Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31332e302f32342d3234203d3e20383334.roa
File: 34352e3132382e31332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: gd7co7MQSsv6cTDwpyvNlQUNvNH5vDVUJ6U3zux4miw=
Subject key identifier: E1:FA:41:DB:53:C7:A2:E3:8A:27:88:DE:21:2A:B7:C6:8C:F1:5E:67
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 065B0637D74D3CFFA2FBDD6D1A39707A198406B2
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31332e302f32342d3234203d3e20383334.roa
Signing time: Fri 02 Oct 2026 00:03:50 +0000
ROA not before: Thu 01 Oct 2026 23:58:50 +0000
ROA not after: Fri 01 Oct 2027 00:03:50 +0000
asID: 834
IP address blocks: 45.128.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 12:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5b:06:37:d7:4d:3c:ff:a2:fb:dd:6d:1a:39:70:7a:19:84:06:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Oct 1 23:58:50 2026 GMT
Not After : Oct 1 00:03:50 2027 GMT
Subject: CN=E1FA41DB53C7A2E38A2788DE212AB7C68CF15E67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:ed:39:82:66:ee:54:0c:b3:2a:d7:ea:55:
30:e0:f7:2a:e5:9f:e7:aa:f4:93:28:1b:05:02:a3:
2b:3b:76:4b:32:ed:23:eb:af:7d:b6:e7:8e:b6:79:
09:c6:e9:cc:9b:13:84:b3:65:0e:f2:c5:3a:9d:bc:
79:e4:8d:f9:01:99:56:82:c2:2c:9e:d3:5c:fa:eb:
91:f8:67:03:e2:8e:15:8e:6b:c7:fa:f6:2e:9d:58:
f7:49:58:fa:e7:63:9c:c2:86:7e:ad:00:e6:a7:6d:
91:81:f7:d2:db:e8:2f:83:35:4d:03:0b:38:06:4f:
fd:ed:ea:a1:08:da:47:0b:14:37:6c:7e:24:5b:d7:
af:b3:8b:76:52:70:53:ec:d8:c4:c0:a8:0b:3b:4a:
fc:0b:87:37:48:ee:8c:12:5c:52:53:c6:2c:f5:90:
63:d6:07:d4:a9:fa:3b:6e:a1:d3:8a:ff:c1:41:c6:
1d:4b:cf:92:66:5c:54:cc:e5:6f:27:23:e6:80:4d:
40:b9:d3:56:5c:a1:41:47:6b:8f:0d:e6:e0:ed:f1:
f7:c5:55:19:ec:53:f9:17:1f:c7:89:41:41:a4:03:
d9:d0:14:63:d1:78:aa:bf:6c:82:57:bd:70:55:d3:
76:c3:49:20:0c:de:0c:9f:d9:23:fa:c4:be:4b:6d:
1c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FA:41:DB:53:C7:A2:E3:8A:27:88:DE:21:2A:B7:C6:8C:F1:5E:67
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.13.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a6:8d:e3:39:89:41:52:e2:57:83:cd:44:cd:51:95:c6:ff:
ae:56:f1:b3:8d:ed:22:94:2c:22:69:bc:6c:2c:db:ef:3a:be:
ec:c0:4f:8f:d6:67:fc:14:62:92:30:d5:2d:04:18:11:7f:77:
71:5c:df:06:88:ed:d0:2d:24:6e:a0:14:f0:3e:ae:f5:39:09:
a2:41:5b:f5:49:bc:77:27:92:a7:38:04:33:92:bb:5a:51:92:
9a:4f:24:21:9f:c6:3f:3c:d3:04:1a:3e:3c:4f:74:f5:7b:1f:
e6:a4:97:19:08:c5:74:25:b6:53:2c:da:47:a3:95:01:cd:09:
76:4a:6d:9f:00:bb:e6:53:9a:a8:66:81:57:6b:8b:72:dd:c5:
97:05:05:4d:c9:9f:40:ea:87:da:22:47:9b:61:fb:3f:f3:55:
30:58:50:58:41:fb:38:4f:07:99:ad:c1:a1:f6:fc:c2:8d:d9:
22:19:2a:5b:00:0e:ec:d3:a7:70:8f:c5:17:f5:a4:90:93:68:
22:cc:bc:95:4e:79:6c:fc:9d:04:30:07:84:45:bf:e8:90:a2:
54:43:11:53:c6:5e:12:ca:46:91:9b:a8:10:ec:f8:c0:4a:4d:
70:8f:1f:19:9c:50:a9:ab:bd:1c:7d:78:10:ce:ed:51:d8:06:
2e:b0:fb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:37 2026 by rpki-client