Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130362e302f32342d3234203d3e20323035393630.roa
File: 34352e3133312e3130362e302f32342d3234203d3e20323035393630.roa (raw, json)
Hash identifier: 1fvI/bKBuJ7ea+VUpRd2pB1nlWX6X2StnEauhMZ2164=
Subject key identifier: 9A:94:AB:03:FD:39:62:F4:3B:7E:BB:5D:28:75:AF:D5:23:4A:0D:F3
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 23ACCA3BAC5D6F5C31DB7D95C63FE2D0B84C426F
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130362e302f32342d3234203d3e20323035393630.roa
Signing time: Wed 05 Aug 2026 14:08:52 +0000
ROA not before: Wed 05 Aug 2026 14:03:52 +0000
ROA not after: Wed 04 Aug 2027 14:08:52 +0000
asID: 205960
IP address blocks: 45.131.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ac:ca:3b:ac:5d:6f:5c:31:db:7d:95:c6:3f:e2:d0:b8:4c:42:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Aug 5 14:03:52 2026 GMT
Not After : Aug 4 14:08:52 2027 GMT
Subject: CN=9A94AB03FD3962F43B7EBB5D2875AFD5234A0DF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:bb:2d:2b:9e:29:60:dc:a9:87:3e:c2:c3:
a4:18:8b:ab:f0:e0:78:63:b6:b6:23:e3:61:03:69:
e1:31:e5:fb:07:f9:48:c3:a4:22:74:72:5d:d5:93:
f1:7d:f2:50:6b:41:d6:cd:28:54:4b:3a:b0:3f:9d:
5b:fa:05:36:6f:e7:72:a4:73:d9:0e:fd:96:44:01:
88:6b:49:17:58:28:6a:5e:b0:06:ae:f5:45:17:25:
a5:96:18:6d:ca:f6:9a:13:9e:37:16:a3:37:28:f9:
d2:57:e0:ba:30:05:10:fc:c0:91:eb:8a:94:f8:90:
c1:fb:d0:c6:ad:1a:32:9c:d4:5d:61:c5:7d:e9:db:
2e:cd:c5:f6:ab:39:f0:7f:5f:62:da:6b:5e:71:93:
70:83:7b:7a:1d:1f:f6:f6:a8:5f:cf:37:94:4e:93:
5f:d4:83:46:89:58:15:c8:b8:1d:3c:6a:dd:a6:2b:
83:5a:40:82:96:4f:fe:c8:a2:60:08:52:c3:df:6e:
5b:84:3a:e6:cd:6b:e8:e9:5b:b9:99:0d:17:32:6c:
f1:ce:0d:1c:19:72:cc:c0:94:c9:ad:91:c2:a3:af:
db:98:16:3b:62:58:88:7e:3a:83:4a:01:f9:9a:e1:
a5:b9:1a:b6:11:e0:aa:08:a5:3c:4a:4f:a2:a9:79:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:AB:03:FD:39:62:F4:3B:7E:BB:5D:28:75:AF:D5:23:4A:0D:F3
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130362e302f32342d3234203d3e20323035393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.106.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:04:a7:ed:37:b7:79:9d:12:de:8b:0f:2b:ce:f7:43:7a:98:
47:0e:79:44:f7:97:a8:6c:aa:ed:9d:2f:36:41:00:e2:b8:c9:
cb:48:a1:e3:cf:42:14:2c:0c:d3:7a:fd:ad:d7:8d:2e:22:e4:
43:95:6a:aa:c1:eb:87:d8:31:ab:a6:c8:f7:98:c6:95:06:56:
48:6d:28:f3:96:78:d8:17:1c:73:d5:60:38:84:55:05:98:b1:
8d:0b:fe:43:b2:be:cd:c6:2f:a2:62:f9:ba:50:c8:23:7d:03:
2a:9d:69:69:f0:2d:b4:fa:7f:45:ce:f4:0b:d0:52:23:84:3a:
69:0d:b3:e4:88:eb:28:b3:0c:38:03:0b:43:ff:a8:21:67:65:
3e:22:1a:1f:eb:b3:93:ee:24:02:1f:78:93:34:92:82:d4:6f:
81:c9:cb:75:55:a4:b6:73:92:55:0b:31:71:cb:a5:ce:2a:42:
18:94:97:03:9e:96:60:f5:52:47:16:58:b7:0f:b3:d5:ce:ad:
ba:26:9b:9c:19:42:c1:eb:1d:c9:ef:e9:54:f3:1b:06:25:f8:
f4:a6:9a:75:d4:44:e2:ff:e1:39:3d:18:be:89:c5:05:df:14:
c1:81:4f:44:80:23:cc:1e:c9:ca:a7:40:e7:b4:e5:8e:c2:15:
26:cf:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:26:34 2026 by rpki-client