Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39392e302f32342d3234203d3e20323030303137.roa
File: 34352e3133322e39392e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier: AkycLMen/C53QyfnsQOF3nBP0k0MoRMPas28bzlyZ+c=
Subject key identifier: CF:94:9B:2F:46:BF:E3:A0:B5:95:28:64:B3:43:0C:4F:45:92:62:6A
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 69CF69792978E5E651A0151AB3F47A08EF23271F
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39392e302f32342d3234203d3e20323030303137.roa
Signing time: Thu 14 May 2026 13:47:13 +0000
ROA not before: Thu 14 May 2026 13:42:13 +0000
ROA not after: Thu 13 May 2027 13:47:13 +0000
asID: 200017
IP address blocks: 45.132.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:cf:69:79:29:78:e5:e6:51:a0:15:1a:b3:f4:7a:08:ef:23:27:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 14 13:42:13 2026 GMT
Not After : May 13 13:47:13 2027 GMT
Subject: CN=CF949B2F46BFE3A0B5952864B3430C4F4592626A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b0:fc:d8:36:cc:41:32:88:09:cf:75:cf:3c:
e9:a3:03:66:91:12:73:db:b6:2b:72:5b:e5:a3:76:
bc:ea:72:6c:1c:68:83:32:69:4f:80:e5:24:c0:7e:
29:4c:34:6d:45:83:aa:e9:ee:d9:49:62:3a:ed:3c:
fe:1f:d9:1e:56:ea:f0:4b:5d:06:b2:e3:88:e2:eb:
12:b8:83:fd:8f:b7:04:59:a7:5b:b8:86:f0:8d:b6:
d1:e9:27:5f:3c:8d:cb:b6:17:16:bf:24:03:f1:eb:
d5:06:fc:41:39:14:7b:53:66:43:c6:62:05:56:d1:
fa:ea:de:ec:84:c1:21:6b:93:8b:9d:87:93:d2:47:
f9:70:44:95:e6:25:3c:bc:e9:c7:78:84:f6:52:b5:
1e:ed:5d:d8:64:86:8b:57:76:55:74:9e:88:40:a8:
a5:ea:b7:80:18:d5:10:2d:e5:30:8f:fb:e2:ac:fb:
c4:fc:19:8d:0a:03:80:6f:c3:b7:cc:5c:86:a1:49:
6b:ad:87:e7:b7:f6:f2:14:2b:99:9a:96:36:ae:53:
c7:88:25:3f:4d:12:48:18:13:c5:02:73:81:76:da:
0f:cc:7d:d8:0e:c0:f2:22:4c:52:43:6f:e0:6a:e7:
e3:1f:5f:cd:fa:6d:d8:d7:14:38:c4:0a:1b:59:1d:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:94:9B:2F:46:BF:E3:A0:B5:95:28:64:B3:43:0C:4F:45:92:62:6A
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39392e302f32342d3234203d3e20323030303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.99.0/24
Signature Algorithm: sha256WithRSAEncryption
23:13:a5:7e:18:88:bb:1f:24:74:6c:ef:ad:0f:6a:c5:70:37:
d5:29:9d:57:d4:aa:38:52:46:16:5a:8b:51:a0:47:37:98:8c:
22:7d:57:6f:da:e3:04:0a:36:36:36:28:43:f3:db:86:70:49:
ca:42:e9:2f:a2:cb:39:be:1e:a2:f0:91:a5:52:dc:65:2c:11:
0a:8a:5f:3f:54:be:a1:66:73:41:3b:42:09:2c:8c:8c:03:75:
07:1c:2e:4b:1d:57:d1:27:62:0c:18:97:0f:aa:bd:f3:dc:41:
c2:0e:ee:1a:3c:3c:cd:8c:31:31:b5:7c:29:48:9a:3d:cf:ed:
da:88:59:9f:d5:e2:21:ed:13:eb:42:10:0f:d6:55:3b:4c:10:
e1:c2:9e:32:e7:b8:09:e6:df:5c:44:65:19:5c:b1:58:d2:77:
87:66:c0:36:41:18:38:c3:f9:46:f5:f9:e5:81:00:1e:ca:f1:
a5:af:3f:2c:a6:be:1f:1c:a7:95:8e:68:88:5c:72:d6:78:88:
3e:77:3b:9e:78:ca:7e:6b:a7:a1:16:62:8c:7a:4e:a9:fe:a3:
30:ab:de:f1:79:c9:be:ea:06:33:1d:21:35:df:58:83:c8:6b:
92:bc:4a:48:50:9a:e6:10:c5:d1:75:c2:44:21:9e:22:a8:5a:
7e:ba:77:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:05:55 2026 by rpki-client