Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20313436383133.roa
File: 34352e3133322e3231382e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: 4tViCxHZACJUPLOtFDOUewCW8pCA0DgmGLFtm0QDsDA=
Subject key identifier: 89:A3:C8:9D:1F:4B:99:16:E3:C6:86:39:56:53:C2:A1:97:D8:04:F7
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 50466F7EFBC6A85997E83429B66AA72A11F08F92
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 12:09:26 +0000
ROA not before: Fri 25 Sep 2026 12:04:26 +0000
ROA not after: Fri 24 Sep 2027 12:09:26 +0000
asID: 146813
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 11:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:46:6f:7e:fb:c6:a8:59:97:e8:34:29:b6:6a:a7:2a:11:f0:8f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 25 12:04:26 2026 GMT
Not After : Sep 24 12:09:26 2027 GMT
Subject: CN=89A3C89D1F4B9916E3C686395653C2A197D804F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:cb:23:a7:17:ae:dc:b5:ac:9f:95:5b:b5:
59:99:38:1c:41:9f:16:22:36:5b:a5:b8:00:a1:c7:
87:28:ef:34:4b:82:87:92:66:cc:02:80:64:3f:e3:
b4:1e:2a:9c:30:e7:cd:79:2f:72:7c:52:55:86:f9:
b8:67:7d:8c:71:1a:35:8d:92:47:b4:91:86:e9:57:
aa:9c:bf:ca:ce:e1:08:53:d9:a4:98:13:e2:c5:ee:
dc:0a:7d:28:03:65:ac:69:ef:52:bc:32:a8:c5:0b:
39:3b:c0:24:d2:77:66:03:86:31:0d:64:3d:36:f0:
c5:17:a3:3d:f4:f6:f4:ae:38:c8:f1:3f:cf:83:cc:
d2:40:aa:82:b1:d3:2d:35:6a:1f:ef:3e:ce:08:90:
88:10:14:15:12:82:87:9a:d4:b9:0a:c5:fb:c4:12:
21:a2:71:d9:36:03:a9:f5:77:4e:7e:a5:7a:d0:a4:
f9:1d:eb:47:61:d7:2a:e2:b3:19:21:bd:5d:0d:aa:
b8:63:96:03:b9:8b:39:5b:92:e4:c0:c8:23:2e:0e:
97:1e:69:1b:05:cc:19:4a:bc:ce:63:09:af:30:23:
9e:8d:ac:e9:65:2d:51:72:40:7c:3a:a3:a1:54:b4:
c2:d9:2b:3f:e4:9a:43:37:fa:7d:73:fa:30:45:2d:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A3:C8:9D:1F:4B:99:16:E3:C6:86:39:56:53:C2:A1:97:D8:04:F7
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f5:a8:88:e8:e1:37:2d:06:43:f1:fc:23:39:a2:fd:3d:9b:
c8:a2:90:8e:05:b7:ab:08:a6:d9:0b:3c:20:4d:81:76:fb:7f:
10:ba:92:a1:95:36:c9:2c:af:84:09:b5:ef:47:d3:57:1f:c0:
1b:9d:5e:ff:13:31:ad:97:b5:0f:76:ef:1a:87:c9:66:5b:42:
dd:ee:cf:24:a6:4b:d8:34:94:6f:03:52:04:3b:93:92:c5:76:
73:90:6c:04:4f:9a:cc:c7:66:3e:9f:cb:8f:05:50:56:9b:29:
b3:e6:39:ca:b6:3e:4c:ba:f5:b2:b1:12:55:f7:77:fd:a6:9c:
f9:33:20:5c:01:7c:91:c3:8f:50:b5:00:db:16:31:ed:58:a6:
fd:0c:60:ef:ce:bb:d6:54:15:aa:d4:2f:40:9b:e9:02:5f:dc:
c3:32:1f:0e:0d:39:e4:5f:a7:04:c3:b1:98:b6:78:0a:8b:a2:
ff:21:15:f3:b2:9a:88:98:35:75:01:c8:71:ae:2b:14:19:40:
7b:d5:e9:de:61:ed:40:0a:3f:61:cb:0e:cb:96:6f:0d:d1:65:
50:b1:f8:97:3e:d5:86:36:0b:b0:9f:8d:af:d5:67:84:8c:6b:
2e:b8:5d:4e:f9:99:75:6c:94:9d:c7:6e:6c:5e:2e:51:06:f5:
47:2a:c9:11
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUUEZvfvvGqFmX6DQptmqnKhHwj5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNjA5MjUxMjA0MjZaFw0yNzA5MjQxMjA5MjZaMDMxMTAvBgNV
BAMTKDg5QTNDODlEMUY0Qjk5MTZFM0M2ODYzOTU2NTNDMkExOTdEODA0RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUXcsjpxeu3LWsn5VbtVmZOBxB
nxYiNluluAChx4co7zRLgoeSZswCgGQ/47QeKpww5815L3J8UlWG+bhnfYxxGjWN
kke0kYbpV6qcv8rO4QhT2aSYE+LF7twKfSgDZaxp71K8MqjFCzk7wCTSd2YDhjEN
ZD028MUXoz309vSuOMjxP8+DzNJAqoKx0y01ah/vPs4IkIgQFBUSgoea1LkKxfvE
EiGicdk2A6n1d05+pXrQpPkd60dh1yrisxkhvV0NqrhjlgO5izlbkuTAyCMuDpce
aRsFzBlKvM5jCa8wI56NrOllLVFyQHw6o6FUtMLZKz/kmkM3+n1z+jBFLQ5NAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUiaPInR9LmRbjxoY5VlPCoZfYBPcwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzMzMyMmUzMjMx
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzODMxMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAthNowDQYJKoZIhvcNAQELBQADggEBAGD1qIjo4TctBkPx/CM5ov09m8iikI4F
t6sIptkLPCBNgXb7fxC6kqGVNsksr4QJte9H01cfwBudXv8TMa2XtQ927xqHyWZb
Qt3uzySmS9g0lG8DUgQ7k5LFdnOQbARPmszHZj6fy48FUFabKbPmOcq2Pky69bKx
ElX3d/2mnPkzIFwBfJHDj1C1ANsWMe1Ypv0MYO/Ou9ZUFarUL0Cb6QJf3MMyHw4N
OeRfpwTDsZi2eAqLov8hFfOymoiYNXUByHGuKxQZQHvV6d5h7UAKP2HLDsuWbw3R
ZVCx+Jc+1YY2C7Cfja/VZ4SMay64XU75mXVslJ3HbmxeLlEG9UcqyRE=
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:24 2026 by rpki-client