Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231382e302f32342d3234203d3e20323132333834.roa
File: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier: iATVUumriorK7Pdv5iKgHpx/CwKgX/9pfUHykvA0Wrc=
Subject key identifier: 5A:94:48:C9:32:6F:7C:BC:4C:F1:94:97:8D:CA:58:35:4C:0B:DE:73
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 5325957F0287CEE69308EAA1B398554D9DD0B9
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231382e302f32342d3234203d3e20323132333834.roa
Signing time: Fri 25 Sep 2026 09:49:35 +0000
ROA not before: Fri 25 Sep 2026 09:44:35 +0000
ROA not after: Fri 24 Sep 2027 09:49:35 +0000
asID: 212384
IP address blocks: 45.8.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:25:95:7f:02:87:ce:e6:93:08:ea:a1:b3:98:55:4d:9d:d0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Sep 25 09:44:35 2026 GMT
Not After : Sep 24 09:49:35 2027 GMT
Subject: CN=5A9448C9326F7CBC4CF194978DCA58354C0BDE73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:49:9f:4f:3b:f2:84:73:2a:63:b1:96:65:
fb:ca:84:fe:b6:00:73:28:8b:7c:3d:60:e1:91:26:
18:81:d8:67:5b:da:2f:3c:fa:76:46:f8:1b:89:2e:
a1:be:36:0c:2a:85:1a:f5:79:7f:07:52:48:df:df:
df:c2:c9:e8:c1:be:bd:8d:5d:7b:3d:39:ac:dd:3e:
27:df:8c:e7:08:b3:96:a8:3d:ea:8e:11:a4:b4:ab:
5e:78:90:80:4a:98:69:35:0a:ec:b6:b8:91:95:7a:
4a:f6:ae:32:ce:48:3c:db:e1:b6:e2:11:36:0b:4d:
77:08:6f:35:78:a9:73:a4:32:99:a3:ba:e6:32:b0:
f2:05:20:83:4a:8e:b1:9c:45:07:49:39:7e:b6:4d:
b8:c4:52:5a:96:a9:56:86:1f:1f:36:ca:f3:dd:1e:
d3:da:4c:4f:61:1b:1e:f0:17:b0:5b:8e:17:39:cb:
b4:f9:4e:74:9d:ae:61:ac:02:4c:e1:fe:15:a1:ed:
58:36:e1:af:d3:3e:cf:3f:81:45:cc:58:1d:6e:fc:
9c:72:f7:49:72:3b:10:9f:05:20:c7:ad:b8:89:77:
66:31:d3:a9:27:f7:b3:f1:b1:02:4e:83:d7:04:5b:
10:ff:1b:af:f3:82:94:8b:72:d6:9e:63:b4:c1:da:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:94:48:C9:32:6F:7C:BC:4C:F1:94:97:8D:CA:58:35:4C:0B:DE:73
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231382e302f32342d3234203d3e20323132333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.218.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ea:85:99:2f:6c:8b:33:77:1b:75:b3:59:cc:c5:ee:e8:40:
2d:af:b7:99:2b:83:df:ee:91:3d:14:0b:52:23:55:ad:db:a3:
52:6e:df:84:46:cf:90:fa:5e:8f:13:18:01:57:da:ed:3e:02:
de:b1:b6:4c:f4:1f:77:5a:73:32:ba:88:dc:07:b6:25:fe:c6:
b9:85:45:8d:74:41:d8:b1:cd:da:dc:24:e1:62:e6:ac:9f:53:
14:e6:21:40:3e:8d:9d:49:77:5d:1d:79:28:0a:41:9c:44:9b:
5c:52:14:c3:76:f2:53:e5:5c:a6:06:ed:75:86:ad:99:ec:3b:
d3:f6:99:74:b6:48:c8:19:54:c0:73:83:cf:43:fc:c5:c7:12:
8c:30:58:7d:ef:18:33:c0:dc:b2:9d:2e:c8:9a:51:16:ee:b5:
d0:31:e6:9d:78:7b:e9:4f:53:d3:7a:c4:b0:e3:70:b0:fa:ca:
46:73:bc:98:cf:d9:9b:1d:ea:ee:17:b0:67:2e:c5:83:80:16:
e7:34:b2:66:69:63:51:9b:09:22:9f:76:d4:cf:83:20:23:3d:
c7:8d:7a:f2:b7:0d:e0:fa:a3:24:c3:9e:4b:85:16:c0:94:f7:
0f:b3:47:16:65:6f:7c:56:c4:aa:a7:83:fa:e0:03:45:09:33:
56:46:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:08:23 2026 by rpki-client