Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231392e302f32342d3234203d3e2039303039.roa
File: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=
Subject key identifier: 72:85:84:50:F9:BD:52:40:05:7C:9D:A1:57:66:5A:6D:E3:F5:6C:9A
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 61DA565A62F54E2036ACA3F30272287213AD7775
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231392e302f32342d3234203d3e2039303039.roa
Signing time: Wed 17 Sep 2025 10:55:07 +0000
ROA not before: Wed 17 Sep 2025 10:50:07 +0000
ROA not after: Wed 16 Sep 2026 10:55:07 +0000
asID: 9009
IP address blocks: 45.8.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:da:56:5a:62:f5:4e:20:36:ac:a3:f3:02:72:28:72:13:ad:77:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Sep 17 10:50:07 2025 GMT
Not After : Sep 16 10:55:07 2026 GMT
Subject: CN=72858450F9BD5240057C9DA157665A6DE3F56C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:e0:56:3c:c0:c5:7e:71:f2:3f:bb:d7:0e:
29:00:da:6c:37:99:83:73:66:d8:17:be:a7:c1:26:
b3:82:85:ca:f7:1a:a5:9b:3c:f5:16:37:10:16:d5:
a5:c6:59:18:5f:77:4d:02:29:d6:a6:7e:63:61:ca:
e4:81:d4:47:37:03:44:df:92:10:20:23:34:08:69:
64:35:63:27:b2:f3:f6:65:f9:b2:69:1f:fd:a7:f7:
20:8e:57:01:35:68:18:3c:d9:c9:0d:7a:1b:37:db:
f3:74:70:d5:94:58:be:30:94:8a:16:25:cb:d5:0d:
ee:16:72:e5:9f:33:93:9d:77:d5:6b:a3:2b:ff:f3:
41:23:54:3f:c2:28:72:51:34:79:34:c1:a5:9d:67:
5e:73:8a:82:01:ea:f1:b7:8f:4d:37:48:ff:c6:99:
6c:ba:62:97:12:29:fb:60:01:72:89:fe:45:3d:c3:
b4:19:9a:5b:93:a3:86:5a:bc:a0:c4:50:df:0b:74:
19:ee:76:59:e1:fb:71:6b:37:23:f1:60:00:ef:16:
a4:1c:2e:5f:b5:c0:3f:88:73:43:33:66:55:bc:67:
cc:b0:02:6c:1b:6c:12:c1:39:58:12:6d:da:79:cf:
36:d1:ed:54:fb:f1:95:1e:1b:1a:50:90:c9:83:bc:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:85:84:50:F9:BD:52:40:05:7C:9D:A1:57:66:5A:6D:E3:F5:6C:9A
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231392e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:cd:da:3f:95:f7:45:d3:42:2a:0b:84:21:90:d9:ee:f3:f9:
4f:36:97:34:e3:bf:3c:d2:1a:99:70:0d:d0:4e:5a:cb:80:54:
07:c4:0b:e4:5d:23:18:4f:91:9e:d0:7f:41:73:e3:ce:04:09:
47:f5:ef:32:12:94:3e:0f:a8:f1:3e:3e:70:8e:83:78:04:c7:
44:23:f3:72:d7:70:1b:74:25:5c:cb:2e:a6:d4:11:3f:b4:69:
8a:32:12:d1:af:a6:88:a6:85:02:ef:fb:d7:5d:10:ef:c7:cb:
82:74:c0:09:ee:c7:de:71:b0:b3:94:0c:1e:03:08:e4:5d:26:
a5:7f:2e:68:68:3c:64:90:30:a9:ba:4c:24:92:54:e9:f3:7c:
67:7f:c7:eb:0e:23:84:e6:f3:21:de:91:94:38:42:f4:23:14:
19:20:c8:2b:ca:8f:a4:4c:73:ec:ac:7b:b1:5b:c5:f6:3b:7c:
dc:15:9a:2f:ec:ea:c1:db:30:ae:b2:49:00:4c:15:11:94:73:
d6:15:47:85:20:42:e9:b2:cb:24:d3:da:cd:60:2c:10:3f:fb:
fe:ab:28:78:74:65:65:1a:74:38:2c:2a:90:22:5a:62:3a:1b:
06:e0:16:a2:57:6e:aa:8f:22:e1:1d:bb:4c:72:25:8b:c2:bd:
45:4c:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:11 2025 by rpki-client