Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa
File: 34352e3133322e3231382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: UQsiKduA1v33Da0Rzkr/oNyuul/hn1P42a8bkwXTdKw=
Subject key identifier: 15:80:27:BF:DA:1D:61:22:BC:C2:18:30:EB:E6:05:67:A7:06:7C:8A
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 4C51650650E6076BE318C688F380B70650ED2B05
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa
Signing time: Sun 25 Oct 2026 12:10:04 +0000
ROA not before: Sun 25 Oct 2026 12:05:04 +0000
ROA not after: Sun 24 Oct 2027 12:10:04 +0000
asID: 834
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 12:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:51:65:06:50:e6:07:6b:e3:18:c6:88:f3:80:b7:06:50:ed:2b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Oct 25 12:05:04 2026 GMT
Not After : Oct 24 12:10:04 2027 GMT
Subject: CN=158027BFDA1D6122BCC21830EBE60567A7067C8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:de:df:87:1e:fa:f9:6e:b7:9f:ad:59:d4:
b9:78:3f:75:39:d1:b7:47:25:a6:bb:12:f3:d2:c3:
88:bc:d5:80:73:5d:e8:0f:02:35:57:77:41:90:e8:
ba:2a:dd:9f:21:57:7c:80:1c:e0:57:7d:2b:33:e1:
29:5c:a4:ce:d6:8e:c9:cc:04:72:7b:8c:21:88:48:
4f:f4:6f:c7:55:ee:3e:a9:ff:e3:a0:70:f4:55:27:
6f:92:31:d7:61:48:8a:b2:4f:42:67:78:c1:e7:40:
29:cd:58:bb:ee:b1:8f:30:11:9c:03:a3:38:65:cc:
13:43:f9:19:5c:85:d3:71:00:38:53:7b:52:6d:fa:
88:3c:4b:fb:c6:87:24:94:5a:77:98:56:e0:0c:6f:
50:43:f7:65:38:29:b7:c4:d1:94:b0:1b:96:87:75:
a5:b7:49:da:03:7e:78:bc:ea:97:9c:11:46:3c:ab:
5c:87:75:6b:42:90:f6:50:7e:71:6e:73:14:76:8f:
0b:34:d1:5e:fb:5e:41:ce:a7:1d:61:1e:99:ab:d6:
af:03:73:07:6e:86:11:19:e4:b8:dd:81:23:a0:ae:
e8:25:ea:77:08:7d:fa:67:6c:82:af:a3:de:53:91:
32:e3:76:93:d0:f6:35:48:1f:e1:72:63:74:de:e1:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:80:27:BF:DA:1D:61:22:BC:C2:18:30:EB:E6:05:67:A7:06:7C:8A
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
27:84:1a:91:45:f6:ac:7e:e5:fd:cb:0f:04:63:52:65:1d:bd:
71:71:1e:95:d4:26:10:8d:5e:7f:81:5d:f9:64:33:db:80:a6:
08:f6:b2:ea:39:06:e3:91:83:47:77:7b:2d:16:55:32:1f:f1:
58:d6:23:da:c2:9c:02:ab:6a:fc:07:e3:50:92:ab:b1:c0:54:
5c:9d:65:5e:4d:fd:65:72:4d:b5:ee:a1:af:bf:4c:ae:e9:e8:
6a:e5:94:df:8e:d2:8e:5d:e9:c5:9d:93:fa:d3:3b:e8:d7:5a:
7e:30:85:8d:cf:ab:60:e0:89:e1:2a:75:ef:69:b2:81:0f:46:
5d:fb:ae:10:49:e0:da:e3:8c:17:00:c7:79:cf:84:d3:6d:e4:
e6:68:93:a6:56:43:37:92:95:fa:f2:b8:0e:59:4a:4e:50:eb:
8f:30:e5:e5:89:6f:09:b0:10:2d:9f:9e:0f:eb:92:10:18:49:
56:cb:6c:f4:d9:b0:5f:7e:1b:18:5e:0e:50:4b:bf:4c:8b:8d:
6b:7b:35:41:c7:60:e0:07:e5:f4:92:34:b8:3f:71:9a:f3:55:
5e:8d:1d:92:7a:08:8b:cc:0a:80:13:f4:0c:40:66:69:bd:af:
76:03:f4:8c:a9:c5:1d:e8:4f:b4:3b:36:41:a9:99:46:d7:87:
1a:fa:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:45:45 2026 by rpki-client