Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138352e302f32342d3234203d3e203231383539.roa
File: 34352e39332e3138352e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: K2gG1J8xfRteHFLiadMui72WYG2KJyYFSRzS7MOYM+I=
Subject key identifier: 9E:AF:C5:DF:87:30:C9:9B:03:45:AB:0E:14:3C:E8:5C:1D:BA:00:9D
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 3886C5470DB6D4A27B744AA1A449DF6DD926125B
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138352e302f32342d3234203d3e203231383539.roa
Signing time: Mon 20 Oct 2025 02:50:19 +0000
ROA not before: Mon 20 Oct 2025 02:45:19 +0000
ROA not after: Mon 19 Oct 2026 02:50:19 +0000
asID: 21859
IP address blocks: 45.93.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 19:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:86:c5:47:0d:b6:d4:a2:7b:74:4a:a1:a4:49:df:6d:d9:26:12:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Oct 20 02:45:19 2025 GMT
Not After : Oct 19 02:50:19 2026 GMT
Subject: CN=9EAFC5DF8730C99B0345AB0E143CE85C1DBA009D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:89:e1:a3:a3:37:c2:51:cd:24:d7:51:eb:
b9:72:55:81:e8:a8:ab:30:71:90:64:b0:f2:77:06:
7c:9a:0d:e6:4d:1b:e5:11:98:8b:f2:23:41:81:79:
5f:5c:39:59:0e:b1:7f:aa:50:7f:f7:93:e0:fd:bb:
d9:47:71:79:fa:21:18:40:3c:2a:68:d5:f4:4a:f5:
ac:d1:19:6a:f3:8c:51:6a:39:2c:cf:e6:57:a9:3c:
0e:76:c8:83:33:ca:a4:73:41:9c:32:e2:0f:51:89:
04:6c:56:d3:29:75:98:ee:14:d4:c7:4b:5f:e4:8a:
69:85:18:d4:c8:f8:3c:9c:52:22:6c:10:de:62:52:
85:3a:a1:8f:47:78:e6:d2:fe:42:fd:34:ea:09:1e:
25:ee:c1:ac:7f:91:25:82:f0:e5:60:8e:be:bc:88:
28:6b:9e:4f:5a:a6:01:f0:ec:e5:bf:a1:d1:48:6d:
bf:fd:70:70:aa:68:d9:d5:3f:ec:6c:04:4f:79:41:
2c:7b:03:6b:63:51:b4:be:d5:39:15:de:4f:32:2f:
db:98:19:4c:92:02:a4:1d:c4:47:ee:90:f6:21:07:
cb:33:56:e6:ca:56:66:ce:95:24:ad:f0:be:fb:be:
bc:04:9a:ed:b5:0c:81:b6:6a:4a:bb:a0:08:f0:bc:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AF:C5:DF:87:30:C9:9B:03:45:AB:0E:14:3C:E8:5C:1D:BA:00:9D
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138352e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:0c:d9:1f:59:c0:e7:d9:2b:03:b5:25:3c:d2:5d:26:8a:7e:
81:4a:72:82:b1:39:2b:5f:89:00:8d:14:07:ef:12:15:45:1a:
38:bf:27:b4:65:12:9d:8b:4c:22:a8:21:57:43:22:ca:e2:70:
96:5f:84:84:ab:86:aa:fa:36:3a:97:67:26:92:91:59:f4:8b:
c0:c0:73:40:a8:9e:45:24:3b:0b:85:3d:94:42:71:50:ae:1a:
ad:7c:eb:81:ac:09:4b:c3:21:0e:a6:92:01:4b:ba:b2:e6:27:
1d:11:a4:6c:d8:b0:ea:24:38:1a:d2:9a:81:cf:4d:f6:e2:ba:
70:48:6e:ba:62:20:aa:6a:bd:03:d2:ed:c2:33:8f:c6:8f:6d:
31:74:39:d4:6a:d1:ef:4c:e7:63:de:e4:2d:89:55:86:04:3a:
54:d2:96:b5:7e:d4:53:1e:57:8c:85:17:5c:22:e7:7c:83:4d:
ae:93:6c:60:65:29:ca:09:de:c6:60:48:95:47:93:5f:cc:43:
a0:c6:47:5f:a3:c2:51:ca:27:ff:98:78:4d:c0:e8:27:a2:8d:
7a:dc:2c:a8:f1:a1:40:23:7a:87:eb:c9:44:33:4c:6b:9e:ce:
86:57:a7:90:21:91:8e:bd:e7:28:38:46:6b:c4:e7:34:c6:bf:
c0:ee:3c:d3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOIbFRw221KJ7dEqhpEnfbdkmElswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNTEwMjAwMjQ1MTlaFw0yNjEwMTkwMjUwMTlaMDMxMTAvBgNV
BAMTKDlFQUZDNURGODczMEM5OUIwMzQ1QUIwRTE0M0NFODVDMURCQTAwOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyL4nho6M3wlHNJNdR67lyVYHo
qKswcZBksPJ3BnyaDeZNG+URmIvyI0GBeV9cOVkOsX+qUH/3k+D9u9lHcXn6IRhA
PCpo1fRK9azRGWrzjFFqOSzP5lepPA52yIMzyqRzQZwy4g9RiQRsVtMpdZjuFNTH
S1/kimmFGNTI+DycUiJsEN5iUoU6oY9HeObS/kL9NOoJHiXuwax/kSWC8OVgjr68
iChrnk9apgHw7OW/odFIbb/9cHCqaNnVP+xsBE95QSx7A2tjUbS+1TkV3k8yL9uY
GUySAqQdxEfukPYhB8szVubKVmbOlSSt8L77vrwEmu21DIG2akq7oAjwvGDPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUnq/F34cwyZsDRasOFDzoXB26AJ0wHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzkzMzJlMzEzODM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM4MzUzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1d
uTANBgkqhkiG9w0BAQsFAAOCAQEAXgzZH1nA59krA7UlPNJdJop+gUpygrE5K1+J
AI0UB+8SFUUaOL8ntGUSnYtMIqghV0MiyuJwll+EhKuGqvo2OpdnJpKRWfSLwMBz
QKieRSQ7C4U9lEJxUK4arXzrgawJS8MhDqaSAUu6suYnHRGkbNiw6iQ4GtKagc9N
9uK6cEhuumIgqmq9A9LtwjOPxo9tMXQ51GrR70znY97kLYlVhgQ6VNKWtX7UUx5X
jIUXXCLnfINNrpNsYGUpygnexmBIlUeTX8xDoMZHX6PCUcon/5h4TcDoJ6KNetws
qPGhQCN6h+vJRDNMa57OhlenkCGRjr3nKDhGa8TnNMa/wO480w==
-----END CERTIFICATE-----
Generated at Sat Oct 25 05:40:39 2025 by rpki-client