Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e20383334.roa
File: 34352e3134362e3130372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QGqolkivobFiXJHOo5O+Z7zR7Y7ZJRvVCWe8+RAAimg=
Subject key identifier: 96:96:E3:52:89:26:8A:5B:F7:F1:85:03:D0:8A:01:21:63:B7:55:AC
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 08D54F3D349B336C74668D27E0441BA0EB7BBBC5
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e20383334.roa
Signing time: Thu 05 Mar 2026 07:59:27 +0000
ROA not before: Thu 05 Mar 2026 07:54:27 +0000
ROA not after: Thu 04 Mar 2027 07:59:27 +0000
asID: 834
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d5:4f:3d:34:9b:33:6c:74:66:8d:27:e0:44:1b:a0:eb:7b:bb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Mar 5 07:54:27 2026 GMT
Not After : Mar 4 07:59:27 2027 GMT
Subject: CN=9696E35289268A5BF7F18503D08A012163B755AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:b8:1a:af:4e:81:a4:46:08:f2:ae:a0:d6:
1f:ab:c5:ea:d6:78:57:55:c1:7a:c6:1a:5c:62:70:
e3:2b:c2:e5:24:ad:92:83:02:f0:07:57:de:b6:d2:
ba:bf:fc:85:64:6e:44:4a:b3:15:fe:7d:25:06:3f:
9f:a1:08:ab:fa:23:a5:32:07:2e:e0:c7:70:21:a6:
e7:a1:b9:b4:8b:c8:ef:d0:f9:d1:60:3a:47:4c:7f:
26:92:4a:3b:88:0b:df:e1:e1:7d:17:f8:cf:f5:ab:
a0:a3:83:f9:e6:82:4e:44:b9:53:2f:21:43:4a:65:
7a:4c:ca:ec:d0:00:f1:43:7e:eb:a4:9b:13:05:21:
2c:02:a6:4f:91:3a:2b:d4:59:06:4d:76:48:e2:08:
6d:de:f6:b9:ed:b3:a9:0e:9f:05:35:87:49:5b:41:
b3:63:6a:14:27:97:2c:c8:53:9c:ec:a3:d0:40:e5:
ea:2f:aa:57:33:d0:36:2d:d2:3e:59:f2:6b:4d:ad:
6e:53:2b:36:b0:cc:99:63:f6:8e:38:17:7b:eb:c9:
f0:da:35:86:74:0b:03:aa:0f:ed:f1:af:48:8b:1f:
86:9d:17:71:7d:f2:de:ba:f3:fc:6e:24:d4:96:fc:
89:46:e1:b3:ed:25:48:a8:cc:0f:08:f7:d7:1f:16:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:96:E3:52:89:26:8A:5B:F7:F1:85:03:D0:8A:01:21:63:B7:55:AC
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:58:fe:fd:31:81:83:28:50:c0:bd:c5:ea:bd:08:ef:2d:17:
64:3b:01:83:59:2c:bb:c3:1f:0a:60:cc:34:5c:f7:6e:a6:97:
49:e4:99:eb:06:af:bb:71:a9:90:f1:a2:ed:db:a1:db:c1:da:
75:4b:76:a6:5b:cf:9e:8b:7b:97:cd:3a:5e:b3:3f:17:a7:fe:
dc:94:79:b7:7a:fd:22:86:34:76:af:58:c5:03:67:0a:6b:23:
0c:30:1f:c1:4c:9d:b8:d7:1c:54:05:76:5d:71:9d:29:98:9a:
c6:8b:6f:67:5e:8a:b6:b2:12:86:96:ba:e5:d2:19:a0:dc:09:
b2:9c:d2:64:60:4f:11:5b:ff:47:f9:ae:47:86:46:55:2a:cb:
37:f9:47:19:88:cc:77:03:5a:75:10:a4:ec:a9:6f:2e:94:6b:
43:de:ba:26:89:14:c5:e7:5a:c5:a4:18:bb:ba:1e:53:ce:31:
e2:c4:e3:29:ec:4e:b4:7f:ca:27:2d:27:2a:dd:48:f3:0f:3a:
bd:c4:e0:6c:5d:c6:b9:00:90:f9:be:7b:df:3b:9d:70:9d:c7:
6f:98:36:97:d5:39:35:e8:20:2f:d4:f4:b5:3a:a4:f8:5f:e9:
23:90:49:18:c4:77:b2:de:23:6a:99:c0:40:c5:91:34:8f:7f:
2d:85:2c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 05:21:59 2026 by rpki-client