Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231392e302f32342d3234203d3e2039303039.roa
File: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: VVBKfj3oX4V4HqDYQe/w0vIXEHmTptmcb2dA6LN81Ys=
Subject key identifier: 29:E7:57:41:38:4C:DC:89:0A:51:F3:B3:83:8F:A7:96:18:78:96:BE
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 6113DBA4204CBC39DEAC49DDF4BB220AF1831877
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231392e302f32342d3234203d3e2039303039.roa
Signing time: Wed 19 Aug 2026 11:49:30 +0000
ROA not before: Wed 19 Aug 2026 11:44:30 +0000
ROA not after: Wed 18 Aug 2027 11:49:30 +0000
asID: 9009
IP address blocks: 45.8.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:13:db:a4:20:4c:bc:39:de:ac:49:dd:f4:bb:22:0a:f1:83:18:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Aug 19 11:44:30 2026 GMT
Not After : Aug 18 11:49:30 2027 GMT
Subject: CN=29E75741384CDC890A51F3B3838FA796187896BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:d4:f9:da:b1:ff:c0:93:b2:a7:ad:9b:a7:
ba:e5:fa:59:cf:d8:9c:26:b2:2a:86:6b:c6:93:b0:
7b:7d:11:c0:39:53:0a:61:8f:99:67:9f:8d:fc:59:
91:8b:fc:b3:5c:2a:89:5f:ca:3c:30:23:bb:a6:3d:
32:5b:b5:2f:5f:45:11:c9:ca:4f:cd:76:be:6c:03:
bd:89:e6:9a:a0:4d:7e:a3:b3:3b:0c:6d:0d:77:7e:
5f:3d:8c:4c:66:cf:45:34:9c:89:c5:df:e1:e1:18:
4f:53:e7:ad:a1:b9:bb:10:e6:11:12:41:88:39:a9:
7e:96:9d:ba:12:83:fb:af:12:d5:22:37:39:84:34:
24:60:31:ea:6f:cf:54:2f:51:be:9c:92:c1:9e:19:
9f:79:f8:9d:6f:3a:f1:08:e2:be:26:f9:f5:c8:ec:
f2:d0:17:1b:e4:44:8e:a3:b8:4d:92:0f:b7:67:54:
2a:53:12:4c:93:68:38:a6:a8:a3:26:58:bc:f9:ca:
a1:0b:dd:ab:f0:08:94:f2:76:12:7e:27:e4:b1:37:
e6:71:ea:62:51:93:dc:ac:06:69:59:27:7d:20:fa:
b9:9d:22:37:05:c8:90:40:1f:1b:e0:bc:30:8b:99:
a0:63:03:f0:ff:57:ad:d7:75:4e:2b:2d:f8:38:dc:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:57:41:38:4C:DC:89:0A:51:F3:B3:83:8F:A7:96:18:78:96:BE
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231392e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.219.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8a:01:62:ab:21:82:d7:c1:82:bf:a0:8a:8a:51:ed:26:5a:
b0:d5:39:7f:29:bf:51:52:bd:8e:49:45:a5:eb:52:a8:58:4f:
49:b0:1f:0c:2b:12:c5:d9:f1:ed:66:69:ae:c4:8a:68:9f:cc:
3a:28:45:e1:13:22:fc:61:d6:89:18:d9:56:8d:19:02:09:cc:
71:06:82:ff:2b:e1:c6:b7:c1:86:bb:0e:a5:29:59:c1:86:36:
ce:70:5f:9d:fc:0c:1d:f0:07:01:b7:c2:06:99:d0:6c:8f:64:
70:00:3b:93:19:23:eb:26:7c:59:1a:0d:0c:25:58:a7:ea:1a:
da:32:4a:26:2e:12:2e:b5:4d:4b:fb:3b:c7:19:28:0e:22:33:
a5:bd:c5:10:0c:d1:15:9f:bb:99:6d:12:8c:58:f6:c4:5a:14:
cc:73:54:65:00:f0:fa:4e:46:49:4c:4a:3d:2d:f5:32:00:3e:
0b:30:3a:1b:d5:5b:1c:cc:a9:d5:1a:ef:54:b5:29:da:af:4e:
d0:cb:5f:04:74:b5:5e:39:39:30:96:30:97:32:9e:69:d7:f6:
be:7e:05:75:5b:cc:93:0b:c3:0f:45:1f:75:87:c0:df:fd:2e:
8d:4a:0b:9c:73:1b:7d:21:d1:cd:1a:83:25:2e:d8:9d:f0:15:
d1:a8:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:26:06 2026 by rpki-client