Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e2039333034.roa
File: 34332e3233302e38342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: WWd3fU9+BMZxF1LS1XMNFNJ+cqLCAI2NyywKcRVObws=
Subject key identifier: 5A:B4:6C:42:38:2C:16:BF:B6:BB:51:28:F2:4A:0A:1E:2D:79:92:7A
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 31955F1A4453351BD933CB8CD13055734DDDED5C
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e2039333034.roa
Signing time: Wed 02 Sep 2026 04:20:23 +0000
ROA not before: Wed 02 Sep 2026 04:15:23 +0000
ROA not after: Wed 01 Sep 2027 04:20:23 +0000
asID: 9304
IP address blocks: 43.230.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:95:5f:1a:44:53:35:1b:d9:33:cb:8c:d1:30:55:73:4d:dd:ed:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Sep 2 04:15:23 2026 GMT
Not After : Sep 1 04:20:23 2027 GMT
Subject: CN=5AB46C42382C16BFB6BB5128F24A0A1E2D79927A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:cc:c1:55:99:c3:12:4b:86:03:7c:50:98:
2c:b2:f9:92:40:3b:4f:bf:a6:d7:53:70:18:e8:11:
a0:97:d4:5c:b4:39:ee:8b:b6:3c:8e:a1:52:89:d7:
c4:4a:34:9f:49:89:1c:40:1f:6c:99:c4:ec:ed:7f:
f7:23:1b:49:e6:58:9e:9c:15:fb:c1:96:77:da:8a:
06:d0:14:5d:12:6e:ff:67:1d:ff:35:a2:b8:09:0d:
01:27:b4:1c:64:ad:54:6d:9d:a9:c7:dc:e4:8e:a5:
e9:15:84:b1:0c:de:01:27:78:9f:38:4e:ab:d9:8f:
aa:de:28:69:4d:c8:1f:12:8c:40:ef:fd:2e:40:b1:
4c:72:af:0e:d9:ce:4a:27:93:3f:e4:5c:5d:e6:5a:
4d:38:2d:d9:a3:99:ca:7c:67:4d:d6:62:87:2b:6d:
2d:d4:57:2e:4d:94:6c:6c:3d:58:72:ae:ad:f9:ca:
c5:8e:a2:1b:04:76:80:2c:fb:07:4b:1c:c9:b4:38:
31:53:18:ef:99:74:0e:85:57:36:c9:c9:af:9a:da:
30:61:86:2f:66:c6:80:11:a4:5d:05:95:1d:db:4d:
de:19:c6:23:0b:9e:c4:4b:3d:ef:9e:8d:9b:e4:8e:
71:5e:85:7a:02:c8:b2:57:15:0c:82:b7:9c:a8:0e:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B4:6C:42:38:2C:16:BF:B6:BB:51:28:F2:4A:0A:1E:2D:79:92:7A
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.84.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c7:bc:09:70:70:19:18:f0:66:0b:e2:b1:5f:c4:df:35:21:
a5:3b:a6:07:15:12:0e:0b:8c:2f:b4:cb:06:16:8f:4e:0e:a7:
d0:a9:0f:71:a9:b7:63:2e:a2:0e:18:8f:79:14:2c:e5:67:8b:
41:13:eb:5c:01:a9:59:95:9c:ce:11:0c:e0:90:1d:cb:78:19:
e7:13:a0:47:ff:2e:94:a5:52:1a:12:fe:98:2b:b6:a6:1e:84:
af:7f:e8:82:06:10:4d:cc:20:57:fe:cf:b9:7a:c9:eb:b2:70:
84:45:18:59:f3:41:c4:41:4a:05:48:39:80:7c:6b:7b:07:82:
45:5b:a2:fc:f0:d8:b8:19:50:53:de:eb:2c:65:5b:35:ab:1b:
c9:69:36:e1:67:60:4b:8e:8f:55:fc:db:fd:a3:a2:7b:5d:91:
a1:e7:a8:82:ce:10:d6:82:db:31:24:54:c7:fb:18:c6:7b:79:
d3:74:32:8d:58:05:ac:5d:04:0d:ea:5d:57:14:d9:dc:6b:03:
12:f3:bf:64:29:8a:7c:92:37:dd:1d:2d:7c:ab:d6:a3:90:a1:
c6:58:a8:24:ec:32:09:8a:dc:73:69:04:b2:bf:74:bc:bb:8b:
a4:1c:09:d3:59:69:d2:85:87:e4:a4:b5:9c:04:6d:e6:51:27:
02:95:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:11 2026 by rpki-client