Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e2039333034.roa
File: 34352e3133322e39382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: Xf3hHiU9JC36/MVJM6uqihy2/pYt79DfEQ60fck8YZM=
Subject key identifier: F8:8B:D9:78:02:79:B8:B4:B2:BE:9A:7E:F7:39:EA:A2:7B:92:9D:D0
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 5ACB5D55908FDE9B39779ECD62A2AB7FBB74F0E6
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e2039333034.roa
Signing time: Thu 14 May 2026 05:45:55 +0000
ROA not before: Thu 14 May 2026 05:40:55 +0000
ROA not after: Thu 13 May 2027 05:45:55 +0000
asID: 9304
IP address blocks: 45.132.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:cb:5d:55:90:8f:de:9b:39:77:9e:cd:62:a2:ab:7f:bb:74:f0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 14 05:40:55 2026 GMT
Not After : May 13 05:45:55 2027 GMT
Subject: CN=F88BD9780279B8B4B2BE9A7EF739EAA27B929DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:15:dd:3c:75:1f:77:c4:23:e0:e2:53:33:
09:4a:cd:16:98:ac:7e:bd:65:2a:35:ac:6b:09:4a:
f1:69:34:6b:c0:bf:bf:40:47:15:16:21:ee:c5:44:
ee:15:73:0f:7f:7e:b7:e9:da:ac:e9:ce:72:82:93:
b7:5c:47:3e:f5:83:8b:49:6c:4b:96:19:17:da:a1:
42:64:e1:dd:90:02:97:2b:33:31:49:5f:80:4f:d0:
64:be:53:28:3a:2f:e4:71:ce:9a:28:dd:29:5b:5d:
3e:df:b0:85:fb:1e:f1:1b:fb:17:0d:f6:91:2c:af:
3a:fc:48:50:bf:da:14:99:5d:0e:ca:2e:58:19:b1:
e1:18:c8:f5:c3:8c:53:3f:37:a8:84:6d:64:01:8b:
98:ca:64:e6:a4:72:0f:3b:a5:2b:cb:97:71:ad:16:
32:da:73:33:65:85:90:ee:cf:a6:b2:e2:05:58:06:
30:ea:20:46:5b:ed:af:b2:5f:2f:82:54:4f:27:48:
91:f7:f8:b0:af:e5:3f:9f:45:4c:98:72:70:3a:51:
25:b6:1f:ce:f9:a6:db:33:6a:55:a0:0c:9f:49:71:
c2:9e:2e:fc:f8:95:01:5f:c1:32:04:98:28:83:0d:
ef:af:dd:5f:46:ba:6b:32:ff:02:74:2b:cf:11:92:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8B:D9:78:02:79:B8:B4:B2:BE:9A:7E:F7:39:EA:A2:7B:92:9D:D0
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/24
Signature Algorithm: sha256WithRSAEncryption
33:29:70:87:50:9e:60:78:ea:f2:90:56:05:ad:d6:2b:f2:f4:
fe:65:90:bb:1f:47:e7:cb:13:38:74:d4:98:a4:d1:17:f1:64:
d6:ab:9c:a3:7f:04:92:3a:7b:2b:3e:88:6e:13:db:03:49:d5:
fc:b9:d4:23:b1:7b:8d:e1:9b:d3:e1:45:0c:35:2d:a5:50:d6:
dc:f0:2d:69:10:9c:6b:19:a8:a2:a8:00:b1:3b:fc:3f:92:2a:
16:b6:ad:f1:d3:13:25:d8:51:11:b7:f7:bc:cb:d5:a7:72:65:
72:18:02:2f:a4:f3:56:21:b3:63:1b:57:56:a1:d1:73:56:16:
4c:ba:5e:c2:ea:fa:2d:25:93:4e:41:ca:15:29:1c:73:66:32:
3f:43:97:0b:34:85:d6:20:4c:7d:23:40:73:bc:81:83:43:57:
17:c7:ed:08:17:0b:94:24:b4:10:08:d9:fc:c7:04:ee:0e:24:
92:61:0a:20:c5:84:7d:4f:20:16:3d:5d:a2:96:fa:23:f5:64:
32:b5:8a:1c:ab:52:ee:4d:a6:8b:47:72:22:d5:59:ce:4c:93:
6c:bb:1b:78:41:2a:e3:32:23:61:fe:18:75:91:f6:16:06:bb:
38:c3:41:bd:e3:a6:0d:4c:77:5a:73:46:14:e7:ad:b9:9f:35:
0a:24:89:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:52:59 2026 by rpki-client