Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20383334.roa
File: 34352e3133322e39382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: qKLXyFXVOyKPSM1BCoZrA/5SiwO8dEsP+ZpRhRBKDas=
Subject key identifier: AE:45:08:63:82:0C:70:98:B4:91:F7:53:32:04:0F:99:2B:51:6E:39
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 6C999D8AAC07C9B85AB3ED7E03ED19359082A1EF
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20383334.roa
Signing time: Wed 23 Sep 2026 08:29:06 +0000
ROA not before: Wed 23 Sep 2026 08:24:06 +0000
ROA not after: Wed 22 Sep 2027 08:29:06 +0000
asID: 834
IP address blocks: 45.132.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:99:9d:8a:ac:07:c9:b8:5a:b3:ed:7e:03:ed:19:35:90:82:a1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Sep 23 08:24:06 2026 GMT
Not After : Sep 22 08:29:06 2027 GMT
Subject: CN=AE450863820C7098B491F75332040F992B516E39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:ee:ed:d2:c7:4d:c7:0e:73:d1:a9:17:24:
0d:91:51:ad:b2:74:e9:8c:33:61:85:22:be:14:e2:
e0:fb:5e:94:37:92:b7:eb:3c:1b:89:c7:ba:25:47:
68:2f:3a:53:14:b1:a6:c4:38:5c:7b:e2:aa:22:2d:
3c:3c:3a:92:c1:14:f9:14:c0:d1:52:87:e7:4d:1d:
7a:d6:7e:67:e1:27:af:40:57:1d:e6:12:6d:a6:7b:
43:e7:b1:df:c9:2c:f9:0b:c2:7e:8b:54:80:d1:6a:
36:20:e7:15:75:a7:c9:e9:5a:7f:1e:a5:de:ac:44:
46:22:45:f2:59:b1:fc:c5:74:8a:70:1f:fb:b4:ed:
79:5b:d8:53:e3:b3:4b:e2:e6:f9:4d:81:e6:7c:47:
db:33:e3:bb:a1:45:06:7c:31:b9:d3:7f:18:bc:2e:
8c:e8:28:81:ee:c7:1f:69:ba:5b:d0:ae:4c:69:c0:
a9:7f:ad:f9:ce:c7:c9:ac:9b:c4:e1:e6:ec:6e:86:
2c:b7:4a:69:7d:63:0b:62:91:dd:96:23:aa:1c:57:
40:02:49:fa:24:69:32:14:1f:e4:11:0f:db:76:79:
ce:e5:1a:db:bd:90:1c:70:07:94:9f:d9:ff:e2:f1:
6f:8d:54:17:da:2b:cc:0b:51:57:6d:ac:ca:92:a4:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:45:08:63:82:0C:70:98:B4:91:F7:53:32:04:0F:99:2B:51:6E:39
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e4:68:a1:1f:84:64:e7:2a:b8:5b:11:61:45:2d:3a:a7:b9:
5b:80:2f:a9:b7:4b:35:78:fc:83:d9:99:b0:4c:3a:92:d9:4a:
ab:ef:12:c3:db:91:ec:25:1d:1c:68:ee:93:c2:7f:71:e4:78:
50:bc:8a:e9:c1:89:ef:e5:49:91:ce:53:66:0e:2e:bb:d7:7d:
d9:24:d5:93:7b:c1:57:a8:ee:1e:c1:02:1d:d8:59:f4:4a:72:
60:00:3b:94:7b:ca:e6:35:2c:62:e8:b4:f9:5a:dd:25:46:ee:
c4:03:23:60:1c:2a:84:f9:de:19:aa:21:9f:fe:7c:55:4b:63:
4c:73:99:af:1b:34:a3:38:11:8a:d6:14:97:60:4f:59:18:a3:
fe:fc:cd:54:94:a8:76:fa:c6:7e:e3:8f:86:66:a5:69:d4:74:
27:d5:2f:8e:a3:c8:1a:3b:d3:e6:b3:c3:cc:8e:29:5e:c7:14:
02:ee:3b:2b:99:10:70:cc:bf:93:ff:39:cd:f3:76:73:ed:04:
1e:c0:ea:4e:71:c4:03:09:3e:66:7f:46:07:f5:6c:3e:f8:0a:
20:39:38:7d:d3:7f:02:59:47:be:30:16:e9:57:f7:3d:b0:04:
44:8d:ee:71:39:95:0f:78:94:0d:b7:7b:1e:23:9d:ba:63:f2:
d0:fa:57:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:12:28 2026 by rpki-client