Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32362e302f32342d3234203d3e2039303039.roa
File: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: h3cbzb6IM0+LCDsMMqHv5LUyT0Va+Ums6gxq1LUB944=
Subject key identifier: 8B:FC:0D:29:31:FC:1F:4B:B0:05:31:FF:64:9C:66:38:7E:9C:6F:6C
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 5843582B43A1518FF602C9572D4501DD2DF3A726
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32362e302f32342d3234203d3e2039303039.roa
Signing time: Fri 16 Oct 2026 11:49:37 +0000
ROA not before: Fri 16 Oct 2026 11:44:37 +0000
ROA not after: Fri 15 Oct 2027 11:49:37 +0000
asID: 9009
IP address blocks: 46.183.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:43:58:2b:43:a1:51:8f:f6:02:c9:57:2d:45:01:dd:2d:f3:a7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Oct 16 11:44:37 2026 GMT
Not After : Oct 15 11:49:37 2027 GMT
Subject: CN=8BFC0D2931FC1F4BB00531FF649C66387E9C6F6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:66:4d:a4:fe:06:45:10:c0:84:31:69:d3:
01:9d:4b:18:2e:d5:e8:c7:db:17:31:c1:6f:eb:68:
1d:e4:04:f9:2a:20:81:c9:d5:07:12:ca:12:66:43:
78:fb:fe:d9:da:ad:96:06:97:d1:60:7d:74:65:c6:
16:9b:ec:15:50:d7:9a:67:6a:a0:f1:9f:23:2d:95:
76:9b:1b:b6:02:ab:be:f4:59:72:b2:16:9a:c2:de:
18:ba:bc:d7:5c:1e:6f:90:6a:b6:06:8c:a6:b5:0c:
ab:19:7a:28:1d:9a:93:a5:4a:76:39:4a:1f:e7:b0:
14:cf:0c:db:78:ef:c7:e1:cb:51:43:72:84:ad:13:
11:83:f1:43:97:55:e9:7c:0c:5c:7f:dc:aa:e5:aa:
1e:d6:42:dd:f8:02:71:9a:4d:87:23:9d:b3:09:bd:
39:f6:9a:2a:f5:65:e5:56:82:e5:eb:a8:f9:0c:f2:
66:ce:6b:50:4f:45:19:82:5f:a7:56:92:06:ab:c1:
dc:66:5d:c7:44:0a:18:d6:8b:c6:82:b0:9c:a3:1c:
f1:3a:14:8d:02:29:a8:21:c6:58:e2:3f:fa:b5:68:
08:f1:70:37:4f:b4:e6:af:18:a3:d9:e1:27:36:51:
6d:26:a6:cb:4d:d2:b7:65:cf:1b:a7:35:78:81:3f:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FC:0D:29:31:FC:1F:4B:B0:05:31:FF:64:9C:66:38:7E:9C:6F:6C
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32362e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:35:c9:e5:5f:95:16:24:46:d7:b8:51:c6:c5:10:b2:d8:cd:
81:a1:24:50:43:b8:3d:1d:38:bb:82:36:a1:8c:ed:e0:1c:ee:
fd:ec:68:cc:26:a5:4b:2d:99:65:cb:25:9c:f9:5d:7c:b8:56:
8b:3b:41:c8:80:52:1a:1a:a0:8e:82:64:c1:f2:3e:20:eb:6a:
11:2c:2d:12:03:85:a4:7f:79:ba:b6:c2:ca:e6:2a:89:20:c0:
d3:9d:48:1f:8b:eb:8d:23:ad:a0:68:70:f0:9e:b5:8e:67:c2:
fe:f7:8d:81:86:2c:1f:d9:07:40:cd:59:20:33:36:94:ac:38:
41:0c:8b:a5:fb:ab:ea:c3:e9:58:3c:de:ee:6b:a4:51:43:54:
df:68:7e:5f:f0:a0:22:1e:9a:ba:fb:37:84:b7:df:44:fd:21:
98:a6:8e:dc:7a:a8:5b:fd:2a:f8:d1:eb:f8:18:7f:33:ab:a7:
7a:3b:11:5b:64:cb:03:05:dc:bb:b8:c9:a6:02:36:46:75:38:
30:d0:4b:70:10:da:36:5a:0a:4e:90:9e:dc:a7:19:74:7e:e3:
87:ec:c5:71:e0:f2:3e:56:2c:fa:48:fa:f4:89:be:1b:2d:19:
fc:d3:1e:59:39:79:3b:ad:11:7b:17:5b:74:ec:d9:a0:a7:61:
c2:f6:19:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:08:44 2026 by rpki-client