Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231362e302f32342d3234203d3e20323132333834.roa
File: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=
Subject key identifier: 75:DF:A9:FD:A0:5C:77:6F:D5:9A:89:8B:5D:0E:98:C4:F9:07:2D:09
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 63D4A31133BD922C202588C21C552B723177A697
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231362e302f32342d3234203d3e20323132333834.roa
Signing time: Fri 20 Mar 2026 08:46:49 +0000
ROA not before: Fri 20 Mar 2026 08:41:49 +0000
ROA not after: Fri 19 Mar 2027 08:46:49 +0000
asID: 212384
IP address blocks: 45.8.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 07:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:d4:a3:11:33:bd:92:2c:20:25:88:c2:1c:55:2b:72:31:77:a6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Mar 20 08:41:49 2026 GMT
Not After : Mar 19 08:46:49 2027 GMT
Subject: CN=75DFA9FDA05C776FD59A898B5D0E98C4F9072D09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:e5:c5:99:23:da:3d:70:58:5f:34:d8:12:
1b:d6:db:7a:81:73:d7:f8:97:f5:ff:73:26:70:d9:
c7:81:16:bd:4e:b4:6b:d9:95:4b:13:71:d1:ad:42:
33:32:a3:84:6c:de:7a:e8:4b:1b:b7:e1:94:76:76:
04:e0:6e:45:f8:a1:e5:48:15:de:65:cf:09:a0:54:
1b:53:0d:cf:18:a9:b3:15:e6:15:d3:de:9d:f8:91:
fc:1d:ce:29:1d:39:68:e5:e6:f2:89:d8:6c:63:ce:
a9:56:b7:8a:4d:0b:45:43:27:97:ba:be:18:3a:5d:
3b:e1:d4:ea:b0:47:e4:7a:40:ae:71:2a:97:d6:17:
61:85:95:fe:b5:24:bd:8a:36:5c:e8:e9:c9:9e:90:
c5:f1:dd:66:a8:0c:8d:ee:9e:1c:75:84:75:e6:52:
e0:76:54:c5:f9:ce:ce:f8:e9:dd:19:05:d4:27:bd:
38:06:35:95:ff:d9:a3:aa:f8:fa:4e:2a:8a:99:6a:
c3:3b:54:26:24:61:87:6f:f9:e5:b0:c2:0a:11:a0:
2b:ee:0d:2a:63:b1:b1:ea:cd:8d:ff:f3:ab:d2:eb:
60:94:a8:c4:cf:b4:44:2e:72:c9:11:29:b1:61:2e:
91:c8:a1:2c:38:cf:b6:68:76:37:7a:a4:a5:4f:3d:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:A9:FD:A0:5C:77:6F:D5:9A:89:8B:5D:0E:98:C4:F9:07:2D:09
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231362e302f32342d3234203d3e20323132333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.216.0/24
Signature Algorithm: sha256WithRSAEncryption
14:7a:0f:45:60:51:ed:cc:20:36:95:6d:9e:67:aa:55:f6:c6:
ae:4f:5f:dc:bc:d5:84:20:84:54:79:75:cb:e7:62:90:70:93:
6c:f5:91:ec:08:da:8c:50:88:a2:f6:0f:20:e8:4c:01:ee:da:
ad:35:99:ce:10:2b:1b:fe:65:3c:68:7e:19:fb:08:c4:8d:ed:
60:86:4c:c1:16:80:cc:30:43:e8:bb:4c:d8:93:54:83:b4:09:
e0:2d:1a:ef:ec:12:5c:ee:86:7c:01:b3:97:ee:85:7b:d1:cb:
a2:b8:10:e1:cf:c2:05:1a:06:b7:89:24:b8:f3:09:6f:a1:28:
b7:8a:a1:fb:ea:d6:76:6b:9c:5c:0f:70:e7:92:f9:bd:28:fb:
cb:e0:32:ad:17:ff:0d:45:0b:fa:dd:1a:ee:b0:3f:09:20:63:
7e:10:9f:21:43:73:d3:85:b1:95:56:59:5a:71:e4:8c:a1:c9:
54:b2:5f:b3:a9:2b:4b:2b:3a:c1:96:38:0e:2f:6e:31:f9:a3:
46:be:ef:d6:51:83:14:92:ae:82:9c:8f:ef:b1:85:0a:1a:23:
ab:c6:76:81:b5:c0:41:9e:17:65:c2:38:f0:c0:73:b6:7c:09:
c1:92:9b:21:aa:7c:1d:7f:cf:73:47:37:0b:82:e7:08:89:3f:
a0:42:b6:9e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUY9SjETO9kiwgJYjCHFUrcjF3ppcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjAzMjAwODQxNDlaFw0yNzAzMTkwODQ2NDlaMDMxMTAvBgNV
BAMTKDc1REZBOUZEQTA1Qzc3NkZENTlBODk4QjVEMEU5OEM0RjkwNzJEMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaUOXFmSPaPXBYXzTYEhvW23qB
c9f4l/X/cyZw2ceBFr1OtGvZlUsTcdGtQjMyo4Rs3nroSxu34ZR2dgTgbkX4oeVI
Fd5lzwmgVBtTDc8YqbMV5hXT3p34kfwdzikdOWjl5vKJ2GxjzqlWt4pNC0VDJ5e6
vhg6XTvh1OqwR+R6QK5xKpfWF2GFlf61JL2KNlzo6cmekMXx3WaoDI3unhx1hHXm
UuB2VMX5zs746d0ZBdQnvTgGNZX/2aOq+PpOKoqZasM7VCYkYYdv+eWwwgoRoCvu
DSpjsbHqzY3/86vS62CUqMTPtEQucskRKbFhLpHIoSw4z7Zodjd6pKVPPbvZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUdd+p/aBcd2/VmomLXQ6YxPkHLQkwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt
MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzQzNTJlMzgyZTMyMzEzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMzMzgzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0I
2DANBgkqhkiG9w0BAQsFAAOCAQEAFHoPRWBR7cwgNpVtnmeqVfbGrk9f3LzVhCCE
VHl1y+dikHCTbPWR7AjajFCIovYPIOhMAe7arTWZzhArG/5lPGh+GfsIxI3tYIZM
wRaAzDBD6LtM2JNUg7QJ4C0a7+wSXO6GfAGzl+6Fe9HLorgQ4c/CBRoGt4kkuPMJ
b6Eot4qh++rWdmucXA9w55L5vSj7y+AyrRf/DUUL+t0a7rA/CSBjfhCfIUNz04Wx
lVZZWnHkjKHJVLJfs6krSys6wZY4Di9uMfmjRr7v1lGDFJKugpyP77GFChojq8Z2
gbXAQZ4XZcI48MBztnwJwZKbIap8HX/Pc0c3C4LnCIk/oEK2ng==
-----END CERTIFICATE-----
Generated at Sat Mar 21 18:31:34 2026 by rpki-client