Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137322e302f32342d3234203d3e20323035373333.roa
File: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (raw, json)
Hash identifier: VnT6f7eup0/WhMwv7EXnvyzWk35rQ2W/LJCTBqUDvJk=
Subject key identifier: 9F:90:55:5E:95:B7:C4:74:8F:CC:34:0E:E9:4E:04:65:40:B6:17:D7
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 05EE1450C0AA199DA9FC3B703F9B81F6DADE5ECC
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137322e302f32342d3234203d3e20323035373333.roa
Signing time: Fri 04 Sep 2026 17:49:33 +0000
ROA not before: Fri 04 Sep 2026 17:44:33 +0000
ROA not after: Fri 03 Sep 2027 17:49:33 +0000
asID: 205733
IP address blocks: 45.8.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ee:14:50:c0:aa:19:9d:a9:fc:3b:70:3f:9b:81:f6:da:de:5e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 4 17:44:33 2026 GMT
Not After : Sep 3 17:49:33 2027 GMT
Subject: CN=9F90555E95B7C4748FCC340EE94E046540B617D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:73:11:95:08:ed:61:8f:cf:4a:45:8c:08:
ad:5f:99:7d:0e:82:f0:0e:da:58:ec:22:fe:12:6e:
78:a0:21:98:83:79:ec:99:1f:35:94:50:48:c6:82:
53:4c:2b:4e:9c:12:10:59:32:c6:f2:dc:77:9c:51:
25:9f:fe:d3:10:0f:23:ec:eb:12:eb:6f:98:fb:08:
d1:d8:9c:ef:3b:29:96:1a:44:08:d4:0d:3c:0a:83:
b7:9d:ad:01:7f:48:b9:68:9c:b2:03:cb:2e:cc:c6:
15:ff:3b:1b:58:14:90:73:7a:f9:6f:72:a1:86:86:
86:ee:38:fd:da:1c:72:62:d9:4e:ac:6d:01:48:aa:
9c:1b:ce:b8:4b:5b:fd:37:29:f5:02:20:4a:2f:06:
a1:da:03:70:7f:9a:fe:91:af:b1:da:44:c1:33:f1:
f0:13:c5:3d:35:41:a3:fa:8c:3e:70:56:47:d2:08:
12:e9:ad:bf:72:b3:f0:48:dc:91:0e:55:83:cb:c3:
05:b0:ab:14:55:fb:a9:52:9a:bb:79:8d:d2:35:9e:
21:3e:9b:ed:08:c0:87:8e:49:51:03:2d:32:2f:25:
df:de:9e:85:29:46:1d:93:40:43:7c:55:1f:b2:4c:
e3:05:5a:df:b9:40:f4:8b:0f:5a:48:7f:a2:e7:53:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:90:55:5E:95:B7:C4:74:8F:CC:34:0E:E9:4E:04:65:40:B6:17:D7
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137322e302f32342d3234203d3e20323035373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.172.0/24
Signature Algorithm: sha256WithRSAEncryption
59:5f:ab:3f:e3:3b:85:5c:38:70:56:a0:08:7c:67:63:9f:f7:
3e:68:6c:8b:fc:2d:0d:e6:81:80:10:2d:fe:27:55:af:ee:fa:
52:b3:bd:04:3d:36:a8:6a:54:8d:7a:1f:28:b1:7a:e4:a8:35:
25:94:b6:89:9f:10:87:c1:90:33:f4:d9:ac:85:9f:d2:23:2c:
51:eb:7c:1f:39:8f:5d:a4:51:4d:b6:81:0a:6f:98:3a:1e:56:
d8:48:2c:ac:4e:f6:d3:f9:c1:08:3f:98:51:02:04:ee:ce:cf:
7a:ed:13:4a:c6:80:5f:d3:f0:1f:ec:a1:3e:18:63:91:d3:96:
85:d3:b8:d4:cd:22:d2:20:86:07:ba:b1:02:e2:3d:90:89:5c:
89:21:93:8a:7d:20:68:b1:e7:20:7d:d0:87:e9:f5:fe:a8:7c:
bb:02:9e:d3:97:bf:e2:99:e9:f3:2a:3c:a3:88:bd:49:af:55:
48:21:bd:bc:32:57:b2:d1:39:74:3d:70:5d:4a:44:36:d9:42:
8a:09:b0:c2:ea:5e:04:79:a1:20:67:e7:07:62:c8:a2:e6:38:
3c:0f:7a:a3:ee:49:1e:e6:cb:b9:67:28:3e:33:d2:5a:f3:c0:
15:9f:3b:e4:7b:1b:cc:17:c6:da:d0:8b:78:37:50:2f:2f:e4:
6c:bc:d9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 17:30:38 2026 by rpki-client