Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32322d3232203d3e2037303239.roa
File: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (raw, json)
Hash identifier: d9+cKpTdsfno2v/b+IKbhlhODzZZZTwj8EEe6uEOYgw=
Subject key identifier: B0:26:6C:09:47:EB:E7:B1:33:AF:DC:5A:C3:08:30:FB:77:42:0A:77
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 2558D063A77DBE9F02CECDBA8E740E1D2EFF5E5C
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32322d3232203d3e2037303239.roa
Signing time: Fri 25 Sep 2026 09:49:35 +0000
ROA not before: Fri 25 Sep 2026 09:44:35 +0000
ROA not after: Fri 24 Sep 2027 09:49:35 +0000
asID: 7029
IP address blocks: 45.95.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 12:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:58:d0:63:a7:7d:be:9f:02:ce:cd:ba:8e:74:0e:1d:2e:ff:5e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Sep 25 09:44:35 2026 GMT
Not After : Sep 24 09:49:35 2027 GMT
Subject: CN=B0266C0947EBE7B133AFDC5AC30830FB77420A77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:92:04:77:26:60:40:1b:bd:12:1f:bf:55:
63:ac:a9:79:b6:f0:cc:29:97:62:be:75:cc:31:fd:
fe:d2:62:d8:f6:99:b5:5b:86:f1:d6:7e:ce:e4:3a:
eb:c0:17:67:c1:d5:ec:93:93:a2:82:28:d4:cb:10:
33:35:23:98:9f:30:f4:23:ff:f3:5c:30:c5:78:e3:
23:69:a9:e8:81:3a:bc:f0:b3:65:07:34:78:0a:b8:
9a:88:56:4d:82:cb:86:00:b5:70:2c:65:7a:37:3b:
58:b6:a9:e5:b8:eb:6f:54:02:a5:19:d5:8b:ff:a0:
b9:8d:48:10:80:0b:6c:bc:99:e9:8c:df:dc:19:e2:
5c:13:5a:65:77:3e:8b:8b:23:4c:4a:ed:fe:33:b2:
20:3a:89:0b:64:96:33:e2:fd:fe:58:36:e5:a0:e4:
ce:1c:76:07:ce:33:ec:44:e5:48:94:ad:e0:f4:e8:
1b:82:5f:f8:e3:ea:d3:85:36:f8:2f:0e:4a:d8:ab:
4b:34:e9:5d:92:59:2c:d4:b3:89:7a:8c:91:41:23:
c2:4e:25:b6:50:92:7f:dd:1a:df:6d:03:7b:4c:87:
23:cf:0e:c4:eb:21:b8:53:c3:5f:d0:ea:d4:78:13:
67:10:d9:4a:21:49:0b:88:a9:e6:12:ca:8e:c6:af:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:26:6C:09:47:EB:E7:B1:33:AF:DC:5A:C3:08:30:FB:77:42:0A:77
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32322d3232203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/22
Signature Algorithm: sha256WithRSAEncryption
85:8e:c2:e8:15:42:61:30:ef:b3:5b:78:6e:97:be:e9:c7:f3:
98:61:23:f3:82:1d:a6:d7:8f:28:0f:50:3a:8f:40:15:eb:6b:
bd:20:9b:02:db:d3:b8:fe:8a:e4:f3:e9:f3:93:57:2e:5d:0b:
d0:3a:77:35:0b:b1:9d:62:60:31:b4:43:14:0b:da:c2:40:02:
3e:80:45:3b:39:d7:fc:72:73:f7:ee:21:48:7a:63:10:90:d1:
10:4a:ef:d4:2a:fa:fe:81:2d:dc:68:7f:8a:82:d1:79:81:a9:
01:74:96:d1:00:aa:5e:70:82:3f:0e:50:cc:51:94:fb:04:2f:
0b:c9:56:5b:e4:87:f3:c6:fa:cf:89:a9:9c:de:c2:22:cf:e4:
23:a5:3a:ac:e8:18:f3:41:0c:02:b8:57:51:61:5e:3f:b3:41:
0d:fc:ed:4f:59:01:6a:93:c4:6e:34:56:df:2c:40:b7:25:1c:
a7:ad:1b:04:98:ec:91:cc:c5:a6:ac:4c:e8:38:0e:41:00:32:
0a:c7:c6:16:2f:d0:f4:66:36:fa:c7:36:a8:5c:1e:fd:1c:de:
9c:44:e3:11:42:50:ce:c4:6b:ae:51:cd:aa:bd:7d:fc:1d:eb:
fa:60:c7:33:37:c7:d3:6f:c7:52:a0:0e:e5:99:9b:1b:80:ea:
9e:46:e9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:17:11 2026 by rpki-client