Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e20323132363639.roa
File: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (raw, json)
Hash identifier: K6pPcrxT1qaaXfoQ1qJYcODSnYPMdIwjQ2K1qzc/KoU=
Subject key identifier: 50:E2:9E:BF:B1:81:E7:95:0C:14:90:B4:47:FF:B7:DF:5A:72:D9:DA
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 463BCE1BB539D7A918044EDE552FB76555D895C5
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e20323132363639.roa
Signing time: Wed 07 Oct 2026 14:49:36 +0000
ROA not before: Wed 07 Oct 2026 14:44:36 +0000
ROA not after: Wed 06 Oct 2027 14:49:36 +0000
asID: 212669
IP address blocks: 43.230.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3b:ce:1b:b5:39:d7:a9:18:04:4e:de:55:2f:b7:65:55:d8:95:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Oct 7 14:44:36 2026 GMT
Not After : Oct 6 14:49:36 2027 GMT
Subject: CN=50E29EBFB181E7950C1490B447FFB7DF5A72D9DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:24:fe:0d:80:de:d4:a6:4b:6c:4b:db:9c:
54:fd:d5:05:c0:35:65:2e:a1:b2:f9:41:15:b5:f2:
62:30:cc:65:d8:1e:34:b8:b0:ef:e3:06:5b:58:04:
24:a6:df:8b:40:3b:b4:ff:dd:8b:ac:5b:65:bc:f8:
fb:6c:2c:93:fa:dd:a5:51:2e:4d:7a:8f:c1:65:d3:
f7:25:f7:89:20:48:55:1b:2a:f8:f5:1d:1f:7b:d6:
1e:b5:75:d3:8f:e8:a2:db:6f:07:f6:a7:11:1f:d0:
f7:bd:1f:00:ad:6a:34:fe:c5:e4:4f:ad:14:44:81:
2e:e5:63:5b:63:74:61:3b:28:5c:2a:3a:21:b0:84:
a4:b9:3c:14:c0:e7:e4:6e:81:e4:d8:c3:13:cf:7a:
d4:dc:63:60:58:87:38:c9:fa:09:31:18:af:f1:6d:
6e:11:93:e7:23:e2:42:e0:7e:0c:0d:d9:a9:10:a7:
b2:28:2e:9c:2d:79:38:91:03:03:51:0a:2c:89:59:
f2:a7:4f:72:b5:38:d7:4a:aa:9b:b0:e4:98:15:5d:
d9:91:11:f5:d5:19:b7:0b:bb:00:37:34:52:f2:21:
b6:8e:8b:29:9d:cf:cc:b7:45:83:51:f9:d0:94:bf:
5d:78:e9:10:ae:b3:00:ab:17:df:b9:bd:49:ea:dd:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E2:9E:BF:B1:81:E7:95:0C:14:90:B4:47:FF:B7:DF:5A:72:D9:DA
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e20323132363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.85.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ff:a1:8b:86:b2:72:b6:9e:5f:86:8b:0a:fd:15:75:dc:e6:
a4:e8:eb:dc:f6:67:05:1f:b4:0f:1b:71:eb:c6:98:17:b3:36:
e6:10:e8:ca:02:31:1c:a9:2d:4e:7f:6e:48:7c:87:a3:bb:e9:
0a:97:5d:71:02:95:0d:cc:7e:7d:ef:70:c1:ec:3a:d4:5c:8b:
97:08:31:30:26:8c:fe:6f:32:13:fb:fb:2e:a7:a3:15:75:4f:
24:24:9d:a0:cc:82:12:f3:b8:00:f7:71:3e:86:48:61:ed:5d:
79:25:65:f4:44:9c:7f:55:e1:6c:4d:62:11:dc:e1:74:03:15:
55:1f:20:77:aa:1d:4f:63:cb:d5:8d:23:27:a2:13:f6:63:71:
cf:9e:bc:f9:a4:06:3a:0d:bb:94:58:43:69:65:75:a4:2b:e8:
cb:2c:e4:62:52:f0:53:27:90:8a:f5:12:16:77:09:2a:08:13:
bc:f4:bb:73:e0:d5:d5:05:e8:e1:09:4a:85:b8:88:90:4c:d5:
2a:7f:81:f6:45:fa:13:1b:b9:70:ed:df:88:c7:39:d3:9c:4c:
9f:c3:15:9a:08:5b:bb:06:4b:07:a3:de:9f:47:4b:76:94:12:
c4:c8:e3:6a:55:2e:e3:62:de:3f:29:bb:56:cd:f5:44:70:da:
6e:48:aa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:15:24 2026 by rpki-client