Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231362e302f32342d3234203d3e20323131343430.roa
File: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (raw, json)
Hash identifier: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=
Subject key identifier: 19:04:DC:3D:59:61:86:C8:BB:81:8F:2C:A9:3A:3D:34:22:8C:58:31
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 7D77474F0A0594FF62359FD713FF73BBB95B5292
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231362e302f32342d3234203d3e20323131343430.roa
Signing time: Wed 04 Mar 2026 13:27:02 +0000
ROA not before: Wed 04 Mar 2026 13:22:02 +0000
ROA not after: Wed 03 Mar 2027 13:27:02 +0000
asID: 211440
IP address blocks: 45.8.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 09:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:77:47:4f:0a:05:94:ff:62:35:9f:d7:13:ff:73:bb:b9:5b:52:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Mar 4 13:22:02 2026 GMT
Not After : Mar 3 13:27:02 2027 GMT
Subject: CN=1904DC3D596186C8BB818F2CA93A3D34228C5831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e8:1b:b8:f6:ce:c2:f5:5c:1b:bf:94:5b:2c:
87:8b:9b:bc:88:f6:6a:86:fe:dc:bb:3e:f9:d9:d5:
3e:33:c3:11:ec:2c:49:f8:77:96:6f:f7:79:10:ab:
a1:8b:b2:48:6a:48:14:f5:8c:10:46:3c:5c:5c:f9:
d9:e9:19:99:ee:7c:f9:70:98:25:07:08:0a:18:a4:
7a:e5:67:ed:e7:3b:6d:46:8a:1a:f0:b8:44:9e:c3:
02:2b:0d:68:e8:2b:5c:ec:73:70:da:8b:d7:00:be:
73:b6:be:06:46:f8:33:13:df:bd:ff:c0:48:3f:a4:
7c:bd:73:73:72:e4:ad:53:68:57:ee:f2:18:cc:9b:
ab:fb:30:31:5e:27:22:b1:8b:cc:30:37:4f:2e:ce:
8b:30:7d:c7:cf:82:9c:f9:76:ec:b7:2a:df:86:bf:
19:ae:ce:37:84:74:47:71:bd:7f:94:8a:66:93:e1:
4f:07:e8:d0:72:46:27:f5:cf:49:fc:42:14:4b:91:
45:59:c3:6f:a4:5c:57:7c:32:8a:4a:1d:51:1d:3f:
50:90:29:67:f5:4d:00:35:3a:d4:3b:7b:64:98:f7:
ea:e4:0e:ad:f6:04:f9:b4:b1:fa:d7:c9:37:5b:e5:
54:85:1f:4e:3f:a6:44:13:8d:aa:15:04:07:98:4e:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:DC:3D:59:61:86:C8:BB:81:8F:2C:A9:3A:3D:34:22:8C:58:31
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231362e302f32342d3234203d3e20323131343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.216.0/24
Signature Algorithm: sha256WithRSAEncryption
02:10:b2:e3:96:66:66:6a:1c:97:d7:fe:ab:2b:7b:3e:dc:51:
58:7f:d2:68:94:f4:f2:6d:18:35:dc:08:bc:90:e5:66:27:f7:
5b:0f:2c:c4:ee:7a:18:dc:e0:73:ba:f6:73:d6:07:32:71:e8:
73:ca:7a:e8:19:ea:e4:ff:95:39:6c:3f:49:06:41:67:b1:27:
33:a4:52:76:24:05:86:bf:b6:27:48:a6:1e:4d:40:df:30:2b:
bb:34:8e:6f:61:03:8a:52:6f:7f:bc:42:95:4e:c2:66:ff:54:
db:8e:28:36:ed:09:b3:5a:88:1b:30:b9:a6:51:94:b5:25:09:
b8:9e:67:c7:e1:d5:8b:e2:19:2f:15:1b:0e:a8:8f:b9:eb:d8:
f3:c8:3d:81:a5:2c:e3:a3:d3:bc:cc:09:0b:68:bc:80:92:6c:
be:0a:1b:5e:a6:93:f2:7c:f0:e3:2b:e1:3b:e2:1b:9c:d2:1a:
6a:16:8c:c0:0b:10:a7:51:00:fa:83:36:cd:2d:5a:00:da:f0:
22:bc:a3:63:57:24:f5:3d:c5:5a:e1:c6:01:5a:bf:da:bd:f8:
17:63:55:95:7e:7b:33:3b:b3:6a:c6:9a:ef:3f:7d:83:21:1d:
58:80:a1:c6:76:bc:01:6c:7a:60:13:4f:92:f8:19:4d:10:8a:
a4:bc:d8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 00:11:24 2026 by rpki-client