Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35372e302f32342d3234203d3e20313436383133.roa
File: 34352e38312e35372e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: hHONwC8tHkVgEmziYCsSxG5xBVIdPuV2Hinm0EWw2ZY=
Subject key identifier: 0D:84:1A:2C:BA:5A:6B:E0:EF:0C:9B:9C:A6:DF:53:19:EC:AA:D5:4E
Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial: 38EDD847D816720F97CA0FBD6039EBE075801CAE
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35372e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 06:06:29 +0000
ROA not before: Fri 25 Sep 2026 06:01:29 +0000
ROA not after: Fri 24 Sep 2027 06:06:29 +0000
asID: 146813
IP address blocks: 45.81.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ed:d8:47:d8:16:72:0f:97:ca:0f:bd:60:39:eb:e0:75:80:1c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Validity
Not Before: Sep 25 06:01:29 2026 GMT
Not After : Sep 24 06:06:29 2027 GMT
Subject: CN=0D841A2CBA5A6BE0EF0C9B9CA6DF5319ECAAD54E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:72:08:03:3a:05:c5:be:6a:e5:85:a8:40:
43:58:c9:4f:50:00:f6:a2:e2:89:02:17:36:ff:36:
ca:50:54:f4:f0:1a:fa:f4:89:33:d1:a3:2b:2d:63:
4e:5e:f9:d8:30:c5:03:a9:4f:3c:bd:54:4d:ac:72:
5c:09:f7:2e:b6:0a:ec:80:73:05:8e:a6:ec:02:d7:
39:f1:3e:12:53:57:6c:55:68:3a:38:2b:60:f9:bd:
34:c2:2c:07:1b:56:55:9e:33:60:2d:51:2c:aa:2b:
04:d9:2e:c9:03:25:89:e2:6c:88:b8:e5:33:19:0a:
3f:ca:c5:b9:35:2e:4a:52:5c:d0:a6:a1:78:d1:83:
0e:b4:b3:16:1b:5f:88:a5:ea:c0:72:01:49:b9:3c:
2c:82:eb:79:0b:d6:fe:ca:8f:b9:76:13:eb:8d:a7:
40:d4:04:e3:1f:59:ba:31:a8:11:cc:36:bb:73:bc:
44:64:ad:4e:89:81:11:ee:33:72:1b:e2:bc:86:53:
3d:ec:1a:6e:fb:9f:42:20:71:99:ad:00:f2:de:cd:
67:09:9b:a6:40:de:a8:d8:6e:0f:5a:28:9d:6d:37:
15:24:92:17:f4:a4:32:99:d7:72:5c:85:b3:09:b6:
fc:a1:c2:46:82:c7:9d:cd:b4:cc:b3:54:02:47:8e:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:84:1A:2C:BA:5A:6B:E0:EF:0C:9B:9C:A6:DF:53:19:EC:AA:D5:4E
X509v3 Authority Key Identifier:
keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35372e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.57.0/24
Signature Algorithm: sha256WithRSAEncryption
72:cf:8e:fe:c5:0d:2b:03:0e:9e:cb:54:cc:90:cf:e7:4b:50:
e9:f2:8c:05:d9:07:0f:34:88:3a:40:59:2e:01:2c:89:80:6e:
59:bf:9d:12:ba:d8:05:20:85:43:23:6a:52:d0:d7:ad:7a:0d:
76:16:9f:7d:73:79:32:0d:39:a2:07:86:4e:7c:db:6f:fb:02:
1a:ab:2d:05:47:0a:79:88:1a:42:cd:94:1b:8a:1e:2a:bd:d1:
6b:7a:61:69:b6:d5:03:9a:05:66:99:23:76:2f:d6:ad:37:68:
ec:51:10:fa:d6:c2:48:8a:22:fd:8c:4d:3e:dc:86:54:21:e4:
22:d3:48:59:9d:b1:af:35:1b:c1:cd:16:e6:bb:43:9c:3e:bc:
a4:1e:68:6c:95:9c:80:e2:d8:6a:a2:1d:6f:44:bc:6b:ec:6e:
4f:99:61:0e:72:d7:a3:4c:14:38:d6:b4:c0:72:56:80:2c:42:
4c:21:46:47:46:5c:42:ab:ae:cd:87:a9:14:dd:76:51:ab:53:
38:ac:98:93:dd:10:16:35:d5:42:4f:a0:5a:b5:ba:fd:e1:15:
8b:8b:0e:58:8d:0d:c0:9e:08:57:11:94:b4:e6:2e:9f:2d:37:
c2:33:32:7c:05:2d:be:f1:9d:dd:35:56:4a:02:6b:cc:f5:7f:
91:93:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 16:23:20 2026 by rpki-client