Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31322e302f32342d3234203d3e20313336353537.roa
File: 34352e3132382e31322e302f32342d3234203d3e20313336353537.roa (raw, json)
Hash identifier: e2NNKaaBHfhgY8CD+obcfnABZxmZut2fd5VYIVO8nBY=
Subject key identifier: 98:5B:F2:61:AD:24:7E:7A:3C:36:14:39:01:21:EF:99:06:B8:9E:1B
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 0154D8437BF88AE8B4C8240A1A1215CFB54BC6CA
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31322e302f32342d3234203d3e20313336353537.roa
Signing time: Thu 30 Jul 2026 10:49:16 +0000
ROA not before: Thu 30 Jul 2026 10:44:16 +0000
ROA not after: Thu 29 Jul 2027 10:49:16 +0000
asID: 136557
IP address blocks: 45.128.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:54:d8:43:7b:f8:8a:e8:b4:c8:24:0a:1a:12:15:cf:b5:4b:c6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 30 10:44:16 2026 GMT
Not After : Jul 29 10:49:16 2027 GMT
Subject: CN=985BF261AD247E7A3C3614390121EF9906B89E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:22:b3:2b:a9:d2:ff:16:32:7f:d8:6e:a7:
7b:03:b8:b9:2c:72:99:a3:e2:3c:78:f6:89:93:52:
f3:d9:a8:cc:dc:96:5f:06:67:5c:d2:b5:53:59:78:
2c:27:c5:1d:fa:e8:b1:62:ca:8c:ab:07:3f:d6:9e:
72:9b:7d:9c:a1:01:00:80:e5:a1:72:2f:78:47:31:
82:eb:03:34:84:77:20:d2:94:5c:60:c5:e4:c0:b4:
b5:e0:4b:f0:21:ea:e6:b7:23:c4:05:68:21:ed:05:
5e:79:c4:dc:21:ce:a7:20:c5:36:51:4e:f0:63:79:
b1:7f:dc:c1:c4:85:6f:81:53:41:33:d3:93:77:f9:
ea:63:d6:76:d2:13:f7:a2:ad:59:77:56:13:25:13:
86:53:76:b5:b5:28:95:67:c6:db:02:78:41:4e:38:
00:ae:19:34:d7:f2:a8:4a:ce:29:8d:1e:3b:69:7d:
b2:de:24:00:16:17:3a:1c:98:da:00:23:52:7d:41:
70:80:93:f2:bc:34:bc:27:de:cd:4c:ab:d7:bb:e9:
41:07:f6:3f:9c:37:53:59:8d:3d:56:44:0a:7a:d5:
89:1c:c1:fc:c3:0b:91:c6:db:e2:2d:f4:3a:c5:b7:
ae:64:b8:f4:eb:df:86:45:95:5b:90:96:d4:4d:54:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5B:F2:61:AD:24:7E:7A:3C:36:14:39:01:21:EF:99:06:B8:9E:1B
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31322e302f32342d3234203d3e20313336353537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.12.0/24
Signature Algorithm: sha256WithRSAEncryption
85:56:f0:1c:91:45:f3:ec:4f:a8:5f:b8:da:87:e3:52:59:91:
d0:10:4b:34:83:31:cb:ea:cf:df:37:a4:c1:fb:9b:19:f2:7e:
87:d1:59:53:b2:ae:80:4f:84:76:52:b7:a3:81:6f:ae:ee:f4:
36:92:d9:24:9f:5a:ed:f0:98:64:07:8e:d9:d7:1b:4a:0d:6e:
12:5c:98:36:ba:5c:78:41:0e:d5:4b:e5:60:51:8b:ac:b1:40:
db:2f:f8:9f:8a:a2:fe:2d:e8:e1:72:5c:e2:f4:f7:99:95:a4:
6b:c1:da:4e:de:10:fc:27:56:86:7b:04:db:bf:87:2b:e5:0a:
85:97:3e:2a:d8:90:ad:6b:0a:1a:a0:30:f7:fb:c6:80:c9:59:
d0:e6:82:73:0d:94:79:36:bb:53:f9:95:53:2f:91:d1:53:05:
50:7b:03:1d:39:bc:b8:c4:e0:d4:ef:8f:5d:5c:d6:fc:82:62:
af:07:59:75:f8:bd:0e:a6:32:7b:35:a4:52:c0:ed:93:27:94:
f4:56:e6:d5:5c:33:fd:67:c7:a1:d0:f4:ed:8e:f4:94:3b:77:
c0:f2:9c:7e:b7:ef:f1:2d:eb:e1:60:27:55:0a:17:47:b1:01:
33:a7:20:96:cf:5d:01:3d:45:72:a0:27:b8:3f:b7:f0:c9:71:
d8:f0:ba:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:25:34 2026 by rpki-client