Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33312e302f32342d3234203d3e20313436383133.roa
File: 34362e3138332e33312e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: WcL2kBtsjppfaarjCt1hS7Jn9tg3JVTXPM4brEV0FA4=
Subject key identifier: 6B:27:46:14:43:74:F6:76:46:B1:05:61:5C:88:5C:A7:AD:04:C3:7B
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 118B57B705D9278B0177173E99A270B1F1B8E2BF
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33312e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 08:25:31 +0000
ROA not before: Fri 25 Sep 2026 08:20:31 +0000
ROA not after: Fri 24 Sep 2027 08:25:31 +0000
asID: 146813
IP address blocks: 46.183.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 03:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:8b:57:b7:05:d9:27:8b:01:77:17:3e:99:a2:70:b1:f1:b8:e2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Sep 25 08:20:31 2026 GMT
Not After : Sep 24 08:25:31 2027 GMT
Subject: CN=6B2746144374F67646B105615C885CA7AD04C37B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:5a:d7:69:87:04:d8:b5:0e:41:32:7e:d0:
62:1d:93:65:69:45:d5:f7:1d:73:d8:61:7d:f3:9d:
d3:67:fb:3c:5f:67:fd:4f:25:8a:4a:1c:16:5f:50:
60:43:1c:a8:7a:7e:1c:0b:94:ef:6f:75:16:1d:eb:
e6:10:ca:a2:ce:7e:14:3e:b7:ad:ee:ba:85:c2:e9:
dd:1b:82:b2:82:f2:01:2a:48:1d:b2:1b:f1:b4:57:
f5:fb:71:ab:bf:ab:fa:d5:5c:d0:ff:df:ca:fa:38:
fd:c5:5c:fa:dc:24:66:9c:b0:bf:d9:44:29:31:e3:
7c:b8:ff:d7:8e:8d:d9:f6:89:93:9e:e8:21:9d:8f:
df:25:31:7b:e2:27:e8:ea:8d:b8:09:d4:01:5b:a4:
77:ce:c1:52:41:ff:03:56:49:f1:aa:63:c9:c6:c7:
39:e3:17:f2:e3:92:76:91:6c:87:90:41:c3:f6:fd:
98:7b:cc:9e:89:2f:94:f7:c6:16:26:d1:47:ec:24:
69:ee:36:3a:49:41:18:47:a2:24:a8:4a:25:19:3a:
b9:68:86:01:7f:de:39:27:48:ad:e6:54:64:4a:c5:
8f:b7:87:08:85:4c:86:7d:44:92:89:cb:e7:12:01:
9d:3d:f5:01:60:a5:73:73:d9:4c:89:90:11:51:8d:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:27:46:14:43:74:F6:76:46:B1:05:61:5C:88:5C:A7:AD:04:C3:7B
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33312e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.31.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5c:01:61:e3:a2:0e:7d:5b:33:63:e3:04:21:1c:72:5f:ae:
27:02:5c:b0:5f:6b:ba:9f:9d:3b:06:a2:17:99:fa:cd:05:b6:
05:9a:f4:93:62:c4:50:eb:58:de:d8:e9:71:e7:99:fd:c4:05:
78:5c:5b:c3:34:f6:39:26:90:69:aa:4f:d4:2b:a2:5e:1d:84:
c4:ec:d1:a5:a9:81:8c:97:b9:c1:f7:9a:ce:ea:e3:52:ff:24:
1f:2b:dc:3a:b6:f7:68:e7:ac:6e:96:f4:27:30:88:d2:d7:fd:
5f:f6:e2:cd:45:26:d7:bd:dc:3b:1e:9c:b3:00:7b:52:89:e2:
b0:fc:a4:57:d1:85:15:6a:e3:04:60:af:5c:5c:65:c8:b8:97:
dd:47:bb:eb:5a:32:e0:75:73:28:29:e9:fc:cf:e6:b5:27:76:
82:c3:2e:cc:86:8c:b2:5c:33:ec:53:3b:58:dd:d9:e6:56:de:
21:5a:b4:4c:f7:10:b2:c5:56:a5:8a:4c:76:54:af:8c:b1:34:
33:63:d7:bc:b2:96:0f:3b:a7:3d:21:e6:ce:80:eb:e4:f0:7e:
d6:97:9b:bb:d9:18:95:fb:f9:3f:33:50:c3:e3:a8:6f:7c:29:
50:db:a9:2e:2f:5a:92:94:99:c1:96:da:91:8a:e6:3e:bb:90:
57:54:d9:bb
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUEYtXtwXZJ4sBdxc+maJwsfG44r8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj
YzY3N2IwMDAeFw0yNjA5MjUwODIwMzFaFw0yNzA5MjQwODI1MzFaMDMxMTAvBgNV
BAMTKDZCMjc0NjE0NDM3NEY2NzY0NkIxMDU2MTVDODg1Q0E3QUQwNEMzN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqb1rXaYcE2LUOQTJ+0GIdk2Vp
RdX3HXPYYX3zndNn+zxfZ/1PJYpKHBZfUGBDHKh6fhwLlO9vdRYd6+YQyqLOfhQ+
t63uuoXC6d0bgrKC8gEqSB2yG/G0V/X7cau/q/rVXND/38r6OP3FXPrcJGacsL/Z
RCkx43y4/9eOjdn2iZOe6CGdj98lMXviJ+jqjbgJ1AFbpHfOwVJB/wNWSfGqY8nG
xznjF/LjknaRbIeQQcP2/Zh7zJ6JL5T3xhYm0UfsJGnuNjpJQRhHoiSoSiUZOrlo
hgF/3jknSK3mVGRKxY+3hwiFTIZ9RJKJy+cSAZ099QFgpXNz2UyJkBFRjQzfAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUaydGFEN09nZGsQVhXIhcp60Ew3swHwYDVR0j
BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0
Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4
bmV3QS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAt
NmQxZS00YWU0LTkxNzctZDkzOGU5ODA0Mzk1LzAvMzQzNjJlMzEzODMzMmUzMzMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM2MzgzMTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LrcfMA0GCSqGSIb3DQEBCwUAA4IBAQA4XAFh46IOfVszY+MEIRxyX64nAlywX2u6
n507BqIXmfrNBbYFmvSTYsRQ61je2Olx55n9xAV4XFvDNPY5JpBpqk/UK6JeHYTE
7NGlqYGMl7nB95rO6uNS/yQfK9w6tvdo56xulvQnMIjS1/1f9uLNRSbXvdw7Hpyz
AHtSieKw/KRX0YUVauMEYK9cXGXIuJfdR7vrWjLgdXMoKen8z+a1J3aCwy7Mhoyy
XDPsUztY3dnmVt4hWrRM9xCyxValikx2VK+MsTQzY9e8spYPO6c9IebOgOvk8H7W
l5u72RiV+/k/M1DD46hvfClQ26kuL1qSlJnBltqRiuY+u5BXVNm7
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:02:36 2026 by rpki-client