Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233332e302f32342d3234203d3e203233383635.roa
File: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (raw, json)
Hash identifier: 6hPXDpxoSp9EuEfmiuPb4M+w0B+aK71BZeoPnB8RMa8=
Subject key identifier: 6F:76:0C:CB:75:F4:48:9C:05:7E:70:80:12:FD:1B:D3:43:7D:F8:42
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 6B38E7CF73D15BA38E9E22DC4BFE84F6B479EA47
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233332e302f32342d3234203d3e203233383635.roa
Signing time: Tue 15 Sep 2026 05:49:35 +0000
ROA not before: Tue 15 Sep 2026 05:44:35 +0000
ROA not after: Tue 14 Sep 2027 05:49:35 +0000
asID: 23865
IP address blocks: 46.102.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 05:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:38:e7:cf:73:d1:5b:a3:8e:9e:22:dc:4b:fe:84:f6:b4:79:ea:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Sep 15 05:44:35 2026 GMT
Not After : Sep 14 05:49:35 2027 GMT
Subject: CN=6F760CCB75F4489C057E708012FD1BD3437DF842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ca:85:e8:c1:82:62:a4:d0:12:c5:f8:01:28:
4f:e1:74:1c:73:dd:4f:3e:95:5e:f2:86:77:13:35:
90:ab:29:d3:cd:56:87:83:45:3c:3c:9b:a7:4b:24:
e4:17:7a:29:9a:ed:05:04:95:cd:89:79:26:c0:ea:
08:44:50:48:9e:45:9c:52:e6:87:db:b1:de:69:4d:
07:8d:4e:94:5e:73:11:67:19:43:78:79:52:9e:a3:
c9:fe:a0:94:ea:58:26:48:5a:e0:88:71:52:f1:b0:
93:61:1e:45:6a:48:f5:38:e8:2f:bd:5e:09:6d:08:
9a:c6:f4:a4:14:38:84:84:ea:ac:31:2a:6d:88:72:
d5:ff:20:73:96:13:eb:60:91:7c:43:65:f6:ab:4a:
b7:c3:d9:4a:09:a8:d1:da:d9:2e:3d:a3:bb:47:4c:
6a:43:bc:16:7e:8b:62:ac:12:fd:4c:fa:3e:e8:cc:
cf:72:5a:ac:59:39:26:26:56:6c:db:89:e1:17:c4:
04:2a:7a:2d:ab:da:63:c4:04:b9:93:1c:8e:ac:ae:
2d:9f:24:24:c3:67:04:b5:64:77:16:8e:75:75:3e:
15:d4:28:f2:91:b6:51:84:72:2e:55:3c:c8:8e:04:
5c:2e:d2:74:a9:2e:3d:bb:57:af:77:fd:7d:b9:68:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:76:0C:CB:75:F4:48:9C:05:7E:70:80:12:FD:1B:D3:43:7D:F8:42
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233332e302f32342d3234203d3e203233383635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.233.0/24
Signature Algorithm: sha256WithRSAEncryption
70:98:d4:02:76:79:e6:3b:75:4b:5b:de:ed:ab:54:88:41:a5:
be:66:7f:20:ae:d5:a9:36:b4:3c:6a:18:77:31:1b:0d:d3:8d:
fd:89:dc:eb:fc:56:44:c5:f2:d6:15:16:8e:ec:e3:3a:10:b4:
a9:5e:4c:23:f8:76:58:d6:42:32:99:cd:50:81:a0:f3:92:31:
55:8b:5f:eb:1b:1c:28:00:af:86:35:27:ac:df:32:ad:05:1c:
33:06:b7:f0:a2:b8:82:31:dc:66:ba:cc:80:de:9d:9a:1d:84:
eb:d9:3e:67:c3:44:37:4e:da:4c:30:69:9c:08:19:55:a5:4b:
65:ba:46:88:da:b8:ff:c7:56:6c:f0:98:25:47:d6:df:1f:f9:
af:ce:0e:3b:0a:7f:fd:0d:9e:74:9f:4b:cb:cf:e2:72:df:34:
08:85:7b:dc:e4:ba:ba:62:71:be:65:88:76:ae:03:f5:81:a1:
ff:ad:67:ae:d4:f3:28:f9:67:18:49:1d:49:fd:eb:81:e6:48:
52:da:e4:51:89:89:19:70:16:50:c4:7f:25:46:b6:e6:3d:6f:
2c:cc:9a:59:ed:91:04:74:06:a7:5d:2a:ed:06:ff:7f:ec:5b:
fc:d1:82:8b:b0:33:58:32:34:7a:a9:1b:48:bd:c9:77:e5:af:
62:91:35:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:03:55 2026 by rpki-client