Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231332e302f32342d3234203d3e20343030303339.roa
File: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier: J1EW+hHtD32FPQGp7ofq9HLTlopn5evJHbexaxjWVK0=
Subject key identifier: 2E:A3:FE:80:EB:06:B8:CF:6D:61:E0:CD:D4:C9:44:4E:1F:94:5A:6B
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 325BA431883BD8BC65B9581EE57DB53F7466C6BA
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231332e302f32342d3234203d3e20343030303339.roa
Signing time: Tue 11 Aug 2026 19:49:26 +0000
ROA not before: Tue 11 Aug 2026 19:44:26 +0000
ROA not after: Tue 10 Aug 2027 19:49:26 +0000
asID: 400039
IP address blocks: 45.95.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 04:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5b:a4:31:88:3b:d8:bc:65:b9:58:1e:e5:7d:b5:3f:74:66:c6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Aug 11 19:44:26 2026 GMT
Not After : Aug 10 19:49:26 2027 GMT
Subject: CN=2EA3FE80EB06B8CF6D61E0CDD4C9444E1F945A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:4e:96:0b:11:fa:79:06:8e:ff:17:03:cb:
b1:22:cf:4d:b2:3b:56:df:bd:f9:97:f5:fc:1b:6a:
a9:e6:27:c1:63:7a:78:54:14:e1:bf:68:92:ec:58:
5c:7d:68:8f:aa:85:99:53:c8:81:68:1a:63:9c:32:
77:cd:bb:9d:28:d8:2e:de:41:bd:0c:d0:48:c2:84:
7d:2b:c9:c0:8c:cd:c3:75:3e:fc:1d:2a:ff:bd:a0:
36:f8:0a:91:5a:29:c5:21:3e:57:5d:8b:cc:88:19:
87:2e:1c:0a:f1:b8:ea:3a:37:6c:30:7c:d1:8c:06:
1b:c1:58:81:6c:30:d9:d4:2c:b1:63:b0:3f:c6:8d:
cd:b4:a5:38:ee:f3:3c:68:19:89:13:03:53:5d:14:
4d:08:56:b0:c8:67:8b:14:2b:f0:2b:85:70:89:a6:
8a:2e:50:82:a1:5f:6d:aa:e3:42:45:70:fc:d3:29:
31:83:61:1e:57:dc:ab:f6:08:21:e7:23:2c:a1:9b:
16:1c:b5:69:54:0c:fb:e9:10:85:33:db:1a:c4:3b:
3f:80:65:74:b4:55:e7:7a:a6:5c:3e:fb:a7:63:70:
18:69:d7:77:6c:26:55:15:01:bc:a0:d7:8c:8c:8d:
70:61:fe:58:8a:16:f8:df:c9:b7:8e:a4:5e:3d:3b:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A3:FE:80:EB:06:B8:CF:6D:61:E0:CD:D4:C9:44:4E:1F:94:5A:6B
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231332e302f32342d3234203d3e20343030303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:1f:ac:78:78:94:c1:bc:51:c9:7c:d4:4b:12:5b:99:f3:d6:
ed:1b:71:fd:c8:47:3c:61:9d:08:0f:47:75:f5:d4:04:7d:d9:
98:ce:9e:ca:7a:81:c8:e2:29:5c:1d:4c:fe:d5:1c:e6:e5:04:
29:fd:25:30:67:ed:1e:a5:f9:6a:1f:44:8b:71:8d:01:32:77:
8e:18:ee:00:d2:d5:c5:1a:34:cd:e6:99:47:5f:d0:da:30:ba:
c7:02:15:c7:d7:3d:78:28:9d:b0:9b:e8:ec:d4:19:80:61:29:
96:9a:56:04:d5:b7:9a:92:5e:56:5b:ee:9a:c7:e6:8b:3d:65:
d4:c8:45:59:24:79:e1:96:f6:48:84:30:0a:5a:c8:92:c6:90:
a8:49:a4:f3:83:48:8f:c2:47:c5:a4:1b:ba:e3:41:5c:1a:65:
49:31:3b:65:f0:99:36:4b:f3:d8:82:32:c8:1a:92:75:54:b1:
93:19:32:d1:61:05:39:0c:ff:64:ec:61:00:8f:09:fd:74:09:
73:09:af:50:e3:e0:1a:07:ab:57:7a:69:9e:2c:d2:61:44:cd:
7d:c8:6f:bf:63:77:a4:d6:e3:a0:f3:67:1e:b1:dc:b9:95:dd:
a1:d1:2a:55:72:a3:d5:c4:84:fb:de:c5:aa:3f:33:1e:3c:ba:
23:d5:1b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 15:07:46 2026 by rpki-client