
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231332e302f32342d3234203d3e20343030303339.roa
File: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=
Subject key identifier: 6F:53:24:99:30:10:59:21:23:98:09:D0:9B:03:FF:21:FE:E4:DF:E3
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 208A3E77AA4400F4215FB3B8652D842B92E51860
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231332e302f32342d3234203d3e20343030303339.roa
Signing time: Tue 09 Sep 2025 18:55:00 +0000
ROA not before: Tue 09 Sep 2025 18:50:00 +0000
ROA not after: Tue 08 Sep 2026 18:55:00 +0000
asID: 400039
IP address blocks: 45.95.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8a:3e:77:aa:44:00:f4:21:5f:b3:b8:65:2d:84:2b:92:e5:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Sep 9 18:50:00 2025 GMT
Not After : Sep 8 18:55:00 2026 GMT
Subject: CN=6F53249930105921239809D09B03FF21FEE4DFE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:e8:3c:0d:a0:39:0a:f1:71:94:d9:b8:4f:
62:1c:52:f8:92:1f:2a:30:ce:e5:f8:37:c5:fd:00:
95:ca:b1:15:f2:dc:c8:3b:f6:f7:43:cc:5a:1e:24:
3b:55:64:39:d7:96:57:ed:96:45:77:df:33:6f:13:
60:12:7d:b5:61:a1:49:00:5e:ce:44:b5:da:9c:2d:
c8:14:fb:97:a6:5a:0f:b4:f3:c1:a7:7b:4f:e5:cf:
93:61:80:ef:d9:9b:44:42:bd:9b:9f:b1:c5:ea:29:
d4:b2:eb:d4:cc:ef:15:35:0a:4b:74:04:2e:5b:98:
89:21:3b:54:b4:7d:97:71:bf:46:4b:88:68:f4:96:
75:91:ff:ec:bb:19:a3:04:26:9e:1c:46:49:7a:bd:
3b:aa:79:8a:ba:33:32:3c:5a:cc:38:f0:45:e7:99:
19:52:42:27:ad:bb:eb:58:25:1b:20:25:82:5b:78:
b3:a1:50:eb:42:ba:92:2c:12:90:9c:6c:07:a7:d1:
a8:2c:82:b0:3a:fe:c4:e2:4b:88:a7:2c:2b:73:15:
36:b0:18:71:81:29:1d:bb:2b:7b:f0:92:4f:66:b1:
69:12:7c:4e:c5:53:df:ca:e6:bc:53:71:53:ae:b7:
68:f7:5c:99:a8:5f:0f:f8:a3:c2:7d:70:19:ed:53:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:53:24:99:30:10:59:21:23:98:09:D0:9B:03:FF:21:FE:E4:DF:E3
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231332e302f32342d3234203d3e20343030303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.213.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8c:b1:38:55:7e:c0:c6:bd:67:76:a9:cd:65:83:9e:e4:2a:
84:cf:91:bd:79:0a:6b:96:84:cd:13:ff:28:41:ad:e6:b5:a4:
8c:81:de:7a:0b:b7:eb:7b:4e:f2:9b:5d:1d:95:fa:3b:1f:4a:
e7:1e:57:b2:3d:92:be:ef:dd:5a:32:3e:af:00:5a:5b:ab:87:
c7:17:47:79:29:d6:c7:76:08:32:0c:79:65:c0:33:06:6d:0e:
09:6c:99:2f:67:c8:3b:34:bc:16:0f:70:5e:b8:3d:05:22:2a:
ba:10:59:36:5f:e6:46:4f:2d:18:8a:41:b4:2e:fe:5f:97:39:
61:3f:32:a7:a5:20:92:db:bc:9a:57:3f:93:72:49:a3:84:09:
9d:3e:d2:db:4d:c9:d2:81:8e:9f:ce:55:0f:09:23:40:8b:e9:
bb:aa:88:3a:bb:5e:a8:84:46:fa:36:b4:82:2f:dc:87:3f:da:
0e:d9:b1:75:99:29:8c:2a:18:d0:77:58:98:c1:25:a2:48:08:
b0:1c:6d:e5:c5:29:01:06:b4:47:2b:4a:f8:b4:52:04:d3:6f:
1f:2d:3e:49:f0:e2:88:38:24:a3:4a:c5:b8:49:97:f9:13:3a:
0e:f8:94:39:79:76:65:e6:d6:49:a4:7a:da:7a:a0:bb:2a:42:
99:20:ed:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:21:47 2025 by rpki-client