Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33312e302f32342d3234203d3e20383334.roa
File: 34362e3138332e33312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Ndgh+eVE1w6trxb5NosbOsGo+jadKJ4obgWnpuGRl+s=
Subject key identifier: DA:F3:A9:44:F5:6B:3D:73:7A:49:BC:93:EA:23:04:99:ED:AA:DC:55
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 160D994BA42ED8795232F8E9EE18F648DD556DAB
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33312e302f32342d3234203d3e20383334.roa
Signing time: Wed 19 Aug 2026 00:06:48 +0000
ROA not before: Wed 19 Aug 2026 00:01:48 +0000
ROA not after: Wed 18 Aug 2027 00:06:48 +0000
asID: 834
IP address blocks: 46.183.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:0d:99:4b:a4:2e:d8:79:52:32:f8:e9:ee:18:f6:48:dd:55:6d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Aug 19 00:01:48 2026 GMT
Not After : Aug 18 00:06:48 2027 GMT
Subject: CN=DAF3A944F56B3D737A49BC93EA230499EDAADC55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:cf:6a:52:60:be:23:f4:4c:28:1c:71:a0:
ff:5a:66:cb:0a:49:b0:ab:73:20:4b:4f:74:94:b3:
4a:ee:c8:ff:64:7e:5c:a4:7b:f7:80:bd:5f:f7:9c:
04:33:3a:4a:6e:19:3b:95:55:f4:98:2d:68:44:fa:
f0:61:69:df:b4:f9:29:cc:0e:b4:74:a7:38:8d:05:
60:3f:b1:23:6d:63:c6:c3:3b:9d:02:1d:66:97:ad:
52:7f:e6:32:96:9a:7e:74:06:3e:90:82:23:2d:26:
84:ef:2d:78:0d:73:28:60:73:7b:29:43:1d:dc:8e:
e1:a4:28:79:9a:2b:23:f7:3f:03:cd:29:80:dc:3c:
f0:8e:11:f1:39:88:50:7e:f8:08:05:b6:26:85:4d:
aa:ed:b9:c2:fc:ca:88:99:6f:15:4c:91:ea:3b:8c:
04:2a:5a:bc:f4:25:aa:98:e3:92:f2:ba:17:15:bf:
15:26:28:a0:4c:3e:31:10:84:be:ef:9e:17:8e:1e:
c1:77:2f:64:40:fe:19:4c:62:d1:8f:a4:eb:fc:e9:
89:2e:96:5c:db:60:e2:31:fe:7c:a5:b1:0e:05:f2:
86:94:2c:2b:60:9f:05:c4:57:2f:82:63:73:35:a6:
39:14:1a:1e:92:ee:8f:6e:2e:13:a5:17:f0:af:7f:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F3:A9:44:F5:6B:3D:73:7A:49:BC:93:EA:23:04:99:ED:AA:DC:55
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.31.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:fb:58:1f:00:3b:59:61:24:01:8f:05:da:df:a0:08:5f:a3:
98:e7:08:30:d6:3a:ce:7a:6f:4a:00:c0:ca:25:d9:86:1c:e8:
8c:58:b2:cf:a3:d1:6f:cb:db:a9:db:33:9a:c2:ad:0b:f7:cd:
cf:1b:3e:87:95:39:5f:b1:d9:bf:80:96:6a:35:1b:cf:3c:90:
e7:ec:29:da:c3:09:1e:68:1a:b6:c4:a7:e5:4a:91:f3:2d:94:
84:41:25:70:9a:e3:85:4b:50:25:90:47:69:67:86:af:e5:1b:
7b:40:84:11:5d:33:c8:19:e3:e2:2a:81:21:0e:cd:7d:64:9f:
69:86:9e:b9:f5:ae:34:20:0b:3a:8e:52:ef:1e:b9:d2:5e:09:
e8:49:1e:fc:24:57:f8:80:f3:c7:87:d9:05:43:84:26:88:ed:
57:77:44:53:75:bb:c2:d1:ff:b2:8b:0a:2d:a3:e9:8f:69:eb:
74:f3:21:4a:10:77:58:e7:6a:e8:1a:b0:c0:85:59:88:0e:39:
1a:c0:a8:84:79:57:98:4d:74:e8:87:f9:c6:35:7c:48:99:c4:
82:aa:14:d2:73:3e:54:10:ea:8e:64:16:db:41:06:ef:a3:9c:
8f:15:9a:a7:97:e0:6e:d0:71:d7:ce:ba:b6:cb:53:44:2f:6a:
e4:07:8f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:29:42 2026 by rpki-client