Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e20323135343539.roa
File: 34352e3134362e3130372e302f32342d3234203d3e20323135343539.roa (raw, json)
Hash identifier: cP7E9KfKLXE7g7L6YPDQWlCWa5uBJAoDUgTE1nR6oDg=
Subject key identifier: A9:FF:AE:E1:87:32:FC:34:F5:38:F1:02:71:0E:62:B6:A6:67:B3:33
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 7E4C93ACC051476208BD28AD22B82A8FFB1C9DFF
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e20323135343539.roa
Signing time: Mon 20 Jul 2026 12:37:53 +0000
ROA not before: Mon 20 Jul 2026 12:32:53 +0000
ROA not after: Mon 19 Jul 2027 12:37:53 +0000
asID: 215459
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4c:93:ac:c0:51:47:62:08:bd:28:ad:22:b8:2a:8f:fb:1c:9d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jul 20 12:32:53 2026 GMT
Not After : Jul 19 12:37:53 2027 GMT
Subject: CN=A9FFAEE18732FC34F538F102710E62B6A667B333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:ca:e0:f7:4f:9e:0f:10:db:b5:bd:f0:5a:
9a:0a:be:4e:b9:a8:10:f8:76:dd:89:ce:f4:b1:4b:
cb:ad:26:57:d7:3a:cd:1b:6a:5a:b2:d7:ee:32:de:
a5:fc:0e:ca:dc:c4:32:26:04:79:99:c1:ed:36:d9:
10:d8:fd:04:f0:d8:21:1b:39:20:93:bd:66:4c:8f:
e2:87:b4:66:41:62:9c:ea:9c:61:ba:62:67:99:5e:
de:36:d2:0f:7b:95:61:97:40:79:71:55:53:7d:59:
f1:03:1b:b5:e1:76:a8:88:eb:61:f7:86:4a:30:37:
30:97:f5:8e:14:51:a0:2e:82:c2:af:fb:a3:45:ec:
0d:4d:ed:ed:ad:dc:cc:ca:54:96:3a:0a:eb:54:0b:
cc:f5:eb:11:fd:e0:7a:a7:ad:ea:f3:1b:9f:5d:f8:
d1:23:3d:4b:01:57:10:f4:71:ee:eb:08:ff:7f:55:
a5:58:83:05:6d:d3:ad:db:b1:ce:07:56:90:a2:4a:
05:68:fa:5b:15:24:d2:d3:e9:7d:7c:76:c4:d5:63:
89:02:71:f5:23:1c:63:76:9c:ea:82:02:63:5d:18:
7f:05:f5:87:d4:01:3a:77:6d:96:2e:9a:dd:1b:66:
cb:d9:ad:47:57:79:03:91:fa:c1:19:29:62:b1:8f:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FF:AE:E1:87:32:FC:34:F5:38:F1:02:71:0E:62:B6:A6:67:B3:33
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e20323135343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
95:01:00:9e:c1:7e:0a:d1:f3:3c:9b:d4:b1:61:ce:a9:3f:d2:
af:e4:be:bf:19:2e:53:79:c2:75:f5:44:2a:99:da:49:3a:cd:
42:9b:14:75:6c:50:c3:8e:93:af:7e:2b:26:74:03:ef:5a:c7:
bc:94:1e:25:d0:f9:c7:bc:ec:fc:29:ba:43:87:18:64:97:6a:
c5:55:1d:7d:f1:7b:60:da:e1:2d:d7:1b:33:e3:33:cd:8f:77:
cf:d3:74:17:45:c1:75:af:00:51:f9:b5:31:7c:e4:d3:7e:8f:
dd:fc:79:a9:eb:20:82:3c:32:c2:32:11:95:4f:cc:f9:ae:8c:
20:d0:c8:03:05:74:87:60:dd:2f:58:9d:b2:1d:5e:3a:f8:87:
75:c3:2f:e2:43:44:53:78:68:d0:a2:14:96:b2:4b:35:09:9a:
30:62:b9:23:67:3d:58:46:4a:8f:d2:f6:f1:ae:2f:f5:93:98:
c7:b1:66:00:2d:9f:1e:6a:a3:96:ae:2f:8a:d3:91:e0:74:7a:
9c:88:54:0a:f9:c2:79:39:c7:11:fe:f9:2b:df:e2:42:1d:b5:
6a:0b:6c:a3:b8:d3:47:bd:2a:24:40:5e:2b:d9:08:9a:31:f3:
92:bb:b7:87:3e:44:97:aa:ad:c8:93:37:27:e1:8a:d6:e2:d6:
2a:26:53:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:54:41 2026 by rpki-client