Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20323138393130.roa
File: 34362e3138332e32392e302f32342d3234203d3e20323138393130.roa (raw, json)
Hash identifier: qrwEKuMw0srEHlfhF1gWk1TZ0OG2UAnJk27bbe4IO+4=
Subject key identifier: DC:1C:08:83:8A:02:70:C3:94:FE:88:EC:72:B3:4F:FC:97:7A:7E:C7
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 0E987FDB05492DD668FDA7FB9649AA7FEF43F23E
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20323138393130.roa
Signing time: Thu 03 Sep 2026 15:58:48 +0000
ROA not before: Thu 03 Sep 2026 15:53:48 +0000
ROA not after: Thu 02 Sep 2027 15:58:48 +0000
asID: 218910
IP address blocks: 46.183.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:98:7f:db:05:49:2d:d6:68:fd:a7:fb:96:49:aa:7f:ef:43:f2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Sep 3 15:53:48 2026 GMT
Not After : Sep 2 15:58:48 2027 GMT
Subject: CN=DC1C08838A0270C394FE88EC72B34FFC977A7EC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:2c:0d:f3:f9:34:7a:30:bf:64:9a:ac:80:
0d:bd:40:8e:61:fe:7c:00:98:0d:fd:d7:fd:f8:fc:
31:ff:17:56:f2:49:0b:7a:21:b8:9d:c9:a6:59:22:
47:61:dc:54:18:1d:36:d6:6d:b0:f8:74:98:2b:46:
d7:c5:4e:32:1b:3d:7e:3c:9b:23:97:5a:9e:8c:3a:
49:5c:ed:0d:03:a5:cd:4c:08:16:1b:6a:42:6e:6a:
85:80:b8:f6:29:ef:e3:d0:03:c9:f9:ea:ee:f2:fe:
d3:86:84:a0:fb:49:bc:60:19:df:c3:d0:54:bd:04:
a0:fb:50:d6:08:56:04:ec:f9:1a:81:50:c5:4c:e5:
91:73:9c:70:99:cc:3d:08:fe:ea:6f:f5:a4:27:ce:
6c:8b:00:a1:7b:28:6e:50:75:13:b3:c0:d8:25:e1:
11:88:e2:95:88:79:5a:87:7d:d5:f8:7c:4f:ea:3c:
26:59:0b:6b:70:66:83:8c:ca:96:27:e0:a5:4a:43:
6d:24:51:d1:1a:73:7a:82:28:3c:f8:07:3e:c8:82:
b5:56:45:08:b8:a3:af:a8:70:b9:44:6f:6b:0d:d8:
2a:6a:8c:94:4f:03:71:bb:a6:55:91:68:ad:bb:bd:
ce:b9:5d:b7:fd:44:ec:00:ad:5a:d0:ca:57:12:5b:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1C:08:83:8A:02:70:C3:94:FE:88:EC:72:B3:4F:FC:97:7A:7E:C7
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20323138393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.29.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:86:21:c8:75:6c:e6:74:72:63:42:09:00:c5:7a:4c:c9:05:
4d:67:34:cd:9f:ae:40:b0:a2:18:60:79:ac:05:69:81:6d:e4:
83:45:0e:17:92:ce:22:f7:5c:cc:18:65:3a:f9:34:01:1a:7c:
27:ce:c3:a5:c4:30:92:01:a2:b2:e3:35:9f:3e:ce:0b:07:d4:
56:dc:3c:c3:3a:9b:53:cd:4b:96:71:e7:bb:74:42:5f:29:4e:
e7:b8:09:c2:67:fd:84:d4:d9:f2:3a:50:d7:8e:14:11:bf:bd:
52:64:9b:70:dc:9d:de:62:53:7e:41:f9:d4:16:02:cc:13:c1:
99:4b:7a:4c:de:e0:f5:ec:76:04:13:b8:f7:d7:d6:f4:61:b0:
20:80:6d:cb:7e:1e:c5:f0:0b:41:44:67:b6:b3:9d:e2:0a:f2:
6b:10:c0:84:c3:ae:1b:0c:bd:94:20:a9:93:0c:6f:e4:a3:82:
36:f5:a1:7b:24:df:09:b5:7c:e9:de:bb:c6:e7:23:08:64:3f:
e2:d9:d7:fa:7d:5e:9a:50:9d:a1:e3:1b:9f:b4:7d:ff:c5:a9:
02:81:57:59:c2:8c:54:78:b2:bb:13:13:fb:2b:ed:54:7f:6b:
73:63:4f:f4:70:66:8b:6c:d2:10:3b:a7:c6:1e:36:26:6e:67:
1e:c1:8d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:48 2026 by rpki-client