Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20313938353636.roa
File: 34332e3233302e38342e302f32342d3234203d3e20313938353636.roa (raw, json)
Hash identifier: np6fRGdvntmo0WUS6PHKf2pD76Rp5Br0W2IrCVC8yd0=
Subject key identifier: EB:4E:BB:22:F1:CD:84:6E:91:42:4A:21:B9:F0:32:30:10:7C:9F:ED
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 32653CD13B93FC3312035476CFE4E38C31CAEAEE
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20313938353636.roa
Signing time: Thu 08 Oct 2026 14:21:01 +0000
ROA not before: Thu 08 Oct 2026 14:16:01 +0000
ROA not after: Thu 07 Oct 2027 14:21:01 +0000
asID: 198566
IP address blocks: 43.230.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:65:3c:d1:3b:93:fc:33:12:03:54:76:cf:e4:e3:8c:31:ca:ea:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Oct 8 14:16:01 2026 GMT
Not After : Oct 7 14:21:01 2027 GMT
Subject: CN=EB4EBB22F1CD846E91424A21B9F03230107C9FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:fa:29:fa:96:80:e9:e1:af:43:d1:14:e6:
f7:e1:88:f0:a0:44:c7:d0:76:2f:f0:2b:f0:1e:06:
ad:e1:21:c4:3e:3c:42:15:65:10:d2:13:fa:fe:e7:
99:8f:f9:4f:15:0b:42:84:89:41:59:26:82:f3:91:
2c:c1:16:2d:2b:d5:c8:f7:08:e8:00:80:a0:fa:7d:
11:e9:7b:94:93:69:d1:a8:c3:d8:4d:bb:98:3d:98:
05:80:69:3d:c1:6d:88:8e:6c:6f:8d:62:ab:cd:c5:
69:60:22:1c:27:c6:dd:f9:7c:3f:43:7a:2f:fe:6e:
3e:09:b1:12:c6:d3:9b:33:ba:93:5a:06:7a:7c:4e:
d4:c7:fb:19:d0:30:0c:1d:71:46:ad:2b:b9:45:55:
fa:ed:91:42:e1:f9:d8:c7:42:7d:cb:47:77:c7:a3:
50:12:d5:31:bd:8f:d4:26:d4:b2:07:18:d5:23:07:
4e:95:f0:e7:97:6b:36:57:85:5c:da:7d:72:d9:cc:
3b:2c:4c:bc:97:31:26:a2:77:55:34:66:c4:d9:73:
43:01:d1:d9:e2:c2:de:a4:51:e8:39:e9:15:1a:b6:
1c:88:ac:83:57:d9:ec:3b:45:bc:48:97:0f:ca:38:
d3:b4:c1:80:a3:a2:d2:7d:9a:24:90:e2:59:9e:30:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4E:BB:22:F1:CD:84:6E:91:42:4A:21:B9:F0:32:30:10:7C:9F:ED
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20313938353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.84.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d0:a0:48:5b:23:f2:85:c6:14:a5:bd:2b:64:d7:e7:9e:e0:
7e:9e:1b:27:de:a9:bc:c9:35:de:d5:27:62:33:d8:23:92:ec:
f3:78:3b:c4:36:b1:48:86:14:dc:db:56:c6:7e:52:4c:ba:12:
4b:ea:91:38:4a:f4:f2:fb:c2:d5:db:7a:98:96:4b:2e:74:ed:
a7:f3:f8:f9:c5:de:a0:57:56:38:a4:71:1d:91:11:d3:14:8c:
98:d8:62:e0:79:cc:ca:c7:c1:71:63:13:65:00:16:4d:b4:db:
61:38:42:dd:58:32:8e:de:a1:96:ea:48:81:43:0d:85:38:df:
b0:1a:f7:db:5d:24:7b:2e:59:56:7b:71:99:e2:ee:cc:e5:3f:
e4:17:d2:89:01:5a:2d:5f:aa:5e:de:c7:64:10:4a:c3:f3:d5:
10:d9:db:c4:f5:ff:c9:46:f2:da:ef:4b:a3:1e:3f:42:d4:7e:
07:6b:2a:b0:ab:01:68:fd:cd:66:ad:06:54:6d:7b:4b:5f:af:
de:f1:57:d4:1a:20:59:f0:2a:cb:70:c9:7b:1b:00:00:bc:cf:
16:0f:26:b5:6f:5d:fd:ca:cc:73:1e:51:1e:62:cc:6d:de:b6:
62:be:0c:0c:45:3e:33:93:34:b8:2c:16:45:61:b7:24:5b:8a:
77:3b:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:35 2026 by rpki-client