Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e20383334.roa
File: 34352e3134392e36302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: DFUpVXNMh3OIJq1txAvrPc8PceQuJD5RqJxOtkruWkw=
Subject key identifier: 84:36:33:5F:67:52:AC:94:FC:0C:75:75:C5:FA:66:4A:5E:22:C5:24
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 19FB114B6645A5F95345D912333544D214088A22
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e20383334.roa
Signing time: Thu 08 Oct 2026 06:11:12 +0000
ROA not before: Thu 08 Oct 2026 06:06:12 +0000
ROA not after: Thu 07 Oct 2027 06:11:12 +0000
asID: 834
IP address blocks: 45.149.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 21:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:fb:11:4b:66:45:a5:f9:53:45:d9:12:33:35:44:d2:14:08:8a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Oct 8 06:06:12 2026 GMT
Not After : Oct 7 06:11:12 2027 GMT
Subject: CN=8436335F6752AC94FC0C7575C5FA664A5E22C524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:8e:30:70:45:64:b8:ba:79:5f:4b:c8:57:
56:26:ed:f6:27:65:91:7a:8d:15:66:f0:e4:34:89:
7b:37:ae:89:99:fe:ea:a8:33:b2:51:12:da:6d:b5:
2a:35:37:c3:38:9b:8d:23:e3:fa:63:fb:36:44:35:
6e:d4:1c:df:12:00:d6:1f:52:a4:f2:85:48:70:66:
e0:58:fa:ff:25:ad:2b:61:e4:60:ac:f5:93:c1:31:
59:e0:66:88:61:c0:71:7a:bc:f6:3f:74:82:5f:12:
c9:ad:7d:9b:28:22:fe:cb:9c:e9:82:c3:dd:7c:f2:
6b:55:34:2f:b2:28:ee:ca:88:ce:f1:82:41:f5:3f:
4b:db:55:46:d3:df:2c:41:cd:c7:03:73:9b:22:4b:
6c:18:81:a2:cf:48:42:0f:ab:13:a6:4f:98:cb:82:
6b:75:64:b5:25:41:d4:25:bf:fb:7e:2c:19:27:0a:
85:4b:e2:d8:84:74:29:95:85:48:30:d5:b8:d4:0b:
59:12:27:02:be:a0:27:67:5a:4f:c8:bb:e7:ad:a7:
92:c8:99:f0:f8:0b:0b:c1:fd:e0:eb:41:df:52:16:
5e:d8:86:aa:a6:df:f7:2c:04:37:03:b2:e4:29:1a:
eb:6e:3f:23:9a:ea:5f:65:ca:c5:85:d7:53:f5:03:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:36:33:5F:67:52:AC:94:FC:0C:75:75:C5:FA:66:4A:5E:22:C5:24
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8f:26:99:ec:5d:d1:19:d0:0e:35:8c:93:b6:d8:42:b4:82:
6c:90:e0:8a:a2:80:f5:ae:75:b6:1a:ee:87:87:6b:8f:09:28:
c8:aa:d6:b2:6b:d5:fa:02:ff:df:19:b2:b1:3b:71:c4:5e:b7:
8c:90:59:30:14:20:bb:8d:fc:41:ab:ee:d6:17:33:3e:45:a1:
4e:df:bb:c3:53:8d:5e:36:a7:63:b7:c6:e0:c7:89:86:cc:91:
a5:b9:aa:0e:09:ee:6b:db:ba:bd:f7:1f:48:e1:f7:1d:5c:61:
4a:92:11:3e:10:1b:da:5d:48:b0:d7:48:14:65:9d:b2:e9:c3:
72:dc:56:e0:a9:ff:e7:ae:a2:60:f1:30:67:45:bf:ed:0e:07:
30:d2:19:0a:e5:03:86:c1:ff:09:0f:af:5f:2a:9c:6e:b4:6c:
89:d4:bd:61:b1:4a:2d:00:88:80:b8:34:ca:29:dc:eb:95:00:
8b:ab:93:06:25:f6:1b:41:f2:5d:df:c3:6f:e4:1a:71:90:86:
28:a3:31:b2:48:72:43:af:aa:8f:8b:00:66:ca:5c:6e:bf:74:
23:81:d7:d4:01:3d:5b:09:69:8f:1d:6d:2f:b2:cf:28:78:f8:
4d:5a:e4:14:3a:ee:cd:d6:1b:11:0b:0d:d1:16:5c:71:54:53:
9f:ca:6b:ec
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUGfsRS2ZFpflTRdkSMzVE0hQIiiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm
ZjZkNjQ1YjAeFw0yNjEwMDgwNjA2MTJaFw0yNzEwMDcwNjExMTJaMDMxMTAvBgNV
BAMTKDg0MzYzMzVGNjc1MkFDOTRGQzBDNzU3NUM1RkE2NjRBNUUyMkM1MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbsY4wcEVkuLp5X0vIV1Ym7fYn
ZZF6jRVm8OQ0iXs3romZ/uqoM7JREtpttSo1N8M4m40j4/pj+zZENW7UHN8SANYf
UqTyhUhwZuBY+v8lrSth5GCs9ZPBMVngZohhwHF6vPY/dIJfEsmtfZsoIv7LnOmC
w9188mtVNC+yKO7KiM7xgkH1P0vbVUbT3yxBzccDc5siS2wYgaLPSEIPqxOmT5jL
gmt1ZLUlQdQlv/t+LBknCoVL4tiEdCmVhUgw1bjUC1kSJwK+oCdnWk/Iu+etp5LI
mfD4CwvB/eDrQd9SFl7Yhqqm3/csBDcDsuQpGutuPyOa6l9lysWF11P1AyvFAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUhDYzX2dSrJT8DHV1xfpmSl4ixSQwHwYDVR0j
BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz
NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5
dFpGcy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt
MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzNjMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZU8MA0G
CSqGSIb3DQEBCwUAA4IBAQBMjyaZ7F3RGdAONYyTtthCtIJskOCKooD1rnW2Gu6H
h2uPCSjIqtaya9X6Av/fGbKxO3HEXreMkFkwFCC7jfxBq+7WFzM+RaFO37vDU41e
Nqdjt8bgx4mGzJGluaoOCe5r27q99x9I4fcdXGFKkhE+EBvaXUiw10gUZZ2y6cNy
3Fbgqf/nrqJg8TBnRb/tDgcw0hkK5QOGwf8JD69fKpxutGyJ1L1hsUotAIiAuDTK
KdzrlQCLq5MGJfYbQfJd38Nv5BpxkIYoozGySHJDr6qPiwBmylxuv3QjgdfUAT1b
CWmPHW0vss8oePhNWuQUOu7N1hsRCw3RFlxxVFOfymvs
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:50:18 2026 by rpki-client