff:1e:ff:8b:61:37:aa:b5:13:6a:
4c:ab:e1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:57:00 2026 by rpki-client