Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20323030313639.roa
File: 34332e3233302e38342e302f32342d3234203d3e20323030313639.roa (raw, json)
Hash identifier: RwTiyaM6LfEs9FTSsbRgIasYynGtdyAL29C4Ks9Nt44=
Subject key identifier: 7C:F2:3E:A6:28:F1:26:BE:E0:BC:95:41:B6:11:61:D7:83:7A:4E:79
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 6AAE7F471D927682674766E261174FEB6F970900
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20323030313639.roa
Signing time: Sat 01 Aug 2026 06:49:07 +0000
ROA not before: Sat 01 Aug 2026 06:44:07 +0000
ROA not after: Sat 31 Jul 2027 06:49:07 +0000
asID: 200169
IP address blocks: 43.230.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:ae:7f:47:1d:92:76:82:67:47:66:e2:61:17:4f:eb:6f:97:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Aug 1 06:44:07 2026 GMT
Not After : Jul 31 06:49:07 2027 GMT
Subject: CN=7CF23EA628F126BEE0BC9541B61161D7837A4E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:7f:32:fa:1a:01:c9:fb:b7:e7:a8:3f:d6:
48:0c:ba:f9:0f:1d:ab:98:ca:39:a9:8b:64:e5:d9:
20:4f:e1:37:7d:fc:c4:f3:94:fa:d3:72:c8:5f:df:
6b:c7:05:fc:3b:37:4b:89:d3:af:b9:29:c7:d8:ff:
4d:ea:73:99:44:03:e1:db:0b:ec:c3:b6:70:e7:03:
c6:78:e0:b9:3c:00:d7:7e:b0:59:ae:dd:bc:72:cb:
53:9a:b2:bb:ca:90:10:40:e5:9d:e7:2e:6b:9f:96:
7c:06:ee:33:92:d9:3d:13:b1:0e:eb:b0:67:f9:99:
30:fe:7e:94:61:d0:48:e4:e0:ac:00:a0:c8:c2:f9:
42:1d:0b:3e:a4:cb:ee:c6:bf:ab:90:ec:b3:b0:51:
bc:f5:dd:e0:b8:fe:44:0c:f5:7d:98:3e:66:12:65:
cb:43:11:87:d3:93:6e:63:5d:18:07:e5:6c:5b:ac:
4e:07:9e:e8:a9:fe:4e:fa:73:ce:80:07:12:01:37:
40:9f:e0:f9:0e:c5:5d:08:dc:9c:a4:5a:e4:5d:4a:
42:79:a9:1a:36:27:66:64:91:3e:2f:43:fd:f5:55:
cd:dd:7f:f7:3b:00:c9:29:85:b6:bd:db:24:ef:1e:
7e:7f:07:d2:55:29:5a:52:e0:23:ba:7c:66:28:2c:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F2:3E:A6:28:F1:26:BE:E0:BC:95:41:B6:11:61:D7:83:7A:4E:79
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20323030313639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.84.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3d:e8:38:1c:1f:d2:93:53:f8:f7:2f:44:e9:65:24:74:d9:
45:a8:b4:da:0e:e1:fb:08:82:04:84:d3:1a:0f:65:fa:9c:b2:
c8:34:b3:66:2e:75:3d:af:4b:08:49:d4:53:54:a3:66:1f:7c:
9a:00:30:66:a8:f1:cd:46:e7:0c:2b:f9:0f:ab:03:c8:7f:40:
78:56:50:4e:90:79:42:32:b8:3a:c0:1c:0b:28:78:c6:6a:dd:
1f:9b:19:77:ce:85:9b:3b:f5:07:9b:c9:63:93:94:4a:7b:e9:
71:b1:a3:a0:41:b2:78:38:bd:fc:9e:60:f5:d7:51:98:2d:fd:
1a:a9:d8:c4:f2:f7:60:7f:b8:6f:5e:fe:41:7d:91:41:3a:0f:
02:ad:d3:ba:9c:69:ee:80:f4:a8:7a:2c:7f:e5:9e:0d:d2:ad:
4d:eb:25:07:bf:e7:4e:bd:ed:77:a4:8e:54:96:e3:2f:eb:45:
8f:63:76:38:52:88:3f:d4:f5:b7:e2:6e:93:94:a1:c6:05:35:
4c:fb:d2:df:7f:e0:16:f4:06:ee:84:7c:f6:2b:dc:38:cc:ff:
62:eb:fe:bc:bf:82:6f:4d:1d:b6:5d:7b:76:53:0b:51:b7:85:
c4:6d:1f:92:3c:30:f4:56:46:95:cf:3d:ff:6f:52:37:d9:40:
a6:43:00:e9
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUaq5/Rx2SdoJnR2biYRdP62+XCQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNjA4MDEwNjQ0MDdaFw0yNzA3MzEwNjQ5MDdaMDMxMTAvBgNV
BAMTKDdDRjIzRUE2MjhGMTI2QkVFMEJDOTU0MUI2MTE2MUQ3ODM3QTRFNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbH8y+hoByfu356g/1kgMuvkP
HauYyjmpi2Tl2SBP4Td9/MTzlPrTcshf32vHBfw7N0uJ06+5KcfY/03qc5lEA+Hb
C+zDtnDnA8Z44Lk8ANd+sFmu3bxyy1OasrvKkBBA5Z3nLmuflnwG7jOS2T0TsQ7r
sGf5mTD+fpRh0Ejk4KwAoMjC+UIdCz6ky+7Gv6uQ7LOwUbz13eC4/kQM9X2YPmYS
ZctDEYfTk25jXRgH5WxbrE4Hnuip/k76c86ABxIBN0Cf4PkOxV0I3JykWuRdSkJ5
qRo2J2ZkkT4vQ/31Vc3df/c7AMkphba92yTvHn5/B9JVKVpS4CO6fGYoLL1ZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUfPI+pijxJr7gvJVBthFh14N6TnkwHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt
NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzQzMzJlMzIzMzMwMmUzODM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzEzNjM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
K+ZUMA0GCSqGSIb3DQEBCwUAA4IBAQAzPeg4HB/Sk1P49y9E6WUkdNlFqLTaDuH7
CIIEhNMaD2X6nLLINLNmLnU9r0sISdRTVKNmH3yaADBmqPHNRucMK/kPqwPIf0B4
VlBOkHlCMrg6wBwLKHjGat0fmxl3zoWbO/UHm8ljk5RKe+lxsaOgQbJ4OL38nmD1
11GYLf0aqdjE8vdgf7hvXv5BfZFBOg8CrdO6nGnugPSoeix/5Z4N0q1N6yUHv+dO
ve13pI5UluMv60WPY3Y4Uog/1PW34m6TlKHGBTVM+9Lff+AW9AbuhHz2K9w4zP9i
6/68v4JvTR22XXt2UwtRt4XEbR+SPDD0VkaVzz3/b1I32UCmQwDp
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:25 2026 by rpki-client