Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32332d3234203d3e20323134343332.roa
File: 34352e38312e35362e302f32332d3234203d3e20323134343332.roa (raw, json)
Hash identifier: jTYk6R8qRCYlAGPxNdkm45gT8NS2V3wjwOqhFHVfbDc=
Subject key identifier: 90:99:6F:BB:89:63:A6:92:BF:18:A0:14:7B:B1:29:AE:03:82:D0:7C
Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial: 7047670F59A75C0B962FADEBB31230F8A2AC1C2C
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32332d3234203d3e20323134343332.roa
Signing time: Mon 24 Aug 2026 09:20:51 +0000
ROA not before: Mon 24 Aug 2026 09:15:51 +0000
ROA not after: Mon 23 Aug 2027 09:20:51 +0000
asID: 214432
IP address blocks: 45.81.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 04:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:47:67:0f:59:a7:5c:0b:96:2f:ad:eb:b3:12:30:f8:a2:ac:1c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Validity
Not Before: Aug 24 09:15:51 2026 GMT
Not After : Aug 23 09:20:51 2027 GMT
Subject: CN=90996FBB8963A692BF18A0147BB129AE0382D07C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:ef:50:73:e6:a6:13:75:41:ed:4b:79:b5:
37:e7:11:10:5c:cc:21:c8:23:80:ab:7f:2d:4b:cd:
68:08:f4:34:25:3f:9c:6b:13:ca:ef:6b:88:3f:43:
55:36:b0:6d:cf:62:6d:ff:2d:2b:c8:2a:87:43:01:
fb:96:39:cc:7f:3e:5c:a5:02:0e:6e:ba:68:df:d0:
c6:a2:9e:25:36:fa:d5:db:b1:07:6a:87:7f:ca:ca:
61:b1:fb:e6:e2:94:0f:e5:51:19:fb:74:03:da:f1:
fd:43:35:84:eb:62:18:4a:da:2e:f9:89:3a:96:a0:
26:d4:89:f7:5a:33:49:a4:cc:71:07:51:5c:9d:02:
bb:5b:5e:9b:a5:12:e7:a6:27:87:1b:09:5c:bc:64:
46:86:5f:74:64:9f:04:3f:2d:ee:12:10:4b:4f:e4:
78:84:c8:e5:e1:ae:a9:0a:a5:5e:68:75:0d:e2:e6:
b7:0f:5a:3c:50:20:c9:4a:24:a6:ab:43:80:1f:d3:
91:07:72:ed:05:60:32:73:df:a1:f1:9d:5e:e6:a2:
d0:42:05:15:2f:85:95:d1:00:c3:9a:7b:49:75:e6:
e0:b1:85:bc:63:35:d4:56:db:c4:9e:f9:7b:53:5c:
7d:1f:d5:b3:94:ee:8a:91:9f:22:27:18:59:a3:56:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:6F:BB:89:63:A6:92:BF:18:A0:14:7B:B1:29:AE:03:82:D0:7C
X509v3 Authority Key Identifier:
keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32332d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.56.0/23
Signature Algorithm: sha256WithRSAEncryption
71:6a:49:77:4c:ab:2e:2f:00:4d:58:24:31:6c:fa:a5:e1:75:
6a:9c:b9:40:8c:71:dc:77:6e:df:25:25:39:9d:22:c9:76:5d:
c7:85:50:2c:d5:11:3f:6f:10:33:65:06:c9:e0:2e:44:82:7f:
c7:10:33:99:9e:19:79:88:7c:97:02:b6:da:9a:1a:41:24:31:
2c:8a:aa:53:55:f8:42:c6:f9:f5:52:8b:61:d4:c5:15:5e:aa:
fb:c0:c6:28:06:6e:a8:e8:79:e2:9a:a8:93:d7:e0:3d:01:d5:
90:24:14:0f:ea:32:36:9f:77:9a:1c:e6:49:de:e1:6a:40:e6:
ad:1f:0c:82:57:ba:54:31:76:fb:a7:3c:93:e0:12:e3:c3:2e:
d4:ac:a1:41:ab:16:38:c5:50:54:6d:a3:eb:77:e2:bc:52:2e:
3e:4c:49:13:e5:d6:9a:88:7f:2f:e9:a0:21:74:99:22:78:7b:
56:13:6c:79:f8:ce:cb:e5:67:f4:e1:b5:e3:ec:7d:16:85:73:
2d:4f:77:2f:ab:cd:04:3e:e9:4b:e8:64:f3:fc:68:49:cf:92:
7a:01:6a:3e:8a:ab:48:c3:ac:79:7d:7f:10:d0:05:7a:24:06:
04:2c:e8:fa:6e:c2:6c:79:9e:5e:4d:42:3b:4e:9b:25:ff:64:
c8:1d:0d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 20:27:30 2026 by rpki-client