Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e20383334.roa
File: 34352e3134302e33362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: LkuyOUFT6A7i8fbcZb57FGRk7SeYEGIEMWj/go0frnQ=
Subject key identifier: 13:4E:04:89:53:68:C0:C4:76:03:A9:33:82:CD:69:C3:B4:08:C8:9E
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 6CE36DE63A154C609AAB41D9724D761030CD19BA
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e20383334.roa
Signing time: Thu 05 Mar 2026 07:56:23 +0000
ROA not before: Thu 05 Mar 2026 07:51:23 +0000
ROA not after: Thu 04 Mar 2027 07:56:23 +0000
asID: 834
IP address blocks: 45.140.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e3:6d:e6:3a:15:4c:60:9a:ab:41:d9:72:4d:76:10:30:cd:19:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Mar 5 07:51:23 2026 GMT
Not After : Mar 4 07:56:23 2027 GMT
Subject: CN=134E04895368C0C47603A93382CD69C3B408C89E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:93:d5:79:83:49:a6:37:c5:e6:f6:01:77:
e3:5f:9b:65:94:fc:9b:06:29:a8:e7:d4:bc:54:95:
95:9a:96:d7:de:15:9c:65:c6:9d:d7:3a:9b:2f:f3:
c9:93:05:ec:5d:97:9e:58:38:99:99:03:8c:43:cd:
93:44:35:21:b1:52:1b:21:d1:48:f5:4e:bc:96:51:
da:e8:91:fd:71:fe:06:68:e0:45:a9:44:65:87:c1:
d2:02:48:34:05:01:7c:3d:ff:c1:5d:38:94:52:14:
5f:d6:d3:99:0e:9d:9e:c5:a1:6d:c3:51:fd:a6:a3:
d2:68:44:c7:22:66:3e:f9:2c:15:95:7f:af:b4:1f:
de:90:17:cb:23:e8:dd:43:c6:f2:b0:2d:f6:ac:b0:
fe:fd:96:04:5c:ab:30:ea:9f:6d:9c:f3:3c:b7:91:
a6:46:22:2c:70:0c:cd:0f:1f:a6:a1:00:ec:96:16:
67:0a:8f:38:ff:3a:6b:e0:d5:19:ad:98:07:c6:d1:
fc:63:2d:34:72:29:ce:3a:dd:70:5b:e9:97:6d:97:
ff:c7:86:51:ec:51:18:fb:e5:66:e6:4e:57:56:7f:
9f:6e:76:8b:16:53:2c:60:a4:fe:fa:01:74:5b:58:
00:52:f3:f6:fb:9a:1d:94:54:2b:7e:02:71:48:b1:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4E:04:89:53:68:C0:C4:76:03:A9:33:82:CD:69:C3:B4:08:C8:9E
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b9:7d:b9:77:1c:01:58:0b:76:6f:e9:65:1a:d4:7b:31:63:
82:15:fe:57:a2:27:d5:75:d0:8c:1d:d2:0f:31:9f:a0:91:7e:
d0:f8:73:fc:8d:f3:88:cf:8e:60:f0:8f:26:64:22:8f:e9:9d:
43:77:8f:59:14:a3:5b:6a:3c:db:38:a1:aa:ab:4b:5f:36:07:
3b:d4:e5:2c:6b:61:03:b9:4e:ab:8d:40:aa:8c:10:a1:25:1e:
01:d4:23:77:87:33:37:34:7a:3c:3b:09:55:b4:ce:39:ed:96:
e7:7d:aa:08:ac:85:a4:f8:d0:ee:e9:ae:c0:e4:59:88:8f:9c:
f3:48:65:27:15:af:07:5c:15:bc:d5:ce:39:12:c3:dd:e8:87:
a6:13:d9:2b:fc:67:54:f2:33:08:99:94:b8:7f:ba:fb:09:70:
13:af:f0:2e:ec:12:17:3a:9c:39:9e:5f:94:ea:16:46:87:3e:
9f:e9:1c:44:af:39:5c:e0:4d:7c:c7:d9:70:9e:a1:17:75:2d:
be:e6:9b:7f:69:64:be:a4:8a:f2:1d:fc:70:be:94:d0:3d:1f:
d9:16:c4:a7:e5:f2:91:82:f3:be:b7:92:1e:d1:2c:48:0d:1f:
27:90:d7:31:00:fd:9d:d6:e3:5d:5e:93:bd:42:cf:f6:ca:16:
cf:68:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:12:22 2026 by rpki-client