Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e203631333137.roa
File: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=
Subject key identifier: A2:B3:E4:8B:55:D2:50:98:38:2B:33:41:21:E8:39:1B:3B:40:65:B4
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 1DA8EA4F212076A9983B7E35F0E8973E20D70AED
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e203631333137.roa
Signing time: Thu 09 Jul 2026 19:49:07 +0000
ROA not before: Thu 09 Jul 2026 19:44:07 +0000
ROA not after: Thu 08 Jul 2027 19:49:07 +0000
asID: 61317
IP address blocks: 45.95.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a8:ea:4f:21:20:76:a9:98:3b:7e:35:f0:e8:97:3e:20:d7:0a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jul 9 19:44:07 2026 GMT
Not After : Jul 8 19:49:07 2027 GMT
Subject: CN=A2B3E48B55D25098382B334121E8391B3B4065B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:38:51:cb:cf:b7:9a:2c:cb:c2:b2:81:09:
27:2d:51:76:8c:ed:51:7e:8b:c9:22:87:ea:4f:28:
6e:67:c5:74:25:d2:d2:f8:4f:a4:8b:2a:b2:73:34:
a0:f9:bc:25:fb:ff:fc:2b:8f:53:22:86:b0:a1:b5:
3a:d6:5f:c5:da:8c:58:d2:a8:1f:24:0e:32:87:ec:
0e:af:70:83:b4:c7:a8:57:84:cc:93:17:fe:00:43:
2e:93:7c:bc:14:19:4e:7a:87:67:48:81:3c:b7:cc:
13:00:f5:e1:09:0c:17:36:4c:17:d3:02:33:40:e5:
28:1b:c7:43:54:1e:d4:20:f1:ce:97:bf:78:e0:13:
c8:26:95:6d:dc:68:6d:a0:1a:e2:ec:65:8b:c1:35:
4e:53:e4:1b:8c:83:96:79:78:45:c0:d3:e2:bb:fc:
e4:8d:14:14:eb:46:85:5b:70:d6:c8:86:ac:34:37:
be:76:1c:07:ce:cd:a0:23:50:aa:cd:93:dc:85:4a:
c9:cc:57:bf:ea:05:45:9b:0c:e4:59:c8:c4:6a:c2:
2d:23:9d:8a:f8:6d:09:1f:32:fb:8d:64:2d:ee:0a:
30:2b:06:96:c1:82:f0:f2:9a:43:3d:21:60:b6:e4:
5d:34:45:d1:fd:56:fc:ff:31:a5:ae:07:52:ae:d5:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B3:E4:8B:55:D2:50:98:38:2B:33:41:21:E8:39:1B:3B:40:65:B4
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e2:90:8f:40:e9:73:57:08:d1:aa:41:dd:2b:2d:3c:51:c0:
bf:11:3a:04:81:14:28:46:e2:97:b2:55:b5:81:fe:f1:cf:c1:
73:ae:08:6f:e0:d9:40:8a:4a:e6:f0:fe:a5:22:81:29:e1:15:
54:1a:2d:86:87:23:7e:f7:e9:f0:2f:34:5c:3d:b2:e1:a5:d5:
f6:32:06:94:47:b3:51:eb:8e:73:9d:35:2c:32:d4:02:0a:c7:
3d:b9:00:13:66:6c:6e:0f:a7:56:b9:3c:b4:9f:8d:36:ae:53:
82:4a:f0:d1:8f:59:18:14:50:10:05:35:ad:77:9e:bf:1d:a4:
f4:26:f8:2c:6f:88:22:0c:97:53:41:d3:1e:ed:43:90:bc:66:
38:bc:0b:58:5f:76:02:c8:a7:a1:f8:6d:77:d5:0f:cf:46:56:
cd:d6:0d:2d:4f:a9:22:e2:27:8d:56:db:44:b7:ea:3c:56:1f:
c0:3f:63:4d:8f:7a:02:7d:ee:27:af:9d:37:3e:c5:27:9a:6a:
50:fa:a4:ed:eb:d8:cd:48:54:56:82:1d:d7:32:33:93:47:18:
79:5d:e6:70:b6:17:86:b0:2c:73:b0:fb:34:ca:97:8a:80:74:
a5:15:85:9a:b0:6c:29:f2:56:fe:f6:db:83:61:64:01:3c:24:
73:63:2e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:14:55 2026 by rpki-client