Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31332e302f32342d3234203d3e20313939393235.roa
File: 34352e3132382e31332e302f32342d3234203d3e20313939393235.roa (raw, json)
Hash identifier: hKkH3uV0azSy0nD3Kij13l5IKebz9hUHPqDr8KhSHtc=
Subject key identifier: 83:C7:18:67:02:F9:8E:AF:58:9A:48:85:12:36:2A:E0:72:04:30:3A
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 11CFD93D7F34B29AEC46ADACC4E2FDF462A5B9EB
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31332e302f32342d3234203d3e20313939393235.roa
Signing time: Mon 03 Aug 2026 08:49:17 +0000
ROA not before: Mon 03 Aug 2026 08:44:17 +0000
ROA not after: Mon 02 Aug 2027 08:49:17 +0000
asID: 199925
IP address blocks: 45.128.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:cf:d9:3d:7f:34:b2:9a:ec:46:ad:ac:c4:e2:fd:f4:62:a5:b9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Aug 3 08:44:17 2026 GMT
Not After : Aug 2 08:49:17 2027 GMT
Subject: CN=83C7186702F98EAF589A488512362AE07204303A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:8a:67:15:81:fe:26:d9:c5:3a:9a:98:7b:
ba:15:01:8e:c2:31:0d:cc:71:e4:68:66:f5:1e:09:
66:8a:ee:3f:6e:bd:aa:f2:e7:e9:b3:86:b5:52:2c:
39:2d:21:fa:5d:8a:54:7d:a5:8b:5f:2e:6c:6b:b7:
ff:6c:05:6a:d1:70:32:64:56:be:1b:ee:ad:67:a5:
53:44:e7:be:e1:dc:4f:d2:92:b0:cf:bd:27:51:ab:
c7:00:0d:2a:6a:3d:32:80:f1:5a:f2:5f:bb:61:54:
41:44:00:32:0f:1b:04:59:7b:0b:1f:d3:50:e5:ce:
c4:fe:ca:81:5d:c9:21:84:27:fc:b1:3f:01:40:49:
b4:86:86:d0:de:72:99:7a:a4:de:ce:e9:51:91:0d:
a3:36:96:08:4f:5f:77:0b:31:40:61:d9:de:88:b0:
86:1e:4a:51:c4:4d:89:c7:1b:26:4f:b4:99:b1:58:
7f:36:c7:0d:0d:a9:87:c9:b0:06:d8:96:1f:6e:a3:
41:4b:15:73:16:67:d5:71:1f:01:c1:b4:06:66:ad:
4c:ac:43:d8:33:ca:ac:20:d8:d5:2b:39:39:50:57:
94:da:a5:b8:86:27:84:25:3f:d7:6e:d6:a0:a7:f6:
5e:4e:4d:60:45:74:12:e7:18:05:33:3e:c5:9d:f8:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C7:18:67:02:F9:8E:AF:58:9A:48:85:12:36:2A:E0:72:04:30:3A
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31332e302f32342d3234203d3e20313939393235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.13.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0b:f6:4c:e2:a3:b1:2b:80:d2:d8:65:a5:17:f3:d0:a6:63:
4d:c4:2e:2f:4b:ec:dd:11:86:7f:39:77:11:6b:2b:37:f4:d5:
5a:ea:44:5e:4e:39:e9:6e:15:33:ae:0d:1a:81:2b:ca:6a:26:
ce:07:b9:17:0f:cb:42:88:9f:77:22:da:50:a3:ee:b4:22:dd:
7f:86:08:70:39:4f:9c:8a:4d:fb:76:6e:45:56:3e:73:bc:ea:
14:e6:2d:b9:46:20:a5:5a:eb:bf:d2:19:e4:9c:f4:c1:0c:81:
92:09:d2:e8:b3:c7:f6:cb:a5:a0:82:aa:d8:a6:99:00:b7:da:
58:d6:55:88:74:4b:65:fa:be:da:8e:12:1b:a3:87:b8:dc:ee:
31:cd:8e:49:42:b4:0f:5c:bb:f7:5d:c1:bd:29:dc:93:de:4f:
55:02:e1:13:78:8b:44:ba:ec:c0:65:86:21:79:74:ab:06:4b:
d6:f7:10:cd:f7:52:ca:20:d8:f9:e1:c5:f2:53:e3:5f:4e:4d:
a4:a6:1f:7d:91:43:4b:f1:d6:8a:83:39:c8:d3:0b:02:e2:2d:
05:ed:49:ce:70:b7:bd:4a:c5:22:95:f6:ca:66:a5:af:ff:21:
c3:79:2e:71:ed:c5:16:d1:bf:d4:50:8b:69:82:1a:c2:34:01:
3f:ce:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:46:36 2026 by rpki-client