Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa
File: 34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: h9UpEYcBJQPvnmmvG2hq4aqmuYuGKBso5cycO357wTk=
Subject key identifier: AE:8C:1A:D8:C9:46:DB:9A:77:20:3E:56:72:9A:17:7A:69:25:7D:3B
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 0E96107F5430A46B51BBBAC64776F5E947CA1603
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa
Signing time: Sun 16 Aug 2026 12:49:29 +0000
ROA not before: Sun 16 Aug 2026 12:44:29 +0000
ROA not after: Sun 15 Aug 2027 12:49:29 +0000
asID: 214143
IP address blocks: 45.149.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:96:10:7f:54:30:a4:6b:51:bb:ba:c6:47:76:f5:e9:47:ca:16:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Aug 16 12:44:29 2026 GMT
Not After : Aug 15 12:49:29 2027 GMT
Subject: CN=AE8C1AD8C946DB9A77203E56729A177A69257D3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:63:33:05:9c:e4:ac:55:ea:40:17:35:55:
a4:46:d7:5c:67:2e:e5:63:70:e5:a9:ee:df:db:a8:
5a:61:2e:34:e0:24:7a:9a:63:c9:5b:5e:a6:5d:8e:
e6:98:cf:ab:c3:ea:a1:e5:4f:e2:2f:5b:e4:4b:2b:
75:fd:e1:10:63:e4:c3:a4:fc:5b:b3:9b:68:d8:14:
2e:82:bc:a9:3e:d6:a9:ae:24:95:9b:c9:2f:f3:45:
78:5f:9f:f1:75:fe:91:f6:8a:2f:43:cb:3f:88:cd:
15:18:a1:aa:07:46:ec:a1:8e:d0:8e:6f:b1:37:5f:
ca:20:dc:75:fd:cb:88:7d:a4:c6:d0:7f:91:ee:03:
e8:b1:50:ac:6b:2f:3a:8c:6f:35:30:b8:39:7d:b0:
0a:d6:59:cc:42:96:15:7e:24:15:2f:e2:5d:f2:a9:
78:1b:e9:62:2b:6c:8b:fe:c8:62:52:40:92:1b:a6:
f0:f5:8e:c1:d2:70:c7:23:37:9c:a0:7c:e7:b4:87:
c8:28:c3:f8:70:af:2a:72:a8:16:e0:62:0c:33:29:
05:66:7c:da:39:5f:1b:a8:82:f5:8f:de:c9:c5:31:
7a:86:32:90:50:f5:41:94:ea:ac:47:4e:2d:ca:35:
6f:b3:b3:b3:8e:26:3c:70:34:1d:2a:a5:30:b8:3a:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8C:1A:D8:C9:46:DB:9A:77:20:3E:56:72:9A:17:7A:69:25:7D:3B
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.152.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b8:c4:05:16:51:a2:1a:5c:f4:81:31:bf:0b:1e:17:9e:75:
d1:c4:40:66:ba:d4:c1:8b:88:b5:0d:00:45:7e:42:86:4f:1f:
5c:1f:78:05:3a:69:ad:1f:64:58:19:19:f9:27:7a:56:80:c4:
41:68:fc:51:ba:ea:23:8b:81:3d:07:41:f3:b5:f3:23:aa:8b:
07:bf:92:a5:dd:cb:99:67:08:b2:bc:d3:1e:85:27:91:34:30:
ce:a6:62:67:62:87:33:76:9b:c5:8e:c5:ad:d4:99:ca:fe:5a:
36:c3:44:7d:a7:72:fb:43:69:22:9d:a0:27:57:b4:e6:7f:a7:
4b:13:8d:e4:25:a1:be:31:f9:f3:c8:34:38:1a:b2:51:a2:ef:
b1:d0:66:e8:03:78:99:34:ce:13:05:9c:48:ec:80:05:54:43:
07:06:b7:a2:18:30:f2:f7:e5:7d:b1:f9:0c:85:3a:50:17:25:
c6:87:2b:c2:0a:a3:c7:72:e9:18:74:76:c9:7c:33:90:b4:e7:
29:16:41:03:88:76:e2:f6:6f:b9:5f:2e:09:24:ee:92:77:6d:
70:1f:4c:30:6f:eb:e8:1f:87:6a:54:de:0a:1e:6a:05:b5:2b:
e2:42:a7:57:c9:e0:e1:6f:f4:28:ff:8e:26:48:03:d8:c0:82:
ef:81:6c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:34:27 2026 by rpki-client