Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33312e302f32342d3234203d3e203433333530.roa
File: 34362e3138332e33312e302f32342d3234203d3e203433333530.roa (raw, json)
Hash identifier: xgztmir76zbcn1TSqgELAY0RZNOYsv6tbCBjd0ajcKA=
Subject key identifier: FB:BB:67:F5:09:94:09:47:C6:CF:3D:3D:D0:B8:9A:EB:B1:B6:3F:D0
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 3B11F90896AEC6C3F516B7C38A2B62940DA5BE5E
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33312e302f32342d3234203d3e203433333530.roa
Signing time: Thu 19 Mar 2026 13:10:21 +0000
ROA not before: Thu 19 Mar 2026 13:05:21 +0000
ROA not after: Thu 18 Mar 2027 13:10:21 +0000
asID: 43350
IP address blocks: 46.183.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:11:f9:08:96:ae:c6:c3:f5:16:b7:c3:8a:2b:62:94:0d:a5:be:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Mar 19 13:05:21 2026 GMT
Not After : Mar 18 13:10:21 2027 GMT
Subject: CN=FBBB67F509940947C6CF3D3DD0B89AEBB1B63FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:a7:c7:3e:df:42:9a:73:a0:06:38:d8:53:
92:11:e8:e8:be:0c:3e:44:24:f8:12:39:a6:34:7b:
d2:da:25:be:b6:d8:ae:1e:42:d1:4e:95:e5:22:ba:
d9:fa:96:df:6a:d6:8e:31:4b:a9:64:4f:3d:17:2b:
85:39:f1:6a:10:bb:34:3f:da:77:64:e2:44:23:6d:
38:03:29:21:cf:67:74:cb:44:5c:22:55:41:28:60:
d6:2c:08:8d:01:c6:4d:cc:c2:c4:b5:0a:ad:67:44:
54:55:59:1c:42:8f:f1:e1:be:d7:36:c0:66:4d:ac:
d9:f7:77:db:b3:72:98:98:e9:ce:74:57:71:9e:c7:
e0:bd:53:ec:fb:65:be:5c:b5:ff:91:38:a1:ed:1a:
44:cd:79:1d:0d:d4:28:7d:d8:6f:f2:02:b8:c0:73:
df:6b:56:3f:9a:38:8e:c1:9f:d5:d5:30:03:96:ac:
a2:60:96:7f:90:05:2b:b3:7a:43:ca:37:d7:e0:ee:
f8:ee:db:5b:ea:af:21:e5:9a:96:60:e4:f5:0d:83:
fa:64:d3:3b:cc:06:b7:0b:92:11:70:57:41:1d:eb:
f6:57:61:a7:19:5d:43:1d:81:9a:35:1d:56:1d:23:
b3:63:22:8a:2b:54:6f:09:d7:4b:1f:0b:de:a4:6e:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:67:F5:09:94:09:47:C6:CF:3D:3D:D0:B8:9A:EB:B1:B6:3F:D0
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33312e302f32342d3234203d3e203433333530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:07:cd:32:f5:2e:5a:22:8e:5d:1e:c7:ec:cd:f5:5f:53:71:
0b:10:c4:37:bf:6c:9d:2f:8a:6d:91:13:ee:02:08:9b:b6:81:
02:be:c4:6e:1e:31:7c:15:8d:25:8a:3f:1d:cd:cd:05:9d:9f:
f7:1c:ad:8a:c5:9b:09:ef:3f:2b:75:43:b1:5d:1e:7f:2a:70:
9a:d2:ee:30:e8:38:6a:f3:85:41:58:1a:70:d1:97:27:f8:20:
5d:5b:0e:a4:03:6f:94:e2:ea:20:1e:c3:97:4a:5d:39:88:93:
5c:4f:ba:65:e3:a6:9d:23:62:e0:4b:50:de:15:4e:0f:7f:47:
2a:b2:87:f1:57:b9:67:ab:d5:de:9f:d2:92:ee:9e:94:a7:b8:
6f:25:9d:36:fc:02:b0:1b:fc:c2:85:c6:85:21:95:54:dd:33:
d5:1d:df:ae:71:60:cf:9b:e4:05:84:a0:a3:03:c6:07:e4:c1:
38:c8:55:a9:4f:4b:73:27:b9:04:49:38:01:d5:8e:13:64:5f:
06:75:d8:a6:fe:74:ac:c7:99:21:a7:cf:e3:ab:92:7a:8f:2d:
6e:48:67:dd:46:5e:10:8d:41:e3:15:00:6f:73:0d:ee:a3:bb:
ef:06:8a:2e:dc:34:4f:b9:ec:f0:01:44:75:e8:50:61:59:a5:
d0:21:81:37
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOxH5CJauxsP1FrfDiitilA2lvl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj
YzY3N2IwMDAeFw0yNjAzMTkxMzA1MjFaFw0yNzAzMTgxMzEwMjFaMDMxMTAvBgNV
BAMTKEZCQkI2N0Y1MDk5NDA5NDdDNkNGM0QzREQwQjg5QUVCQjFCNjNGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PqfHPt9CmnOgBjjYU5IR6Oi+
DD5EJPgSOaY0e9LaJb622K4eQtFOleUiutn6lt9q1o4xS6lkTz0XK4U58WoQuzQ/
2ndk4kQjbTgDKSHPZ3TLRFwiVUEoYNYsCI0Bxk3MwsS1Cq1nRFRVWRxCj/Hhvtc2
wGZNrNn3d9uzcpiY6c50V3Gex+C9U+z7Zb5ctf+ROKHtGkTNeR0N1Ch92G/yArjA
c99rVj+aOI7Bn9XVMAOWrKJgln+QBSuzekPKN9fg7vju21vqryHlmpZg5PUNg/pk
0zvMBrcLkhFwV0Ed6/ZXYacZXUMdgZo1HVYdI7NjIoorVG8J10sfC96kbmtRAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+7tn9QmUCUfGzz090Lia67G2P9AwHwYDVR0j
BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0
Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4
bmV3QS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAt
NmQxZS00YWU0LTkxNzctZDkzOGU5ODA0Mzk1LzAvMzQzNjJlMzEzODMzMmUzMzMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMzMzMzUzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC63
HzANBgkqhkiG9w0BAQsFAAOCAQEADAfNMvUuWiKOXR7H7M31X1NxCxDEN79snS+K
bZET7gIIm7aBAr7Ebh4xfBWNJYo/Hc3NBZ2f9xytisWbCe8/K3VDsV0efypwmtLu
MOg4avOFQVgacNGXJ/ggXVsOpANvlOLqIB7Dl0pdOYiTXE+6ZeOmnSNi4EtQ3hVO
D39HKrKH8Ve5Z6vV3p/Sku6elKe4byWdNvwCsBv8woXGhSGVVN0z1R3frnFgz5vk
BYSgowPGB+TBOMhVqU9Lcye5BEk4AdWOE2RfBnXYpv50rMeZIafP46uSeo8tbkhn
3UZeEI1B4xUAb3MN7qO77waKLtw0T7ns8AFEdehQYVml0CGBNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:38:48 2026 by rpki-client