Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39302e302f32342d3234203d3e20343031353630.roa
File: 34362e31382e39302e302f32342d3234203d3e20343031353630.roa (raw, json)
Hash identifier: zVRK1gMKqEp8cyjD1YHBOhdkMOzGjNP1hfCXW2EE9mM=
Subject key identifier: 0A:03:FC:A1:9C:3B:B5:F9:6D:0B:E6:F9:B5:10:DD:4F:C7:BE:B8:1A
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 7426A74FDD7A83DDBD406DAAE326AC94712C1BEA
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39302e302f32342d3234203d3e20343031353630.roa
Signing time: Fri 11 Sep 2026 03:21:49 +0000
ROA not before: Fri 11 Sep 2026 03:16:49 +0000
ROA not after: Fri 10 Sep 2027 03:21:49 +0000
asID: 401560
IP address blocks: 46.18.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:26:a7:4f:dd:7a:83:dd:bd:40:6d:aa:e3:26:ac:94:71:2c:1b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Sep 11 03:16:49 2026 GMT
Not After : Sep 10 03:21:49 2027 GMT
Subject: CN=0A03FCA19C3BB5F96D0BE6F9B510DD4FC7BEB81A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:83:11:3d:67:e1:30:d4:39:af:a6:44:a2:
31:a7:ff:49:c3:4b:74:d0:23:77:5a:06:3e:13:ed:
f9:eb:05:78:5b:eb:8d:0d:e7:78:05:15:38:ca:20:
3e:58:4e:24:e5:44:86:32:be:ac:58:ba:0c:11:a8:
bd:a6:b9:2f:c1:d4:5e:c7:70:9d:6f:3d:53:b7:f8:
9c:10:6a:03:66:06:cf:90:f4:62:50:65:ad:c7:bb:
d0:08:fd:7b:de:db:24:bd:e6:3f:3a:3c:e7:64:20:
5d:04:aa:ec:bc:2d:25:c2:ae:ed:41:53:98:f6:01:
9e:e2:ed:ed:aa:91:72:53:8d:a1:52:95:65:51:8d:
9d:5b:1e:e1:67:5b:cd:12:ad:84:24:a9:0f:87:ba:
7e:93:aa:de:01:56:27:23:c5:d1:1b:c5:d5:66:bd:
d6:8f:f9:3d:26:f8:ab:ce:e4:74:91:6d:2b:63:b4:
2c:23:83:d1:07:46:29:c6:49:d3:5b:0b:87:c8:95:
a1:4f:35:53:91:60:43:78:ed:38:de:18:a0:84:f7:
e0:d8:85:e0:b0:e2:75:e8:4c:fd:ed:c7:4f:84:b1:
98:57:ec:a6:17:f4:dc:51:3e:ef:a2:e7:57:47:03:
9e:b4:84:ee:a6:17:9d:24:8f:66:7b:c2:9e:ab:22:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:03:FC:A1:9C:3B:B5:F9:6D:0B:E6:F9:B5:10:DD:4F:C7:BE:B8:1A
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39302e302f32342d3234203d3e20343031353630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.90.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ce:dc:da:15:5b:1c:3e:bf:3b:df:d2:43:b9:99:ed:c2:ec:
f5:9a:99:44:06:93:c1:d7:04:65:c6:8c:e1:3a:c6:e2:e4:89:
1b:54:e7:7b:f8:37:ba:95:97:26:84:85:00:0c:7a:c4:e3:39:
8c:c7:36:f3:dc:fe:86:46:d5:f6:19:e5:84:44:f2:00:b3:99:
51:fd:a7:10:dc:d7:1a:f1:af:7a:d5:78:c1:42:7b:ba:5e:75:
1f:66:d3:07:4a:03:59:3e:ff:b5:15:0a:69:12:06:f0:38:28:
4c:22:1b:be:da:6c:35:cf:21:8a:1d:83:23:b4:2f:02:36:62:
32:9a:26:ec:68:a7:8e:85:76:ce:f0:ba:96:f3:80:69:87:47:
d6:3d:48:fa:0a:96:e2:2a:f0:d3:ab:9d:46:42:c4:8d:32:44:
c0:e1:99:4a:dc:15:5a:03:17:30:c8:84:8d:f0:a9:44:03:8c:
17:18:be:f4:4f:fc:41:66:95:c0:c0:5a:09:0d:23:53:41:02:
71:a9:12:4b:50:48:1a:f9:80:93:0f:11:de:b6:a3:70:72:80:
11:fd:9d:58:f6:4d:83:99:4f:53:62:6f:32:69:51:9f:57:5e:
39:27:59:f6:c6:dc:c3:fc:b1:7a:7c:29:be:01:b2:0b:89:7d:
26:5d:8f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:40 2026 by rpki-client