Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e342e302f32342d3234203d3e2039303039.roa
File: 34352e39312e342e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: d3G/0ssyBQuZnEgdnavjEt22lnNkH1GPbnk3kfcsacs=
Subject key identifier: D6:EC:2C:6C:D7:25:A0:78:EF:89:AB:1B:DE:EB:7D:71:AB:35:E3:88
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 6FA16B8D5DBCE4A6421533AB21EA999113B5997C
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e342e302f32342d3234203d3e2039303039.roa
Signing time: Thu 06 Aug 2026 07:43:31 +0000
ROA not before: Thu 06 Aug 2026 07:38:31 +0000
ROA not after: Thu 05 Aug 2027 07:43:31 +0000
asID: 9009
IP address blocks: 45.91.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a1:6b:8d:5d:bc:e4:a6:42:15:33:ab:21:ea:99:91:13:b5:99:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Aug 6 07:38:31 2026 GMT
Not After : Aug 5 07:43:31 2027 GMT
Subject: CN=D6EC2C6CD725A078EF89AB1BDEEB7D71AB35E388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:f2:5b:18:b1:c0:b4:f1:a4:d9:02:80:76:
c4:de:fe:6a:7b:1e:b9:93:b3:e9:f5:8a:90:5c:8a:
dd:e2:80:8e:7d:05:4b:86:d5:05:4f:16:2c:c3:36:
de:49:b8:3b:10:1a:e4:6c:f0:3a:ee:2e:3d:a0:77:
ee:7d:7c:2a:79:75:15:f5:5a:05:ed:32:93:94:63:
5b:35:dd:83:c6:2e:95:28:57:0e:25:2b:a5:8a:77:
ea:32:31:85:a6:c1:d2:9b:b2:64:9b:aa:76:22:2f:
8e:c1:7b:dc:06:15:09:c6:6a:1d:1a:e5:90:3e:f0:
18:7f:e3:82:54:18:1a:83:22:b4:e0:b4:ed:53:c0:
61:06:d0:49:96:04:f1:11:5d:0a:1d:cb:b5:93:ec:
76:9a:48:bb:85:5d:f4:9e:a6:0a:ed:1c:17:8b:b5:
83:23:01:fa:3e:ff:91:6b:ae:a7:9c:39:3b:9a:7e:
05:a8:43:59:af:24:af:d2:b5:d7:92:39:63:4f:10:
e6:fb:5e:2e:12:2a:1f:3c:5f:77:d0:0d:c9:ff:fe:
32:4a:1b:79:de:71:20:7c:5c:bd:68:0a:10:de:99:
b4:6b:5f:87:68:bb:d2:c1:b8:54:5e:29:5f:11:d1:
9e:14:9c:04:f8:45:c6:67:55:6e:cf:ee:22:91:e7:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EC:2C:6C:D7:25:A0:78:EF:89:AB:1B:DE:EB:7D:71:AB:35:E3:88
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e342e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.4.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:aa:25:82:ca:fd:57:d8:0a:8b:64:68:dd:49:61:1f:a1:e1:
4b:47:57:31:96:f9:26:a5:6e:e3:fc:72:07:2b:14:7b:24:97:
a7:7f:d1:5d:80:21:bb:5a:44:03:93:1f:c9:6d:64:ad:07:83:
09:52:fe:1f:0f:d3:fb:25:b4:cc:c0:38:c9:fc:ee:7b:72:54:
d2:d0:6a:3f:20:df:98:06:da:02:da:a9:2d:14:00:24:12:f7:
fb:ea:de:01:63:d9:e7:97:96:5b:94:b2:8b:84:45:ca:c9:bb:
04:70:f5:a8:f7:26:4d:f5:d8:13:90:8d:f3:dc:04:0a:b7:21:
3c:80:f5:c6:22:33:82:4e:b3:7a:1c:4c:45:df:90:9a:a0:fa:
4b:b4:1f:e6:93:da:6c:70:91:12:fc:ec:9a:79:99:b8:86:61:
b0:48:56:9f:10:a5:ad:e5:b0:ac:57:c5:b1:3d:47:8b:19:3c:
60:88:fb:2b:b0:65:81:fd:28:01:83:16:c3:ce:83:fe:84:67:
f5:2c:ee:d8:c6:ee:2c:5d:a6:70:dc:7d:70:d5:31:8b:06:98:
35:34:9f:bd:2e:4c:db:5d:d2:0e:cf:60:11:c5:93:e1:51:ad:
82:26:cf:71:0c:29:e2:6e:4b:0e:e5:de:5f:fd:3e:61:75:ce:
ac:2f:a2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:12:02 2026 by rpki-client