Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32332d3234203d3e20383334.roa
File: 34352e38312e35362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: nfXgpaZNd9mB0VGcuHMjgf9MpEVsciSQ6u+pbuPd+sY=
Subject key identifier: 51:AE:99:69:4A:C9:69:9C:52:90:9C:5E:F1:07:68:24:13:D3:92:26
Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial: 166ECE1D16290AECD6E67D9943387BD66D7E16E9
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32332d3234203d3e20383334.roa
Signing time: Sun 25 Oct 2026 06:52:29 +0000
ROA not before: Sun 25 Oct 2026 06:47:29 +0000
ROA not after: Sun 24 Oct 2027 06:52:29 +0000
asID: 834
IP address blocks: 45.81.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6e:ce:1d:16:29:0a:ec:d6:e6:7d:99:43:38:7b:d6:6d:7e:16:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Validity
Not Before: Oct 25 06:47:29 2026 GMT
Not After : Oct 24 06:52:29 2027 GMT
Subject: CN=51AE99694AC9699C52909C5EF107682413D39226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:0d:fb:59:49:0a:2e:6e:1b:b5:3b:bb:8f:
49:da:5e:19:3e:18:ae:d1:ce:13:d1:89:2c:5c:3a:
58:60:09:d0:bb:ab:f3:d1:d8:59:f9:bb:a4:d7:9c:
1d:3f:c2:07:d9:26:0b:38:14:3e:ec:20:24:96:30:
ae:d4:20:b4:ea:16:75:4c:16:6c:55:52:fb:8c:d8:
74:6a:2b:06:22:e5:31:44:29:bf:42:b6:a0:08:98:
d4:f5:91:75:de:05:90:ac:ed:e8:ef:72:2e:ba:91:
65:ac:c9:dc:09:5f:c5:85:f3:08:dd:f9:87:40:da:
46:2f:55:cf:ad:4c:75:c5:01:06:5f:fc:04:3a:1f:
0b:4a:73:df:a2:df:95:19:b5:2c:74:3c:51:4e:51:
a5:3a:5f:64:91:bf:c7:aa:11:ef:11:04:17:ef:ec:
e8:1d:24:f3:41:2b:e2:eb:e9:84:23:99:c2:53:73:
55:9d:80:d8:5e:fe:a2:79:f8:f1:2e:bf:bd:5b:9c:
9d:73:94:72:e2:51:a9:7a:03:95:41:9f:00:bf:f5:
ca:58:a6:6a:4b:19:f8:49:56:b2:b9:76:17:a0:98:
85:a6:52:b8:50:83:f2:de:95:b7:86:72:77:8d:60:
7b:6d:2f:bc:14:d0:d1:c4:13:74:ac:51:ab:6d:4a:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AE:99:69:4A:C9:69:9C:52:90:9C:5E:F1:07:68:24:13:D3:92:26
X509v3 Authority Key Identifier:
keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.56.0/23
Signature Algorithm: sha256WithRSAEncryption
56:33:e0:07:ae:70:1e:be:00:f0:92:0b:80:20:e5:22:40:1b:
f8:95:15:43:66:2c:23:07:0a:e7:d2:c9:af:f6:65:8c:a5:f9:
33:94:f6:d1:fe:04:04:3d:b3:7c:7b:a6:d1:53:87:a4:03:9a:
3a:dd:8f:80:5d:59:d4:9e:5d:77:8d:db:20:66:96:1f:28:f4:
9b:6d:99:a5:91:4a:94:fa:c2:a5:5f:7e:0f:5d:df:aa:55:e7:
c3:50:06:28:e3:fe:e8:04:3e:93:ca:b0:fe:46:fd:6c:f5:d6:
2e:b3:51:e3:94:d9:5d:bc:d8:4c:5c:57:c6:19:33:fc:11:ed:
c1:fb:11:d5:04:62:30:91:89:40:68:1f:6a:b5:1a:30:88:c2:
e7:32:fc:7d:a5:95:2c:0e:3c:3d:d0:a8:c8:bb:c2:44:99:76:
1e:c5:9a:40:c2:82:06:b7:6b:e8:52:7b:ed:c5:a8:c4:3c:d9:
62:0b:25:03:22:9e:d5:62:b5:30:86:ea:2c:9e:ed:ea:cf:c1:
1a:8d:b9:42:e9:0b:b2:e6:6f:0d:6f:a1:2e:ce:64:b6:10:02:
ad:de:47:3e:e0:a7:3a:85:15:bd:ce:c8:3d:f0:58:bd:31:5b:
a4:6e:05:80:fc:7d:c4:08:93:62:a2:73:55:a1:79:84:71:6e:
60:13:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:22:18 2026 by rpki-client