Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33302e302f32332d3234203d3e20383334.roa
File: 34362e3138332e33302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: zZEffSEUXFM6nGcMJFdjlCGja1LxLlxswXf5+FhwtD0=
Subject key identifier: 70:12:46:34:BF:39:EB:7E:59:6B:74:BE:30:C7:13:0F:27:31:ED:46
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 358D69D8CB9CE937CE9C1F01C612D8D0CE34CB32
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33302e302f32332d3234203d3e20383334.roa
Signing time: Sun 01 Nov 2026 00:11:07 +0000
ROA not before: Sun 01 Nov 2026 00:06:07 +0000
ROA not after: Sun 31 Oct 2027 00:11:07 +0000
asID: 834
IP address blocks: 46.183.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 02:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8d:69:d8:cb:9c:e9:37:ce:9c:1f:01:c6:12:d8:d0:ce:34:cb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Nov 1 00:06:07 2026 GMT
Not After : Oct 31 00:11:07 2027 GMT
Subject: CN=70124634BF39EB7E596B74BE30C7130F2731ED46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:4b:af:76:b5:98:0d:2f:c6:54:20:5a:44:
92:97:83:f8:1c:c9:7c:f6:a2:f5:a5:d1:3a:61:eb:
ab:2e:fe:4d:85:c4:2e:4c:77:79:39:07:ff:03:1a:
f0:2d:fd:dd:4a:6c:66:77:d5:b0:1a:2d:80:c3:b1:
50:26:d3:ca:85:82:37:d1:45:ba:d4:d9:74:25:6a:
7e:ca:2d:33:84:6b:1d:53:16:53:09:cc:e9:df:55:
7a:89:d2:f4:8c:67:97:89:05:3b:2b:9d:ed:54:da:
d2:9e:da:94:68:74:4c:ce:72:49:37:68:1b:8e:5a:
59:91:10:68:de:31:d6:6f:08:0e:62:4b:ca:92:d4:
3c:5a:21:06:4b:0d:e9:5b:9b:38:9e:6f:86:9b:38:
28:74:d1:0d:49:57:6a:f0:09:39:ee:c9:a6:f2:64:
21:81:55:34:82:20:de:c8:e2:eb:b8:2a:bd:a6:be:
2a:01:f3:2a:f5:48:09:d5:0e:50:2c:3b:e9:fe:69:
1b:fd:b2:a6:23:1d:40:db:c4:54:ac:c9:82:ee:d5:
9b:a8:b7:a4:91:9d:9f:ed:be:d4:ff:06:85:92:b7:
bb:a9:38:34:51:56:ae:97:e1:dc:8b:c2:11:1e:2d:
e6:60:70:05:fe:db:81:09:ab:f4:bc:22:fb:72:81:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:12:46:34:BF:39:EB:7E:59:6B:74:BE:30:C7:13:0F:27:31:ED:46
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.30.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:f0:72:bb:5e:63:c9:62:96:f8:a0:be:0d:34:ef:93:57:af:
63:cb:4b:54:d7:41:77:13:15:b2:75:c0:ec:8c:4e:e2:3a:4e:
83:19:82:8d:19:00:fb:17:02:e6:f9:15:58:65:cf:ea:73:b5:
ba:68:91:77:88:91:e9:1a:14:8a:6d:81:de:8b:80:5f:af:ed:
22:99:d5:dd:35:eb:3c:cd:f1:f1:35:20:a8:04:94:42:3e:c9:
cb:60:59:ca:b6:1a:b0:ab:b6:f5:15:f2:d3:f5:36:ae:19:70:
12:4c:8e:ac:db:5d:66:fb:52:da:0b:d0:39:13:04:24:fd:6b:
f5:84:ed:20:45:b3:46:7b:9a:ef:d4:18:27:a0:07:1e:a2:e7:
be:ea:c0:a7:76:ed:3c:3e:1c:df:6d:e7:5a:11:f8:84:a6:03:
88:f5:0c:c3:fd:1a:4d:fb:f6:7e:ed:0a:8f:1c:b1:77:89:26:
df:e7:dd:f8:51:63:6a:91:fc:60:96:10:06:e8:8e:e7:36:d6:
9f:b2:35:25:18:76:af:bb:3a:5c:02:9a:1a:b1:db:0d:d9:c1:
81:30:bb:81:20:b5:b5:1e:71:4d:58:82:9e:44:7d:ff:f9:a7:
63:ad:c3:9c:87:e8:c5:07:d2:f4:cf:78:b7:3d:e2:0a:d6:aa:
4a:31:ca:b5
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUNY1p2Muc6TfOnB8BxhLY0M40yzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj
YzY3N2IwMDAeFw0yNjExMDEwMDA2MDdaFw0yNzEwMzEwMDExMDdaMDMxMTAvBgNV
BAMTKDcwMTI0NjM0QkYzOUVCN0U1OTZCNzRCRTMwQzcxMzBGMjczMUVENDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC390uvdrWYDS/GVCBaRJKXg/gc
yXz2ovWl0Tph66su/k2FxC5Md3k5B/8DGvAt/d1KbGZ31bAaLYDDsVAm08qFgjfR
RbrU2XQlan7KLTOEax1TFlMJzOnfVXqJ0vSMZ5eJBTsrne1U2tKe2pRodEzOckk3
aBuOWlmREGjeMdZvCA5iS8qS1DxaIQZLDelbmzieb4abOCh00Q1JV2rwCTnuyaby
ZCGBVTSCIN7I4uu4Kr2mvioB8yr1SAnVDlAsO+n+aRv9sqYjHUDbxFSsyYLu1Zuo
t6SRnZ/tvtT/BoWSt7upODRRVq6X4dyLwhEeLeZgcAX+24EJq/S8IvtygVzBAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUcBJGNL85635Za3S+MMcTDycx7UYwHwYDVR0j
BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0
Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4
bmV3QS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAt
NmQxZS00YWU0LTkxNzctZDkzOGU5ODA0Mzk1LzAvMzQzNjJlMzEzODMzMmUzMzMw
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLrceMA0G
CSqGSIb3DQEBCwUAA4IBAQCe8HK7XmPJYpb4oL4NNO+TV69jy0tU10F3ExWydcDs
jE7iOk6DGYKNGQD7FwLm+RVYZc/qc7W6aJF3iJHpGhSKbYHei4Bfr+0imdXdNes8
zfHxNSCoBJRCPsnLYFnKthqwq7b1FfLT9TauGXASTI6s211m+1LaC9A5EwQk/Wv1
hO0gRbNGe5rv1BgnoAceoue+6sCndu08PhzfbedaEfiEpgOI9QzD/RpN+/Z+7QqP
HLF3iSbf5934UWNqkfxglhAG6I7nNtafsjUlGHavuzpcApoasdsN2cGBMLuBILW1
HnFNWIKeRH3/+adjrcOch+jFB9L0z3i3PeIK1qpKMcq1
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:27:27 2026 by rpki-client