Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20323138393535.roa
File: 34362e3138332e32392e302f32342d3234203d3e20323138393535.roa (raw, json)
Hash identifier: z5qKjewEEdBI48pCju0pqpPvgTjN75cL9QGGwOpic1Y=
Subject key identifier: 72:0D:6B:4E:92:C8:BC:38:BE:3B:45:C0:80:3B:6E:07:82:73:00:F7
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 3015F645D4A3D79652A207EC938CE86997A480C2
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20323138393535.roa
Signing time: Wed 02 Sep 2026 13:37:04 +0000
ROA not before: Wed 02 Sep 2026 13:32:04 +0000
ROA not after: Wed 01 Sep 2027 13:37:04 +0000
asID: 218955
IP address blocks: 46.183.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:15:f6:45:d4:a3:d7:96:52:a2:07:ec:93:8c:e8:69:97:a4:80:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Sep 2 13:32:04 2026 GMT
Not After : Sep 1 13:37:04 2027 GMT
Subject: CN=720D6B4E92C8BC38BE3B45C0803B6E07827300F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:65:f2:af:d3:40:e4:35:11:ec:03:c4:59:ee:
e9:6d:8a:26:90:d7:4d:bb:a9:44:72:21:d8:06:77:
93:fc:05:95:31:7f:5b:6d:44:f9:d6:95:b9:8f:26:
44:b4:bc:e1:9c:45:af:63:2c:ac:24:3d:cc:8c:4f:
b0:75:91:25:95:87:90:ac:38:e5:fb:55:b0:11:bf:
e0:99:d4:0c:1b:f5:2a:1e:ed:b4:50:93:2b:e8:f1:
3e:48:69:57:88:96:c1:7b:67:25:0a:90:a9:69:85:
e6:79:0e:a6:20:d7:ab:51:83:4a:70:a5:cc:6d:b4:
94:29:05:f3:b1:fd:f8:8f:26:58:01:91:eb:39:f6:
7b:d5:d6:5b:76:bd:6e:92:07:f8:d9:68:31:15:9d:
3c:61:90:ce:d9:71:5b:7e:2d:8a:15:3f:85:1f:ba:
9b:00:e1:17:64:25:10:f7:36:4c:e0:b6:4f:d5:f1:
70:11:ff:fd:b3:79:23:42:29:34:e2:58:cb:41:74:
ff:66:9e:70:08:9b:7f:14:40:6e:4f:94:e0:b4:80:
04:f8:0d:90:66:b0:74:fb:36:65:4b:3c:1b:d7:89:
c9:3f:01:cf:45:45:63:f6:63:48:b2:ff:85:e9:4a:
d8:6c:c4:34:26:f5:07:2a:8c:09:73:b6:24:81:8a:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0D:6B:4E:92:C8:BC:38:BE:3B:45:C0:80:3B:6E:07:82:73:00:F7
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20323138393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.29.0/24
Signature Algorithm: sha256WithRSAEncryption
80:16:8b:df:3b:e7:db:94:da:a2:94:c2:b7:48:c5:f9:3c:ab:
8a:c8:c7:0a:3b:87:0b:9c:e2:ab:65:ea:e8:2d:26:4d:3d:c4:
72:c1:af:11:a1:5f:db:cc:c3:fa:8b:fe:75:e1:b6:36:f7:cb:
63:d1:4a:3c:60:31:bd:65:0f:43:e6:e6:5a:8e:97:b1:61:6f:
96:94:73:96:50:9e:5d:fe:1d:4c:e1:e3:a4:f9:6b:fb:17:33:
7a:7e:39:73:08:e3:e6:7e:ca:58:2e:96:db:d6:b0:b6:72:31:
80:ed:d5:f3:38:78:0c:0c:b3:74:2a:72:a0:e0:4e:0f:5a:83:
f9:81:a6:8d:a2:b7:c4:b1:ac:64:50:8b:7a:84:d9:27:e4:a7:
24:ab:4c:e2:15:f5:81:be:5d:3f:ae:98:c8:0a:7c:67:78:90:
95:58:9d:81:0e:c4:9b:0c:7d:4f:ae:2c:c3:47:1f:71:45:94:
7b:9d:b0:e8:43:d0:c7:63:ff:69:2b:16:cd:72:bf:98:37:ce:
28:ca:65:c2:7e:fe:99:df:b0:18:97:1e:c0:f0:ec:4a:64:49:
47:4d:2c:af:89:57:8b:35:7d:e6:77:73:7e:6f:4c:9d:26:52:
a3:f9:43:cb:3b:70:95:9a:fd:3d:77:c5:53:cf:0d:34:33:03:
1c:4f:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:41 2026 by rpki-client