Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32342d3234203d3e20323135333438.roa
File: 34352e39332e3138342e302f32342d3234203d3e20323135333438.roa (raw, json)
Hash identifier: WuhjfEGxgnUblhWiSTciY5olX30b9mmfrhJBU4OPYFY=
Subject key identifier: 04:DD:FF:22:CA:B8:18:D1:54:AE:79:CC:FB:94:A9:AD:EE:62:A9:D8
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 432FFFD9BB11E3F545BD85072CEB4A83C7575223
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32342d3234203d3e20323135333438.roa
Signing time: Mon 20 Oct 2025 06:51:44 +0000
ROA not before: Mon 20 Oct 2025 06:46:44 +0000
ROA not after: Mon 19 Oct 2026 06:51:44 +0000
asID: 215348
IP address blocks: 45.93.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 19:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:2f:ff:d9:bb:11:e3:f5:45:bd:85:07:2c:eb:4a:83:c7:57:52:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Oct 20 06:46:44 2025 GMT
Not After : Oct 19 06:51:44 2026 GMT
Subject: CN=04DDFF22CAB818D154AE79CCFB94A9ADEE62A9D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:4c:f7:22:a8:4c:7a:95:76:1c:76:19:b2:
69:36:9b:6e:5b:05:b9:ec:9d:66:17:bb:bf:53:5f:
1f:1c:fb:24:ee:7d:27:b7:ed:eb:0c:d2:fa:a9:e8:
1c:a0:30:0e:cf:30:28:71:04:e3:d7:c3:21:5b:58:
15:f9:0e:7b:1b:17:f1:d5:87:6b:96:b8:6d:99:47:
b6:d2:c6:a9:46:3e:01:e3:09:31:0d:67:45:8c:1b:
7b:3e:10:b0:43:5e:9e:b4:67:22:4c:cb:a4:fb:53:
9b:ad:af:a2:1b:28:0d:fc:82:5c:12:ec:6c:ce:5c:
ec:0c:fe:00:80:fa:fb:fc:49:0f:44:12:90:4f:ba:
f3:66:24:1d:6c:32:68:64:02:24:c2:f0:61:6b:78:
8f:32:30:37:47:bf:e6:01:75:b0:15:77:bd:11:c4:
52:24:bd:56:48:f1:df:2b:0c:08:52:7b:32:ea:0d:
d2:a5:d6:07:f6:d2:62:24:27:b1:f2:59:22:05:02:
3d:fd:f2:8d:93:a0:99:b9:9c:85:b5:cc:0d:4f:de:
81:1c:9a:f0:46:48:ce:6d:9a:52:b7:5a:6d:a1:55:
67:3c:07:5a:28:5d:88:98:4d:0a:48:12:4c:79:26:
51:d3:b7:5b:bb:45:f7:1d:6e:be:fc:48:73:4a:ac:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DD:FF:22:CA:B8:18:D1:54:AE:79:CC:FB:94:A9:AD:EE:62:A9:D8
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32342d3234203d3e20323135333438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d0:90:d0:b8:2f:b0:3c:2e:da:99:d5:49:4c:df:00:48:83:
65:b2:87:44:2e:6d:c8:35:16:4c:58:30:6e:d6:a8:9e:24:8d:
e8:cb:b7:46:68:b8:07:2d:48:04:2a:f7:9e:a4:c7:76:e6:8a:
cf:6f:ab:32:6f:85:c8:72:09:6d:c6:35:0e:cc:f5:8b:f4:80:
54:d6:2e:89:b4:01:86:40:37:b3:01:d9:53:6d:45:8e:40:e6:
e0:7b:64:e2:93:3b:6a:60:45:29:ae:08:22:9c:fc:2e:88:15:
32:f2:24:8a:05:1d:20:54:ff:d7:ec:5d:91:d3:27:ad:d7:b2:
a4:d7:05:59:9a:5b:08:6c:72:9c:57:13:d2:9f:e1:9d:18:db:
2f:2e:ed:13:10:b3:3d:d5:31:67:7f:ef:5c:ed:b7:a7:8f:fc:
99:0d:ec:62:9c:f0:e3:da:62:d9:e1:95:6c:b4:f5:89:9b:c2:
0e:98:bd:e9:cc:e5:7c:98:0d:81:08:ff:12:c1:43:35:31:e5:
db:a4:56:98:fa:21:87:a2:88:7e:a4:ef:86:7d:af:b3:26:54:
9b:2c:b5:d7:be:d6:0c:9b:89:70:f9:d4:7f:15:4e:4b:c3:25:
42:0c:c1:2b:79:22:1b:2d:29:19:85:93:b5:7c:f9:f4:e9:40:
09:bf:ce:07
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQy//2bsR4/VFvYUHLOtKg8dXUiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNTEwMjAwNjQ2NDRaFw0yNjEwMTkwNjUxNDRaMDMxMTAvBgNV
BAMTKDA0RERGRjIyQ0FCODE4RDE1NEFFNzlDQ0ZCOTRBOUFERUU2MkE5RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+Uz3IqhMepV2HHYZsmk2m25b
BbnsnWYXu79TXx8c+yTufSe37esM0vqp6BygMA7PMChxBOPXwyFbWBX5DnsbF/HV
h2uWuG2ZR7bSxqlGPgHjCTENZ0WMG3s+ELBDXp60ZyJMy6T7U5utr6IbKA38glwS
7GzOXOwM/gCA+vv8SQ9EEpBPuvNmJB1sMmhkAiTC8GFreI8yMDdHv+YBdbAVd70R
xFIkvVZI8d8rDAhSezLqDdKl1gf20mIkJ7HyWSIFAj398o2ToJm5nIW1zA1P3oEc
mvBGSM5tmlK3Wm2hVWc8B1ooXYiYTQpIEkx5JlHTt1u7Rfcdbr78SHNKrHznAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUBN3/Isq4GNFUrnnM+5Spre5iqdgwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzkzMzJlMzEzODM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzMzNDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LV24MA0GCSqGSIb3DQEBCwUAA4IBAQCS0JDQuC+wPC7amdVJTN8ASINlsodELm3I
NRZMWDBu1qieJI3oy7dGaLgHLUgEKveepMd25orPb6syb4XIcgltxjUOzPWL9IBU
1i6JtAGGQDezAdlTbUWOQObge2TikztqYEUprgginPwuiBUy8iSKBR0gVP/X7F2R
0yet17Kk1wVZmlsIbHKcVxPSn+GdGNsvLu0TELM91TFnf+9c7benj/yZDexinPDj
2mLZ4ZVstPWJm8IOmL3pzOV8mA2BCP8SwUM1MeXbpFaY+iGHooh+pO+Gfa+zJlSb
LLXXvtYMm4lw+dR/FU5LwyVCDMEreSIbLSkZhZO1fPn06UAJv84H
-----END CERTIFICATE-----
Generated at Sat Oct 25 05:40:39 2025 by rpki-client