Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20313532313739.roa
File: 34352e38392e3135302e302f32332d3234203d3e20313532313739.roa (raw, json)
Hash identifier: pJt3lRo7AtbrB9Ofm8iNyLq3QtcPyv7c6+8LJ1rkifw=
Subject key identifier: 0B:7D:41:02:73:87:5B:8C:16:84:3B:66:32:86:C0:BC:4D:E5:F2:55
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 503123C46ADF080C42CA692BB9E2534D4BCD9A64
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20313532313739.roa
Signing time: Tue 19 May 2026 15:47:15 +0000
ROA not before: Tue 19 May 2026 15:42:15 +0000
ROA not after: Tue 18 May 2027 15:47:15 +0000
asID: 152179
IP address blocks: 45.89.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:31:23:c4:6a:df:08:0c:42:ca:69:2b:b9:e2:53:4d:4b:cd:9a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: May 19 15:42:15 2026 GMT
Not After : May 18 15:47:15 2027 GMT
Subject: CN=0B7D410273875B8C16843B663286C0BC4DE5F255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1d:f4:53:63:f6:e1:2d:9e:dc:b9:ce:59:c0:
7d:80:51:b9:dc:07:31:3c:80:63:b4:c0:a8:48:cf:
29:fb:aa:6c:01:da:d8:58:7b:49:3b:be:b1:77:ba:
4d:fd:c3:d9:21:31:6b:ac:47:a3:e7:7f:7e:4e:08:
8d:6c:69:a5:43:8c:da:c0:5b:11:63:27:02:6f:da:
f3:10:d6:4b:b2:92:68:5d:5a:a0:f8:c7:5c:f6:0b:
50:cd:6f:c7:78:44:cf:22:a1:3a:22:16:1f:c3:c9:
6e:5b:fc:a0:5b:46:3b:50:e7:5e:fc:c5:d3:09:20:
18:64:ac:93:fb:e6:26:bc:f2:97:f6:4a:51:b8:1b:
92:6d:ee:af:fb:b4:e9:cc:a2:25:4f:8a:b4:8c:ba:
33:93:de:eb:d0:50:c4:70:f9:19:6c:b9:c8:c6:ae:
b6:22:b1:e2:68:7f:b4:e5:47:ac:1c:c9:ed:5e:6a:
6b:62:a4:70:a1:e2:8f:79:c7:81:44:37:97:88:c7:
02:4b:35:d6:be:63:29:e3:c2:bf:4c:15:78:28:3d:
ea:37:17:4d:92:47:3f:ad:67:5b:6a:fd:55:57:46:
05:dd:36:fa:9e:55:6c:8a:e0:94:f4:c7:35:70:13:
59:f6:41:1d:0c:a6:7f:20:bf:9f:88:69:84:60:12:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7D:41:02:73:87:5B:8C:16:84:3B:66:32:86:C0:BC:4D:E5:F2:55
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.150.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:53:d3:20:5b:e7:d3:f5:34:11:4f:ef:b0:47:72:56:03:b1:
ef:e8:c6:7d:72:b4:ce:c5:41:d1:2f:91:42:df:c0:53:d7:0c:
0e:3e:61:1f:11:96:b5:05:4b:08:37:b4:74:49:4f:08:fc:af:
d8:2e:9f:64:6d:4f:bd:7f:76:1b:bf:31:54:5f:7b:f3:51:f0:
58:0b:b5:14:94:9c:28:c8:7c:71:b1:a3:8e:66:d1:c1:4a:55:
bf:26:55:05:83:5b:ab:5e:2a:a4:5a:6b:2d:8e:10:76:6c:5f:
b0:aa:b6:80:91:d7:0c:e5:d7:09:09:db:91:64:ea:1b:01:c5:
bf:fe:10:54:1c:07:40:6f:57:1c:e2:0c:06:78:b4:1e:1f:6d:
35:76:96:c7:a0:71:dc:f8:f0:ac:f7:72:f7:79:c2:50:58:d9:
e8:44:83:72:9e:7d:a2:4d:1e:f5:56:8e:3c:08:65:79:d8:db:
e2:03:ed:9c:a3:8c:fe:8b:67:ff:84:b2:fc:42:94:9d:31:c0:
eb:a9:fa:7c:f5:13:f6:6c:9d:fe:c0:ec:e2:60:d4:a9:66:a9:
fe:d3:29:a8:7c:27:bc:c6:d9:f6:43:dc:98:25:65:0b:fe:40:
30:e4:39:1f:b0:89:5d:35:7a:b0:dd:49:66:41:10:ad:63:da:
31:52:6a:58
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUUDEjxGrfCAxCymkrueJTTUvNmmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNjA1MTkxNTQyMTVaFw0yNzA1MTgxNTQ3MTVaMDMxMTAvBgNV
BAMTKDBCN0Q0MTAyNzM4NzVCOEMxNjg0M0I2NjMyODZDMEJDNERFNUYyNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgHfRTY/bhLZ7cuc5ZwH2AUbnc
BzE8gGO0wKhIzyn7qmwB2thYe0k7vrF3uk39w9khMWusR6Pnf35OCI1saaVDjNrA
WxFjJwJv2vMQ1kuykmhdWqD4x1z2C1DNb8d4RM8ioToiFh/DyW5b/KBbRjtQ5178
xdMJIBhkrJP75ia88pf2SlG4G5Jt7q/7tOnMoiVPirSMujOT3uvQUMRw+RlsucjG
rrYiseJof7TlR6wcye1eamtipHCh4o95x4FEN5eIxwJLNda+Yynjwr9MFXgoPeo3
F02SRz+tZ1tq/VVXRgXdNvqeVWyK4JT0xzVwE1n2QR0Mpn8gv5+IaYRgEgUNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUC31BAnOHW4wWhDtmMobAvE3l8lUwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzgzOTJlMzEzNTMw
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzNTMyMzEzNzM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LVmWMA0GCSqGSIb3DQEBCwUAA4IBAQAOU9MgW+fT9TQRT++wR3JWA7Hv6MZ9crTO
xUHRL5FC38BT1wwOPmEfEZa1BUsIN7R0SU8I/K/YLp9kbU+9f3YbvzFUX3vzUfBY
C7UUlJwoyHxxsaOOZtHBSlW/JlUFg1urXiqkWmstjhB2bF+wqraAkdcM5dcJCduR
ZOobAcW//hBUHAdAb1cc4gwGeLQeH201dpbHoHHc+PCs93L3ecJQWNnoRINynn2i
TR71Vo48CGV52NviA+2co4z+i2f/hLL8QpSdMcDrqfp89RP2bJ3+wOziYNSpZqn+
0ymofCe8xtn2Q9yYJWUL/kAw5DkfsIldNXqw3UlmQRCtY9oxUmpY
-----END CERTIFICATE-----
Generated at Thu Jun 11 16:08:26 2026 by rpki-client