Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e2039333034.roa
File: 34352e3133322e39382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: pbd4QcGq5OuTLzeEhasWfRmjp+n15QaQtmxoaYO9jR8=
Subject key identifier: AA:70:32:29:90:4C:50:90:AA:B9:86:E0:46:3B:3E:56:73:31:06:14
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 0F36543C04643B76D4501B7EDFE36E26D0AAFA48
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e2039333034.roa
Signing time: Sun 23 Aug 2026 08:34:00 +0000
ROA not before: Sun 23 Aug 2026 08:29:00 +0000
ROA not after: Sun 22 Aug 2027 08:34:00 +0000
asID: 9304
IP address blocks: 45.132.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:36:54:3c:04:64:3b:76:d4:50:1b:7e:df:e3:6e:26:d0:aa:fa:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Aug 23 08:29:00 2026 GMT
Not After : Aug 22 08:34:00 2027 GMT
Subject: CN=AA703229904C5090AAB986E0463B3E5673310614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:58:da:72:26:89:0c:74:2f:6f:16:4e:71:
c8:34:cd:9b:fb:b5:12:3a:d4:bf:1e:9e:b1:f6:c5:
94:e6:a1:e0:30:89:38:91:35:92:bc:91:65:c8:f3:
c6:35:e4:23:3f:59:18:d5:ec:4b:aa:5d:1e:36:49:
db:2c:96:61:fc:7c:9e:96:08:d9:fb:97:a2:91:07:
82:6f:29:ce:c2:d9:07:68:c4:e1:5e:30:20:30:88:
78:f5:34:a7:69:0f:80:55:e6:99:c6:8d:df:19:a6:
aa:26:c8:10:cc:4b:eb:a9:59:3b:d4:04:bf:19:5e:
65:b4:a2:55:0e:40:1e:57:72:3b:71:0c:18:b0:d0:
ae:56:6f:59:d3:33:dd:c1:94:22:da:f1:7b:43:33:
4f:7f:b0:5b:7a:98:e6:50:4b:62:a6:c9:64:e7:b1:
1b:69:07:9b:49:03:d5:7f:6c:14:e1:4a:6f:f1:d9:
fe:62:28:2c:eb:42:a5:49:99:d2:c0:c0:23:c6:c8:
4f:86:2e:aa:e0:ef:70:ff:39:94:d3:ab:ce:d2:d3:
4d:ce:d5:99:bd:01:37:31:e3:98:10:e7:f6:f1:81:
7c:76:e4:44:1f:5b:fb:94:bc:80:99:1d:d4:5d:6d:
d6:9f:5e:6f:e9:ca:b1:dc:67:3f:ac:ec:fd:be:4a:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:70:32:29:90:4C:50:90:AA:B9:86:E0:46:3B:3E:56:73:31:06:14
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:07:b4:66:aa:55:f5:a0:b8:d5:63:90:ac:ed:86:5c:47:5c:
e6:b3:19:65:38:f3:42:1f:3e:71:a0:f9:d8:fd:b3:7b:0f:d2:
9a:c4:c4:0f:2e:9b:1c:a5:ff:e5:c3:44:d3:b9:ed:33:78:8f:
3d:3a:6f:88:a5:45:3e:e7:5b:f5:82:45:ff:35:62:7d:dc:3d:
e2:6d:95:20:49:b9:7f:a0:70:f7:b3:28:06:8a:83:cf:d4:ed:
2f:6d:bd:07:5e:46:c3:65:47:d4:39:e8:74:df:3c:f9:50:f1:
a1:20:a3:ee:8f:1b:a0:46:01:26:86:46:0c:a5:eb:7b:34:9f:
01:d9:c9:39:60:8e:23:75:c9:2c:31:6c:9f:a8:50:a9:4e:73:
cd:e0:9e:b5:cc:aa:3c:ad:67:66:5f:ee:db:a4:38:d8:0d:1f:
16:1f:6a:cd:f3:a6:9b:9e:90:c6:e6:f2:98:38:ca:c8:82:4e:
e6:78:c6:25:f7:9a:b3:cb:33:46:11:24:25:2d:27:53:d6:19:
75:09:8c:89:20:c5:79:57:35:03:73:29:f8:8d:0c:b5:66:c1:
8b:6a:ae:47:ca:0d:79:00:e6:e8:84:5c:94:73:df:f6:ce:48:
da:30:9a:0b:38:da:41:6c:60:d1:6e:5b:52:0e:c0:55:34:32:
34:61:78:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:05:39 2026 by rpki-client