Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e203235313938.roa
File: 34352e3134302e33362e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: acXl+FlmIbHC4+3rSflcCCKI/UVcOew6lP938gKKr3s=
Subject key identifier: CE:D8:E0:8A:A0:02:76:67:7E:C3:66:11:AF:33:58:EC:C2:4A:E4:2A
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 486DAFBE8FCFF1E69F0A7B99ACD8DF265AC01CCC
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e203235313938.roa
Signing time: Thu 20 Aug 2026 07:48:53 +0000
ROA not before: Thu 20 Aug 2026 07:43:53 +0000
ROA not after: Thu 19 Aug 2027 07:48:53 +0000
asID: 25198
IP address blocks: 45.140.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6d:af:be:8f:cf:f1:e6:9f:0a:7b:99:ac:d8:df:26:5a:c0:1c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Aug 20 07:43:53 2026 GMT
Not After : Aug 19 07:48:53 2027 GMT
Subject: CN=CED8E08AA00276677EC36611AF3358ECC24AE42A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:cd:86:7b:3c:62:8d:c5:40:d5:77:b1:73:
87:c9:24:6f:e1:28:13:33:16:4c:a1:21:d3:3d:84:
e7:f4:2b:a6:83:ff:4e:94:df:ef:87:42:04:6e:20:
ce:cf:1c:57:0b:25:a4:f7:a0:76:26:d2:a5:83:d3:
10:54:80:85:12:5d:a7:f0:82:eb:41:a6:17:94:28:
35:a2:dd:78:2b:a2:da:df:b6:99:b8:77:09:3f:da:
c7:0a:0e:6e:63:85:ce:5d:92:44:1f:d2:75:4f:01:
41:e6:29:0e:a7:64:0d:9c:e1:2f:86:5c:92:8c:d4:
9e:39:ef:0c:3d:1a:eb:08:6b:85:92:3b:ac:b5:1a:
78:36:1b:99:3f:16:8f:a8:a8:e5:aa:c9:8d:7a:0e:
6d:4b:f3:ca:f2:5a:b7:ca:f7:6d:a3:21:0b:7b:29:
1f:af:d4:35:94:d3:ab:19:f9:8d:f0:bf:8d:56:b2:
0f:3b:d7:b0:67:d3:53:a5:e3:5c:52:ff:59:80:4b:
ac:4b:b6:00:41:92:95:9f:4f:5b:97:4c:f4:ce:ee:
b7:46:00:7e:63:dd:3c:e1:a6:71:1f:2c:e0:1f:1c:
a0:eb:03:0d:87:a3:55:9c:ae:79:bd:06:3f:a6:e5:
ee:f9:23:89:bb:2d:29:d7:c9:b6:5a:74:c6:c6:6d:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:E0:8A:A0:02:76:67:7E:C3:66:11:AF:33:58:EC:C2:4A:E4:2A
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:96:af:18:ad:d4:97:9b:39:7a:a4:3c:fc:0c:92:0a:b4:4e:
99:dc:6a:14:8a:94:09:3d:be:b3:7c:79:98:b7:0c:10:8c:dc:
b6:21:fe:00:de:94:8f:ac:e4:8a:1d:01:b9:d8:31:92:84:0b:
ea:4a:26:7d:c2:e8:ef:39:ce:f0:43:6e:58:9b:08:91:7b:93:
3e:3e:e9:9c:e9:25:2a:10:ba:51:50:31:bb:c2:b5:c6:e2:a5:
a0:ed:ce:2f:a8:cb:46:93:3a:1b:8f:d8:e1:69:ba:07:fc:b6:
d1:e8:54:a7:9a:10:ab:eb:a0:87:06:c7:8d:8b:be:9c:36:75:
7b:f6:bd:b9:66:1a:0c:8f:f0:5b:0d:e0:8f:96:9d:40:16:ff:
15:46:63:4c:0b:49:8f:5b:27:c7:56:59:59:78:ce:90:93:b9:
c3:7d:28:22:4d:a2:ae:9c:4e:10:bf:71:f2:d9:6e:54:33:ce:
7b:e2:e7:41:67:81:d5:d8:f5:64:3b:4e:c6:4d:fe:44:ff:20:
f7:26:e9:4d:6d:15:ee:99:39:fe:12:f5:20:1a:30:b9:0b:1a:
19:f4:ad:b4:69:63:a9:99:4c:76:6f:d8:d6:c7:b8:e3:b8:a1:
3e:77:93:66:e4:66:5c:82:27:db:5b:94:6e:35:ea:2c:9c:a7:
33:4e:e0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:07 2026 by rpki-client