Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e203239383032.roa
File: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=
Subject key identifier: F5:45:5E:E6:F3:97:1C:75:77:24:F6:13:02:D0:07:9E:A4:BA:60:9A
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 0832986BCBD0F040113174ADBE0C49F6B49B57C1
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e203239383032.roa
Signing time: Thu 09 Jul 2026 15:49:07 +0000
ROA not before: Thu 09 Jul 2026 15:44:07 +0000
ROA not after: Thu 08 Jul 2027 15:49:07 +0000
asID: 29802
IP address blocks: 45.95.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:32:98:6b:cb:d0:f0:40:11:31:74:ad:be:0c:49:f6:b4:9b:57:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jul 9 15:44:07 2026 GMT
Not After : Jul 8 15:49:07 2027 GMT
Subject: CN=F5455EE6F3971C757724F61302D0079EA4BA609A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:e2:38:4d:f8:4a:ab:e9:d7:e7:d1:b1:8a:
80:69:58:db:0f:3d:91:57:11:0e:42:dd:f7:85:73:
41:1e:fd:fa:01:67:0c:a0:85:75:99:04:99:1c:61:
4f:86:01:07:06:8c:4b:e0:b8:22:8f:86:41:9b:8b:
94:be:aa:7b:f6:83:6f:61:00:9f:48:c1:48:0b:d6:
d1:cd:2b:ac:4f:cd:a2:07:1c:b5:03:70:87:ad:10:
5d:77:ad:1d:f8:53:b6:ed:66:03:b2:64:5f:e4:49:
56:52:a2:85:40:b2:0c:32:af:16:e5:ff:88:83:b5:
b9:36:fd:1e:ea:7b:5d:e2:d8:c1:aa:9c:d3:a9:cc:
0a:44:9a:34:2a:1b:60:ff:6b:47:96:62:cd:f3:0e:
cb:d5:87:38:6b:83:3f:a5:95:a4:71:30:bd:2d:7f:
70:0e:be:2b:a8:31:d6:6b:fc:85:6f:2c:9c:98:fd:
25:68:48:c2:5e:1c:68:35:9f:54:68:9f:da:09:63:
76:0d:c1:c8:31:ca:b2:9c:1e:cd:d1:eb:2d:19:e3:
7d:2d:99:f9:82:a5:1c:1e:fd:ba:06:95:92:97:69:
a7:7b:40:5b:83:aa:7a:53:df:50:7a:d8:3b:32:b2:
4b:d4:df:08:f5:5a:24:59:04:24:51:41:c6:ea:bd:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:45:5E:E6:F3:97:1C:75:77:24:F6:13:02:D0:07:9E:A4:BA:60:9A
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.215.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:93:26:54:b5:41:d9:9e:7d:63:ab:5c:0c:18:9e:f5:61:e8:
a0:f7:32:1e:ac:f6:82:7b:26:cb:30:a4:4e:5e:75:c3:ca:b7:
26:fb:95:37:f1:8d:1c:b9:b0:d1:5b:e2:9f:87:b7:4b:fb:b4:
62:38:e0:fa:06:59:fd:44:71:ee:44:71:53:de:0d:02:84:05:
8a:c0:07:3e:28:f7:07:67:7f:07:8c:51:d8:00:e8:48:93:96:
14:91:e2:ae:3b:7b:05:7c:1f:cd:30:f7:c3:d9:cc:7c:5b:c8:
43:e8:8b:19:a9:41:d1:4c:07:d9:d7:cd:42:2b:43:b6:4c:3e:
78:c8:34:30:b1:52:4d:56:53:87:5c:b6:0d:ec:3e:bf:ac:d8:
59:d1:28:0e:9e:25:83:92:1a:95:81:f6:a8:16:3b:82:54:d9:
ed:eb:ca:33:4d:e1:d9:49:98:3a:88:97:85:a0:39:81:9d:da:
c2:c7:eb:0a:d6:9e:f4:bf:bb:2b:4c:e5:fe:7f:df:34:e0:d2:
fd:ee:6b:bc:5f:76:eb:06:30:65:63:ac:f1:a0:94:c4:b5:5a:
41:64:46:2d:f6:9d:3a:2d:4a:2c:23:89:07:ef:aa:2d:92:f2:
08:f1:ad:ac:12:43:45:75:b6:26:92:4c:6b:fa:c3:49:3c:bd:
c5:d6:09:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:40 2026 by rpki-client