Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e352e302f32342d3234203d3e20323132333335.roa
File: 34352e38302e352e302f32342d3234203d3e20323132333335.roa (raw, json)
Hash identifier: AoDhowE+YGOAv8rmnVNKqk2h8xBFpo8Ka230oN6XBbc=
Subject key identifier: 12:B7:48:2A:52:6C:82:6E:86:FD:AC:9D:0C:9F:79:8C:D9:77:6B:C9
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 25B62D3F9676D07B6F77677F9E0B1BA30D728DA4
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e352e302f32342d3234203d3e20323132333335.roa
Signing time: Wed 05 Aug 2026 10:52:17 +0000
ROA not before: Wed 05 Aug 2026 10:47:17 +0000
ROA not after: Wed 04 Aug 2027 10:52:17 +0000
asID: 212335
IP address blocks: 45.80.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b6:2d:3f:96:76:d0:7b:6f:77:67:7f:9e:0b:1b:a3:0d:72:8d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Aug 5 10:47:17 2026 GMT
Not After : Aug 4 10:52:17 2027 GMT
Subject: CN=12B7482A526C826E86FDAC9D0C9F798CD9776BC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:fe:86:73:21:2c:25:2d:c5:b5:eb:9c:67:
e4:77:dd:a4:a0:4e:9f:6b:58:4e:39:4a:ce:96:17:
07:e6:98:5d:48:49:94:7d:64:28:05:04:c8:de:b8:
8e:9a:7d:7e:5d:23:83:c1:72:75:42:14:61:0b:fb:
95:ee:fa:35:f6:98:50:e3:d9:90:f1:85:29:40:c7:
40:50:aa:5b:b3:57:7e:b0:e2:82:8c:6d:9a:36:3c:
6b:21:05:09:98:fa:05:3f:44:e4:05:8f:01:37:82:
44:4c:a3:85:67:7f:03:51:34:b8:55:c5:db:0e:14:
1e:96:c1:de:5d:6c:24:16:fd:5c:bc:14:21:b6:4c:
ed:b7:93:2b:00:5e:a7:1b:51:96:9b:62:4f:9f:ba:
83:8b:10:b3:e7:61:7c:b9:3d:ef:55:a2:f5:aa:2b:
de:a5:d2:80:20:b0:a4:88:64:7c:17:00:da:7a:86:
76:20:26:c9:fc:06:ab:bf:cd:9c:7e:2d:e7:ca:b2:
ea:1e:fd:45:a7:1f:7d:1f:80:de:e5:cc:b3:8e:dc:
fa:fb:e4:a5:0c:d0:0c:18:eb:b4:61:24:c9:78:b1:
56:4b:cc:24:4a:b8:7e:9f:fe:1a:87:9f:a5:85:38:
4d:ff:0a:1f:85:f1:7f:52:25:6c:10:66:0e:08:57:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B7:48:2A:52:6C:82:6E:86:FD:AC:9D:0C:9F:79:8C:D9:77:6B:C9
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e38302e352e302f32342d3234203d3e20323132333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.5.0/24
Signature Algorithm: sha256WithRSAEncryption
89:12:9d:a7:ca:89:9d:b2:73:19:47:f9:5a:87:4e:40:5b:58:
57:5d:c0:82:6b:e8:12:3f:87:f3:c5:41:b6:b9:d9:8c:18:d7:
90:44:c5:16:94:7f:54:44:8f:dc:4a:cd:bf:06:5d:97:06:2f:
b3:c6:80:ac:a9:35:6d:dc:28:19:38:a6:e2:91:e4:53:b6:ba:
1e:90:b7:05:67:40:b0:ee:f6:eb:9c:87:fa:98:01:bb:5d:c9:
02:29:5e:c1:f2:99:63:97:57:a8:12:d2:2e:2d:f5:9e:b2:8d:
cd:86:6c:0c:12:b5:70:43:04:b9:b2:58:df:5c:f3:99:68:6d:
9d:29:e5:1a:4c:6a:fa:ca:87:14:b1:79:16:70:fc:da:2d:d5:
f6:d3:e8:d4:67:4a:a4:89:9f:e7:54:0a:09:ee:c6:7f:23:b7:
7e:da:c6:b5:f1:9c:89:e7:27:06:39:f4:53:10:fe:ba:a4:f0:
f9:da:7c:f5:c3:5b:27:1d:f7:3d:8d:1a:d6:36:2e:69:07:70:
3a:44:a3:51:72:17:c2:bb:0a:cd:c0:29:90:2c:b4:8b:f1:d0:
fe:5b:4d:1c:8e:33:6f:16:f2:70:2d:01:12:30:09:8d:72:1f:
28:f8:80:7f:9f:8a:2c:81:85:1c:71:cc:6c:3c:df:4c:21:40:
98:00:7c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 13:28:34 2026 by rpki-client