Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133342e302f32342d3234203d3e20383334.roa
File: 34352e382e3133342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: eHxG/ds0E/BrcqtxtrOvMjmxtpkjkAfStqn1zFN4VG8=
Subject key identifier: 36:1F:53:A6:3B:89:F8:B3:F6:52:47:A1:BE:EC:E1:7F:48:1F:3B:85
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 30E91B24EF23E325D13135265261346A6364AF3F
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133342e302f32342d3234203d3e20383334.roa
Signing time: Wed 01 Jul 2026 17:18:39 +0000
ROA not before: Wed 01 Jul 2026 17:13:39 +0000
ROA not after: Wed 30 Jun 2027 17:18:39 +0000
asID: 834
IP address blocks: 45.8.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e9:1b:24:ef:23:e3:25:d1:31:35:26:52:61:34:6a:63:64:af:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jul 1 17:13:39 2026 GMT
Not After : Jun 30 17:18:39 2027 GMT
Subject: CN=361F53A63B89F8B3F65247A1BEECE17F481F3B85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:7a:16:61:c7:b0:47:19:4f:48:bc:2a:52:
8b:85:c3:77:32:b7:6d:16:06:27:bc:ca:5c:81:e8:
84:1f:8c:7e:7e:81:30:ad:4f:aa:20:26:c3:ef:9e:
a1:20:b8:7e:f5:6b:42:76:20:7e:a4:6f:2b:ff:b7:
60:dc:d1:06:7d:81:a7:63:8d:3b:eb:9b:a4:c0:31:
e8:e4:53:f6:de:bb:a3:26:fe:2e:f9:ec:08:2d:31:
58:e3:9b:ba:b7:7b:7a:d5:ee:64:40:1e:7b:58:7e:
08:d9:6c:e5:97:6b:30:2a:9d:93:02:91:8b:41:2f:
82:7a:ab:68:bb:46:99:54:79:64:fa:10:c1:2d:f3:
78:80:63:bd:a8:18:e3:25:01:1f:82:fc:80:68:c0:
fc:d4:af:28:d3:12:58:85:c9:0d:76:f5:6a:fb:4d:
ef:1d:65:a9:d6:bf:f2:ff:92:fe:1f:e3:86:c1:2b:
b7:6b:9f:35:56:09:8f:3e:8b:7c:d9:2f:2a:4e:2f:
67:02:24:47:0f:97:9b:21:cc:a8:c8:f2:67:77:67:
92:38:d4:5b:ce:27:04:55:7e:e5:f9:22:05:75:b0:
42:38:79:77:74:c2:ae:ad:bc:e7:5f:47:ac:6d:de:
09:2b:ab:6d:e9:22:51:c2:1e:41:6d:82:c0:8d:f4:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1F:53:A6:3B:89:F8:B3:F6:52:47:A1:BE:EC:E1:7F:48:1F:3B:85
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:08:6e:c7:0a:84:a3:2d:c4:f0:f9:95:ab:71:86:9a:f0:12:
d4:43:97:79:f4:e0:e0:b4:d5:27:40:fe:50:b8:93:2d:34:7a:
5c:d1:58:19:ee:cc:6d:38:03:02:da:27:9b:2a:e8:36:3e:32:
24:53:0c:f5:4a:10:3f:24:d2:79:a8:56:e6:af:a2:a9:26:84:
3d:61:f7:1f:83:36:49:91:35:63:d9:f0:e0:5c:16:54:88:09:
c4:49:3d:63:0c:04:75:c4:3c:d5:35:84:9e:87:66:be:69:ef:
e4:1f:d8:9a:a1:b3:ad:cc:aa:28:fe:f4:b4:04:ed:4d:6f:f4:
98:d5:e1:0e:d1:53:c5:e1:3e:71:46:7c:25:11:e2:1c:30:2d:
89:3a:a3:62:33:ae:4d:f1:72:c3:33:7a:44:82:e0:5a:5d:e6:
31:a1:8e:a6:16:f2:f1:c9:81:5f:57:2c:d0:4c:1e:fc:7f:0c:
41:13:35:4a:a9:7e:59:72:ba:83:b6:03:dd:0d:5c:25:38:8f:
41:63:8b:0c:9f:3f:7a:b5:aa:bf:74:7f:fd:a9:fa:67:2c:2f:
68:a8:b8:2e:91:d6:68:b3:d4:dd:a7:d4:3d:79:5d:b5:2c:01:
b3:8a:0e:4a:af:8e:e6:45:99:3d:77:2a:9a:1c:23:d3:a1:ce:
7e:f9:6f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:15:35 2026 by rpki-client