Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20383334.roa
File: 34352e3134352e3234302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: N65fKKIQiWK/B/0UyHLOgxtcwemDVP53VJBq7bY3lws=
Subject key identifier: 5C:82:47:74:CF:71:0D:76:46:91:D7:BC:C6:35:BF:90:45:99:D9:27
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 51142136ECAF6F065F45FCFBDD4362AF50008B11
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20383334.roa
Signing time: Fri 25 Sep 2026 11:27:14 +0000
ROA not before: Fri 25 Sep 2026 11:22:14 +0000
ROA not after: Fri 24 Sep 2027 11:27:14 +0000
asID: 834
IP address blocks: 45.145.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:14:21:36:ec:af:6f:06:5f:45:fc:fb:dd:43:62:af:50:00:8b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 25 11:22:14 2026 GMT
Not After : Sep 24 11:27:14 2027 GMT
Subject: CN=5C824774CF710D764691D7BCC635BF904599D927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:7e:5a:28:e5:6e:7c:72:99:55:94:ac:95:
5b:6c:92:de:3f:1b:b1:8f:2e:ae:a9:c6:68:c8:02:
dc:10:f6:ae:64:6b:75:22:26:04:38:82:cd:0a:0a:
29:0d:97:0b:96:82:1e:76:9d:9a:f6:78:8d:b4:06:
62:48:c9:6d:72:da:ae:2d:fd:0f:37:6e:4e:9e:24:
1e:2b:c8:88:b1:03:e2:1a:fa:a7:92:34:30:9e:54:
8d:c3:53:03:2b:89:50:ff:b3:ea:89:59:15:7c:f3:
9d:3b:fb:1a:cb:0a:39:3a:a2:55:2e:2e:2c:83:88:
88:d3:77:96:e8:a5:ef:f1:ea:39:04:a7:1d:d3:a5:
e3:78:d6:61:80:93:bb:28:74:37:d3:54:b2:9b:47:
ce:4b:93:6c:f3:5a:4f:7b:e0:22:8f:d4:f1:b4:e1:
75:f8:f4:d4:4b:7e:97:1a:2c:d6:1b:40:80:42:cf:
42:70:4c:29:3b:d2:3c:3e:95:f2:19:32:d8:80:ef:
ed:ad:82:01:cd:f2:dc:2b:01:39:46:88:e8:a0:ab:
a7:10:39:78:9e:3b:4b:33:f1:b7:f6:de:3e:33:c0:
41:a5:b9:ea:a2:e0:ac:4b:50:9e:3c:90:64:41:9a:
74:c7:49:f8:b5:1b:5d:58:ab:b1:b5:70:13:dd:dc:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:82:47:74:CF:71:0D:76:46:91:D7:BC:C6:35:BF:90:45:99:D9:27
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/24
Signature Algorithm: sha256WithRSAEncryption
66:18:9e:ea:06:07:f2:86:ef:ed:e9:cd:dc:3e:84:23:a3:b5:
92:18:3a:63:c6:9e:41:7b:e7:d3:6a:44:d6:e1:4b:92:d7:f7:
cf:2c:26:df:ea:bd:45:bf:a5:91:56:ad:9f:ae:b9:e8:72:8f:
02:8a:a9:18:19:b4:b9:65:48:75:e5:c2:3f:5e:e7:35:be:67:
2b:f0:73:e7:8b:07:c2:fb:0c:3a:ea:c1:fa:6f:fe:b9:6a:ec:
59:86:2e:ff:fe:e4:53:c2:1b:57:1f:70:7c:0a:b6:ac:c3:d0:
05:7c:af:b6:5e:67:5d:4e:b8:84:b7:d6:16:69:f5:05:73:92:
e8:e8:51:5d:f3:98:cd:28:7a:8f:3a:df:84:b3:e3:de:47:45:
e4:26:2a:9d:d8:30:aa:5c:c6:86:71:d9:1b:ec:3b:c7:30:41:
c2:d8:44:98:d3:17:1f:c0:0d:f5:5b:9f:1a:ce:d6:24:ce:1e:
77:d4:c6:7c:40:a8:11:6a:88:19:54:23:38:7b:7d:d6:58:5b:
15:52:e7:35:62:95:7c:be:48:3d:4f:ba:40:49:08:a0:49:2d:
b3:86:75:56:55:54:48:ec:26:71:d4:85:ab:af:7f:2b:65:93:
9c:12:e7:de:73:16:d0:e9:5d:b8:45:29:7f:f7:5d:0a:09:96:
6f:fb:0c:af
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUURQhNuyvbwZfRfz73UNir1AAixEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNjA5MjUxMTIyMTRaFw0yNzA5MjQxMTI3MTRaMDMxMTAvBgNV
BAMTKDVDODI0Nzc0Q0Y3MTBENzY0NjkxRDdCQ0M2MzVCRjkwNDU5OUQ5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tX5aKOVufHKZVZSslVtskt4/
G7GPLq6pxmjIAtwQ9q5ka3UiJgQ4gs0KCikNlwuWgh52nZr2eI20BmJIyW1y2q4t
/Q83bk6eJB4ryIixA+Ia+qeSNDCeVI3DUwMriVD/s+qJWRV88507+xrLCjk6olUu
LiyDiIjTd5bope/x6jkEpx3TpeN41mGAk7sodDfTVLKbR85Lk2zzWk974CKP1PG0
4XX49NRLfpcaLNYbQIBCz0JwTCk70jw+lfIZMtiA7+2tggHN8twrATlGiOigq6cQ
OXieO0sz8bf23j4zwEGlueqi4KxLUJ48kGRBmnTHSfi1G11Yq7G1cBPd3DzVAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUXIJHdM9xDXZGkde8xjW/kEWZ2ScwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzNDM1MmUzMjM0
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtkfAw
DQYJKoZIhvcNAQELBQADggEBAGYYnuoGB/KG7+3pzdw+hCOjtZIYOmPGnkF759Nq
RNbhS5LX988sJt/qvUW/pZFWrZ+uuehyjwKKqRgZtLllSHXlwj9e5zW+Zyvwc+eL
B8L7DDrqwfpv/rlq7FmGLv/+5FPCG1cfcHwKtqzD0AV8r7ZeZ11OuIS31hZp9QVz
kujoUV3zmM0oeo8634Sz495HReQmKp3YMKpcxoZx2RvsO8cwQcLYRJjTFx/ADfVb
nxrO1iTOHnfUxnxAqBFqiBlUIzh7fdZYWxVS5zVilXy+SD1PukBJCKBJLbOGdVZV
VEjsJnHUhauvfytlk5wS595zFtDpXbhFKX/3XQoJlm/7DK8=
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:09:31 2026 by rpki-client