Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130342e302f32342d3234203d3e20323132333335.roa
File: 34352e3134362e3130342e302f32342d3234203d3e20323132333335.roa (raw, json)
Hash identifier: CerYnLSFvPtX+27jHb2+I/pCU1zqCD4NO8Ik3yBPOxY=
Subject key identifier: 43:AD:0F:ED:72:34:45:CF:BD:F0:2C:FC:DD:7F:55:2D:CF:AA:AA:BD
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 2560750D0493441BDABE62D43720AAA40E88333F
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130342e302f32342d3234203d3e20323132333335.roa
Signing time: Wed 05 Aug 2026 10:52:19 +0000
ROA not before: Wed 05 Aug 2026 10:47:19 +0000
ROA not after: Wed 04 Aug 2027 10:52:19 +0000
asID: 212335
IP address blocks: 45.146.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:60:75:0d:04:93:44:1b:da:be:62:d4:37:20:aa:a4:0e:88:33:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Aug 5 10:47:19 2026 GMT
Not After : Aug 4 10:52:19 2027 GMT
Subject: CN=43AD0FED723445CFBDF02CFCDD7F552DCFAAAABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0b:76:19:71:27:ba:34:d7:c7:82:0e:93:ab:
98:4e:16:b5:ac:ba:13:cc:83:d3:dc:e8:e0:b4:ed:
58:8d:4d:c5:ac:6f:7e:91:60:0d:55:67:d7:de:2a:
2f:13:28:83:4f:75:a0:cc:ec:e6:6a:e3:0d:c4:98:
d5:fc:4c:a1:56:20:e6:7f:62:e5:bc:98:d2:75:40:
3a:23:6c:b9:38:0d:e8:be:da:0d:cb:f7:52:b5:d9:
6a:0d:23:00:35:8d:48:b6:18:ef:ff:43:0d:85:23:
de:aa:d8:a4:d4:da:b5:b3:4a:42:46:57:b2:d6:7e:
63:fe:f6:1a:40:e9:0a:4d:05:9a:32:9b:71:ec:80:
30:4f:32:83:e8:98:d1:e4:17:a1:05:48:54:4d:59:
e2:57:da:7e:b6:df:98:7e:68:df:12:4b:e2:96:61:
d7:ce:db:54:38:49:b0:64:65:24:f1:bc:2d:74:8e:
3c:e3:a7:93:95:9f:2c:9b:b4:c4:a9:e0:6b:1b:25:
30:6d:26:fb:8c:70:fa:d5:29:a4:b2:62:90:53:20:
9a:26:9b:0f:05:0c:df:aa:34:24:19:7a:33:20:b7:
79:c3:9e:25:ca:e5:8d:a0:16:d3:ec:55:2c:a4:94:
b1:c8:ed:c3:01:0b:56:ce:29:51:f6:11:f3:0f:79:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:0F:ED:72:34:45:CF:BD:F0:2C:FC:DD:7F:55:2D:CF:AA:AA:BD
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130342e302f32342d3234203d3e20323132333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:74:b7:54:bf:8d:4c:7d:cb:00:f3:2d:3e:53:1f:50:98:26:
66:c6:31:db:84:b8:e7:33:cd:97:42:06:69:e6:b7:e9:cd:51:
3b:0a:d6:be:96:50:6d:d7:51:a4:fe:5e:e1:ef:29:e6:38:98:
6d:96:00:35:db:19:c5:bb:5d:2d:2a:eb:d8:dc:cc:d7:2d:64:
11:49:f6:c1:3e:3c:6c:63:e1:d5:2c:77:16:77:88:c7:24:88:
7b:46:b4:eb:54:8c:c6:f9:df:90:7a:c3:8b:8b:ea:0e:7d:f7:
d4:51:3f:8c:8c:13:78:5b:5c:96:f1:98:33:6c:ab:20:df:9b:
d1:5b:4f:e2:19:85:b3:4d:05:81:91:14:f0:bf:5d:50:dd:13:
d6:7d:0b:2c:7d:14:76:f6:ed:a5:43:ac:c4:8d:c3:c1:8a:45:
63:c3:9f:8b:35:b7:6b:9c:aa:98:ff:6c:4b:0a:b8:c3:13:5d:
b2:0b:89:d6:40:64:ac:ed:56:64:af:a1:02:35:48:5f:9d:be:
cc:42:2a:8d:89:b9:b0:e8:a7:69:d1:64:2a:ed:45:b8:6d:ec:
94:a8:f2:c4:aa:a6:e7:de:8e:d3:a8:51:76:b7:74:a8:11:ba:
d0:6f:9b:01:5a:6f:60:29:eb:d1:12:d8:a9:f3:ba:fd:59:15:
9b:cf:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:12:33 2026 by rpki-client