Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231372e302f32342d3234203d3e20313532363938.roa
File: 34352e3133322e3231372e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier: 5e907ixyBdWQ6qXveaOpQ0UOHNWRVIQtGMfWuUrv9rQ=
Subject key identifier: 6B:86:21:43:5B:17:61:1E:24:81:84:58:8F:8F:D3:AA:B4:6E:E7:0A
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 344C3C90CE035E7FFE7BBE613B75F109F3D32E16
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231372e302f32342d3234203d3e20313532363938.roa
Signing time: Wed 19 Aug 2026 12:38:10 +0000
ROA not before: Wed 19 Aug 2026 12:33:10 +0000
ROA not after: Wed 18 Aug 2027 12:38:10 +0000
asID: 152698
IP address blocks: 45.132.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4c:3c:90:ce:03:5e:7f:fe:7b:be:61:3b:75:f1:09:f3:d3:2e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Aug 19 12:33:10 2026 GMT
Not After : Aug 18 12:38:10 2027 GMT
Subject: CN=6B8621435B17611E248184588F8FD3AAB46EE70A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:9e:0e:eb:80:07:14:65:bf:90:0d:da:6e:
52:22:c0:70:81:81:82:28:22:25:99:5c:92:66:7d:
72:46:f3:20:10:52:aa:01:ef:74:19:d0:ff:af:eb:
dc:56:3f:88:2f:b8:b5:b0:8d:5f:b7:6b:52:cc:11:
95:0b:15:eb:dc:8d:f7:c2:bf:14:6b:39:d8:43:e6:
a8:46:58:ce:cf:59:7c:d2:4a:ac:24:31:65:78:0b:
3a:8c:4e:6c:20:4e:91:27:b4:df:f8:68:2c:fe:c1:
29:6e:f7:6c:ef:9e:77:17:f3:23:17:bc:e3:b2:82:
eb:d3:e8:72:6e:a2:00:bf:75:95:58:ec:04:ca:4d:
89:b8:80:a4:8e:2a:e3:cd:6f:69:49:0d:9e:b5:f4:
e3:81:e4:91:79:d2:e7:eb:56:c5:2c:ff:66:ef:0c:
7d:93:a3:8f:f3:47:50:9f:78:cc:50:83:d0:c6:48:
1f:e1:e6:61:30:8b:0a:d3:ff:0c:e1:c6:fc:91:76:
32:02:3c:7e:3f:50:08:e3:d2:53:cd:c7:f2:86:d8:
b1:08:d4:9b:8c:33:ca:07:71:7b:5e:a8:28:c6:5b:
a0:cc:6e:d4:f6:19:7d:ba:0a:b1:07:88:ee:82:5a:
8c:fe:54:f7:4a:f6:65:82:c8:28:65:df:b3:d6:e8:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:86:21:43:5B:17:61:1E:24:81:84:58:8F:8F:D3:AA:B4:6E:E7:0A
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231372e302f32342d3234203d3e20313532363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.217.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e3:09:1c:ee:14:fa:86:fc:c0:95:7d:5c:7b:57:93:55:dc:
57:cc:a7:35:87:f9:e7:32:c7:d8:58:0a:4a:f2:c7:e5:76:20:
aa:e3:0c:d4:4b:38:8a:3a:1a:1c:16:bf:20:94:82:d1:2f:42:
24:2e:d4:c6:e6:cf:8c:6e:46:de:c8:1d:eb:e9:ad:48:c1:43:
63:ed:44:23:b3:f1:33:c6:ce:c7:2f:30:3e:af:1c:c1:c1:6a:
63:31:50:b8:ca:bf:83:c8:a6:4a:ca:24:c4:53:21:1f:a6:83:
71:9a:07:c5:f3:dc:02:a3:b8:97:df:8d:f5:bb:f7:88:a5:99:
8c:12:ac:7f:e8:9a:90:f2:ea:a4:42:e3:fd:ff:2b:e8:cd:c0:
19:3f:55:75:0a:8e:96:03:d1:c0:91:0a:af:63:bc:ab:79:3c:
1f:7c:07:5e:ff:5a:88:fd:73:fe:58:23:2b:9d:8f:4a:2e:93:
18:45:e7:d8:8c:fa:7d:8c:c7:cb:10:54:d7:7e:cb:82:05:35:
1a:22:94:b6:13:84:b1:fe:02:ef:47:68:f6:b4:4e:42:71:88:
b1:b5:74:63:a7:4d:16:23:e5:ea:47:bf:d5:21:33:da:7a:23:
d6:e5:ac:5b:c7:9b:44:a0:a5:eb:cf:61:6c:de:f6:51:7d:c3:
3f:7a:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:10:15 2026 by rpki-client