Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3234203d3e203531383437.roa
File: 34352e3132382e31342e302f32332d3234203d3e203531383437.roa (raw, json)
Hash identifier: JqNf81e+9xZB/Ktbtl3NtzVud3yC2akiKQxuRnMeC20=
Subject key identifier: D5:DF:AA:AE:7A:B7:D1:55:C0:DF:7D:6D:20:B3:7E:1A:C5:EF:E1:B9
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 46B168F2B577AF77082B776E2B44EA48446E37F9
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3234203d3e203531383437.roa
Signing time: Tue 07 Apr 2026 13:42:57 +0000
ROA not before: Tue 07 Apr 2026 13:37:57 +0000
ROA not after: Tue 06 Apr 2027 13:42:57 +0000
asID: 51847
IP address blocks: 45.128.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 04:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b1:68:f2:b5:77:af:77:08:2b:77:6e:2b:44:ea:48:44:6e:37:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Apr 7 13:37:57 2026 GMT
Not After : Apr 6 13:42:57 2027 GMT
Subject: CN=D5DFAAAE7AB7D155C0DF7D6D20B37E1AC5EFE1B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:25:d3:9e:a8:ba:99:fb:45:59:43:4b:67:
c2:2d:47:48:aa:34:03:2c:dc:07:c1:b7:c3:e2:89:
4f:33:e6:d8:75:ca:a8:c0:6a:55:f1:4f:60:22:38:
9c:3b:4b:ce:c2:6d:48:d8:50:89:e1:7d:62:85:6d:
ca:15:dd:53:cb:96:c6:2a:a6:90:cf:84:6e:47:5f:
5f:eb:ea:48:7b:7b:1e:e6:83:c8:ca:5f:77:96:ba:
6f:c3:1e:26:8d:0e:27:b4:53:59:95:62:1c:10:ff:
8e:20:67:ab:50:a9:cd:bb:17:d4:7c:f6:47:cd:6b:
5a:64:b7:40:c0:99:79:55:85:73:20:4b:d7:4c:12:
91:d2:83:08:31:05:cb:1c:28:13:b6:f5:db:83:fa:
f0:45:ea:f0:f6:68:9c:77:8c:d7:6f:ef:78:97:38:
f7:c2:18:75:90:5b:1e:bd:7d:b0:a4:6b:71:17:29:
34:08:a6:5d:86:1e:d9:da:23:2e:3f:7d:9d:6c:fe:
63:96:8a:b0:78:f2:03:4a:d0:20:d8:52:cb:63:a9:
6d:24:98:7e:5c:f1:73:67:d0:be:be:84:e3:01:a7:
09:b2:a0:69:96:27:6a:3d:80:3c:95:50:d9:d1:23:
31:18:b8:48:37:6d:6c:01:be:97:9c:4f:48:83:22:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:AA:AE:7A:B7:D1:55:C0:DF:7D:6D:20:B3:7E:1A:C5:EF:E1:B9
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3234203d3e203531383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.14.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:b8:d9:b0:28:d2:24:d1:79:b8:b7:cb:8e:ad:bb:03:da:f7:
e3:fa:c0:b0:45:e8:2d:44:85:4a:a0:50:b1:82:49:d0:01:8f:
16:39:32:9a:ad:87:a2:75:eb:15:25:f2:18:4c:ed:4b:64:e6:
41:8c:3b:48:96:18:2d:c2:d0:42:28:c1:6d:d9:02:70:5a:7d:
0a:c2:0d:f9:41:21:d4:a1:35:23:9a:cc:46:c2:f2:8d:85:9e:
eb:dc:43:b1:e7:f7:b0:1c:e9:bc:0a:e0:40:71:ce:13:5c:cb:
4a:6b:8d:be:70:fe:47:cc:52:6b:d5:8a:56:6a:35:57:26:c6:
bb:41:8a:4a:c8:d5:9f:34:ca:16:16:7f:c1:8f:c6:b0:96:cd:
fa:87:6b:95:93:3d:02:99:9c:82:60:5e:42:cc:c6:49:42:16:
b8:5d:39:ff:ce:bf:94:64:37:d5:fc:c5:14:5f:de:a9:08:2d:
12:ec:a1:cb:d8:d8:b0:8b:ef:5f:03:4c:30:85:7b:73:5a:af:
e2:7a:c5:40:32:ae:26:be:e5:11:97:77:14:1b:69:0c:e8:56:
14:01:25:f2:2e:43:62:ba:b5:65:f3:c7:11:19:31:c7:9c:aa:
da:11:58:32:10:df:ae:32:6a:55:8c:54:5d:cb:e2:42:5c:25:
6f:fb:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:17:28 2026 by rpki-client