Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e203438323734.roa
File: 34352e3133322e39382e302f32342d3234203d3e203438323734.roa (raw, json)
Hash identifier: 3HR5t+CWCgbYNr5LWNy5EjsqPQA+k1i1MZP59tH8Pik=
Subject key identifier: BC:2D:04:37:C5:AB:85:41:AE:84:F4:85:21:73:F1:F0:32:E3:F9:18
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 65618F990EDC5D4357CDC6524CE7EFC145EBD61B
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e203438323734.roa
Signing time: Tue 21 Jul 2026 05:22:07 +0000
ROA not before: Tue 21 Jul 2026 05:17:07 +0000
ROA not after: Tue 20 Jul 2027 05:22:07 +0000
asID: 48274
IP address blocks: 45.132.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:61:8f:99:0e:dc:5d:43:57:cd:c6:52:4c:e7:ef:c1:45:eb:d6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jul 21 05:17:07 2026 GMT
Not After : Jul 20 05:22:07 2027 GMT
Subject: CN=BC2D0437C5AB8541AE84F4852173F1F032E3F918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:d7:cf:f9:ad:83:b6:5e:d4:c3:44:61:36:
06:c0:3e:c8:03:93:b2:0f:a8:d1:8d:15:40:65:1f:
e9:13:0b:be:9b:05:47:76:17:f7:75:17:c3:4f:12:
dc:7a:16:fe:10:97:2c:16:4d:38:a6:3c:b5:f3:85:
94:60:88:e6:de:84:4c:5e:fd:a7:86:69:80:11:15:
01:f9:80:c6:d9:84:bb:01:4e:c2:f1:af:78:f8:92:
11:b9:db:ae:86:62:d7:45:9b:af:97:83:a4:e8:40:
fd:42:90:59:5a:8e:65:54:93:31:0d:48:ad:e3:df:
3a:8a:a6:73:ba:bb:87:4b:a9:dd:c3:13:91:4d:67:
22:3d:84:6c:cb:2c:08:39:b6:5f:40:65:66:1e:6f:
02:fd:9b:b3:e5:11:81:9f:10:9c:82:fd:03:92:70:
a8:09:ee:f8:6b:1f:50:58:07:ef:31:72:ea:f1:16:
18:c2:81:f3:a0:d3:58:ea:b0:cd:7c:26:65:07:c5:
54:43:2d:11:50:b9:70:37:e0:22:aa:0e:d0:f3:d6:
91:b3:bc:19:17:83:3e:b3:ba:ac:73:1d:07:03:a2:
f3:b1:89:02:30:62:d9:f7:ec:53:53:0b:29:a7:c7:
c4:c9:bd:d7:a4:5a:fd:2c:41:47:c4:00:b0:70:50:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2D:04:37:C5:AB:85:41:AE:84:F4:85:21:73:F1:F0:32:E3:F9:18
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e203438323734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:58:3b:a7:1c:c4:8e:a6:4b:35:5f:d6:91:3f:83:7d:bc:fc:
10:ad:ff:25:48:e3:17:60:6e:31:d1:e0:b7:2a:49:6f:71:54:
83:ce:e1:34:3e:b0:06:d9:d3:16:6c:ed:8d:aa:48:06:a8:75:
c6:e0:25:17:2e:84:bf:30:26:f4:2b:8c:50:27:3c:c7:1a:db:
ad:78:f1:6f:35:85:4e:08:58:f2:85:7a:42:42:e5:89:1b:f0:
8f:5f:e0:7b:b3:55:37:89:55:45:1d:49:ea:e9:27:67:41:f1:
07:ff:0a:e6:86:85:2a:e4:06:c4:a5:30:15:b3:4b:64:e1:35:
52:62:2f:fc:b6:50:29:c8:98:89:ef:52:55:b9:76:64:47:63:
33:2d:71:75:0f:0e:f2:24:cf:0a:ed:91:b6:c4:06:35:08:46:
75:92:2d:d7:89:94:95:b4:a6:ff:34:f9:d7:d3:35:8f:aa:76:
de:4e:fe:87:ee:53:88:df:df:fc:3b:df:bf:00:75:ec:73:2c:
db:c1:de:9f:8e:44:e5:88:bb:43:cf:6a:e5:7f:57:23:fa:81:
7c:0c:6b:84:af:3f:ce:5b:5b:fc:58:3c:c1:3c:e5:69:30:33:
c7:14:58:27:8f:5c:37:32:3a:49:f9:a2:46:72:07:25:2d:b7:
aa:2a:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:29 2026 by rpki-client