Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/34362e3232392e3232342e302f32302d3234203d3e203239343035.roa
File: 34362e3232392e3232342e302f32302d3234203d3e203239343035.roa (raw, json)
Hash identifier: 4IIdVeDc8Q4j/hlnrmDiN32JvOe5YxgT+shULM0apQE=
Subject key identifier: A6:01:AC:1A:22:D0:E9:47:18:18:70:93:E6:17:26:B5:84:E4:E3:5B
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 6010A30DB4E1623CBCA9010110BF54DC41D0C09B
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/34362e3232392e3232342e302f32302d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:16 +0000
ROA not before: Tue 08 Sep 2026 07:15:16 +0000
ROA not after: Tue 07 Sep 2027 07:20:16 +0000
asID: 29405
IP address blocks: 46.229.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:10:a3:0d:b4:e1:62:3c:bc:a9:01:01:10:bf:54:dc:41:d0:c0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:16 2026 GMT
Not After : Sep 7 07:20:16 2027 GMT
Subject: CN=A601AC1A22D0E94718187093E61726B584E4E35B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:23:97:1b:3a:26:c9:b5:1e:ed:83:62:3b:61:
2a:9d:69:29:cd:ce:2d:f4:1a:8e:50:4f:55:e8:e9:
16:1b:c3:94:59:ae:50:32:60:85:09:d0:2b:6d:88:
8f:6d:8e:20:9f:98:f7:86:42:59:55:65:b5:e2:a6:
c4:68:cd:5b:c3:b2:82:d0:3e:f4:40:28:4d:f2:d9:
e6:16:88:d3:12:ea:b0:1f:c2:99:b9:44:52:89:28:
f2:85:40:4b:67:59:79:31:5e:77:bf:df:a7:53:dc:
08:7e:9a:f5:92:7d:ff:3e:82:09:d8:42:a6:ed:4e:
a2:09:d8:e0:76:83:28:b6:e9:e0:48:d3:d6:a3:54:
af:1c:ee:1c:9d:d4:79:ec:d7:76:01:7e:ca:51:ed:
88:6e:08:66:41:a9:b9:ba:6f:78:51:34:80:76:f2:
b7:4f:27:de:f1:a4:a0:78:55:30:0b:4f:7b:70:65:
f4:8a:98:3c:86:2a:1d:8d:e8:f3:3c:52:2b:cd:54:
f1:9a:50:f1:ae:f2:7c:62:1a:61:5b:5b:99:68:a5:
30:39:95:42:ee:2c:3e:97:00:a9:89:18:37:ab:5a:
2c:74:a3:a6:65:f2:2c:11:7e:fa:98:3d:88:39:0f:
57:37:f8:01:2b:94:0c:61:ac:d6:98:62:c2:35:fa:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:01:AC:1A:22:D0:E9:47:18:18:70:93:E6:17:26:B5:84:E4:E3:5B
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/34362e3232392e3232342e302f32302d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.224.0/20
Signature Algorithm: sha256WithRSAEncryption
95:38:e4:be:c9:14:d0:1c:eb:30:2c:93:fb:ed:8b:6f:20:9f:
e0:2d:35:8c:08:31:09:d6:72:57:81:36:d9:93:12:fc:f9:2b:
cf:c1:97:5f:cc:0a:ea:32:9f:5b:87:61:41:c8:45:24:f9:be:
66:d3:48:91:28:b1:4f:69:28:d2:31:52:69:f7:50:be:3a:a3:
72:4c:d1:4e:56:2f:b3:f3:86:9a:c3:22:ab:a6:5e:80:51:b5:
50:16:67:8f:cc:1c:1b:99:b7:c2:a2:a9:90:1c:50:7d:ea:71:
b4:83:e5:59:13:19:53:ea:26:64:de:bd:ab:41:a8:24:b3:27:
8a:5e:c7:3e:67:7f:36:61:05:6a:05:92:b0:76:f1:25:e2:7a:
88:40:bc:c9:6d:ec:f3:06:12:2a:a3:4e:be:ea:2a:d6:fe:d5:
63:98:c7:7e:07:eb:05:1d:b9:60:ab:8e:b0:7e:a3:29:ae:80:
ed:34:47:c2:50:b8:38:ae:fa:3f:43:10:12:18:f9:15:ef:07:
39:7b:bc:eb:5b:b4:3e:e7:c8:cb:9b:e6:f1:ae:a3:6e:e9:7d:
58:27:c8:83:80:ec:d8:f6:8f:39:30:97:28:6a:51:a2:ba:80:
81:61:f9:3b:6c:04:86:c6:bf:6e:e3:54:41:4c:74:f8:85:9c:
7f:64:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:31 2026 by rpki-client