Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e38392e302f32342d3234203d3e203134323933.roa
File: 34362e31382e38392e302f32342d3234203d3e203134323933.roa (raw, json)
Hash identifier: eaFzGlJw258kJsKfSKUPYmqK68JrgHotUuQnQX7sY90=
Subject key identifier: 04:66:2B:02:08:0C:69:38:1F:FE:B4:7D:69:44:80:D4:68:BA:92:DA
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 5C53CA1D4A0790C0A1B225A4B8DC35637F47A84B
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e38392e302f32342d3234203d3e203134323933.roa
Signing time: Mon 18 May 2026 17:04:51 +0000
ROA not before: Mon 18 May 2026 16:59:51 +0000
ROA not after: Mon 17 May 2027 17:04:51 +0000
asID: 14293
IP address blocks: 46.18.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:53:ca:1d:4a:07:90:c0:a1:b2:25:a4:b8:dc:35:63:7f:47:a8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: May 18 16:59:51 2026 GMT
Not After : May 17 17:04:51 2027 GMT
Subject: CN=04662B02080C69381FFEB47D694480D468BA92DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:d2:c7:45:f9:fd:c7:43:cb:7e:db:9c:35:
08:de:f1:29:96:a0:4c:a9:11:4a:ce:00:ab:7c:f6:
58:62:b3:ad:d3:9d:94:6e:2a:5f:eb:ab:81:fa:71:
c9:d4:92:9c:a9:04:9e:fc:1a:13:b0:d4:23:ed:69:
f7:9e:1e:31:a1:0e:fa:55:93:3b:dc:c8:2f:05:fd:
e4:e9:9e:2f:08:04:6e:95:80:ac:08:81:9b:66:b3:
39:6a:ac:24:2c:c1:96:4f:54:ab:d6:59:bb:71:0a:
b4:bd:62:af:81:54:1c:67:09:7f:f3:45:23:76:e5:
6d:6b:da:cd:48:ad:15:fc:18:84:e9:29:18:63:16:
b8:66:0c:65:d6:bb:1d:61:4e:1f:6a:48:61:eb:81:
84:b0:c8:53:37:ed:76:14:b6:b9:7b:30:ad:3c:17:
2c:51:cb:22:00:b3:a5:20:70:aa:41:b0:09:dc:7e:
85:bc:a0:6b:65:b9:cf:6d:c4:3d:f8:61:75:c9:f3:
3d:42:f1:64:04:ba:9f:e1:e6:91:2e:b0:85:6c:f0:
7c:48:4d:5a:03:fd:a9:2b:85:45:3b:e5:08:c8:d4:
a7:97:42:9f:b5:cc:23:51:0e:ec:fc:58:5b:73:8d:
3e:bf:b2:11:10:ee:26:51:34:83:aa:38:cb:e6:78:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:66:2B:02:08:0C:69:38:1F:FE:B4:7D:69:44:80:D4:68:BA:92:DA
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e38392e302f32342d3234203d3e203134323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:11:c5:29:76:5e:b8:ac:b3:18:f2:32:1c:c4:00:60:61:2d:
fe:ce:6d:79:b0:b2:87:f8:5d:f1:ec:84:ba:07:68:9a:a2:9c:
41:73:2a:78:a5:3e:42:09:40:67:89:0d:4e:ef:cc:7c:63:b3:
02:bb:97:2a:17:48:59:b4:92:bb:b6:08:b3:df:d3:12:be:19:
af:30:49:d0:71:cc:0d:ff:fe:6b:fe:5b:df:c1:61:d1:ad:71:
f8:d0:b0:53:f3:4c:9a:26:4c:18:8b:95:93:fc:59:af:ba:ed:
58:23:88:c9:0d:d4:ff:4e:50:f2:b6:96:7f:eb:3e:9c:b3:fd:
31:75:e7:7d:79:f1:7f:04:2d:fa:07:d6:cc:55:4b:1f:5f:94:
cd:41:b3:ac:b6:f2:38:8d:a7:4c:e5:f2:db:6b:95:e3:7e:2a:
aa:ae:71:f9:97:7f:b7:ab:62:0c:d3:ba:55:f3:d6:6b:73:5c:
28:30:9a:51:78:06:5c:f3:76:22:7b:6d:49:51:04:55:40:66:
b1:90:48:a8:91:e8:82:1f:a7:f1:c8:68:af:90:5d:13:6e:e3:
33:68:16:03:79:9a:0e:a9:35:80:71:43:69:17:fe:0c:22:4e:
f5:7b:c3:2c:a8:0e:3e:13:5a:37:18:2c:2a:80:b1:dd:42:98:
3b:59:b3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:39:04 2026 by rpki-client