Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3233203d3e203437343437.roa
File: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (raw, json)
Hash identifier: 7KlnQuTWqE35EvvZ6Oc9Z0eOmEdOopKsfo+J34frqK4=
Subject key identifier: 2F:4C:EF:81:53:4A:2A:3A:AD:B6:75:0B:D3:43:6B:38:A4:A6:43:9C
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 17595C839C84E34842981AA6E28D92B84001DE84
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3233203d3e203437343437.roa
Signing time: Fri 30 Oct 2026 13:49:39 +0000
ROA not before: Fri 30 Oct 2026 13:44:39 +0000
ROA not after: Fri 29 Oct 2027 13:49:39 +0000
asID: 47447
IP address blocks: 45.146.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:59:5c:83:9c:84:e3:48:42:98:1a:a6:e2:8d:92:b8:40:01:de:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Oct 30 13:44:39 2026 GMT
Not After : Oct 29 13:49:39 2027 GMT
Subject: CN=2F4CEF81534A2A3AADB6750BD3436B38A4A6439C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:87:cf:96:47:be:39:c7:c9:c2:a3:d2:74:
03:6d:18:05:67:ee:5f:f0:70:92:e2:e1:5b:19:e6:
43:a9:49:35:5f:ef:c3:32:fe:56:25:1a:f3:e9:b7:
1a:96:bb:33:06:89:fb:25:59:a1:cf:31:cf:20:cb:
09:10:52:89:8f:36:31:f7:74:a7:35:eb:00:58:ce:
0b:f9:ff:e8:70:44:bc:46:3e:15:1d:29:e3:af:f7:
20:75:93:32:ce:b2:5c:09:45:a5:02:b8:ec:78:c2:
cd:5b:72:8e:97:db:8e:a8:76:a2:e5:da:f8:46:c9:
dd:df:3f:0e:48:cb:a6:d8:8c:df:42:b8:20:bc:ea:
b0:d1:ca:4b:76:2f:3d:62:14:ef:ff:1a:2d:24:da:
ea:3b:46:e7:71:a5:27:e7:68:2e:26:2a:b1:ce:1a:
e2:67:b3:fe:9d:7c:39:16:a9:f7:12:35:7b:27:38:
1a:4c:29:05:76:b8:c7:1b:44:9b:5e:17:b4:80:73:
63:14:18:d6:91:33:06:de:36:78:8f:6a:c0:b3:4a:
2b:4e:f7:28:f6:c2:f9:14:f5:ba:d2:2b:c2:79:85:
99:bb:de:35:be:2f:29:23:5a:86:26:04:8a:c9:fa:
f4:5e:31:03:fe:07:39:51:1a:35:00:7a:93:fc:ee:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4C:EF:81:53:4A:2A:3A:AD:B6:75:0B:D3:43:6B:38:A4:A6:43:9C
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3233203d3e203437343437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.160.0/23
Signature Algorithm: sha256WithRSAEncryption
43:6a:51:c2:0e:48:0c:12:20:3a:3f:e5:89:dc:d4:5e:b4:cb:
3e:13:5c:9a:86:25:7e:e1:4c:d3:7c:7b:27:98:34:4c:c9:bf:
b9:d4:6d:90:4c:ae:c3:bb:73:3f:22:00:8d:9b:c6:3f:36:96:
4a:de:31:ca:4e:c0:be:18:67:a7:3e:f6:49:4c:99:24:12:9b:
65:0f:42:e7:a5:8e:62:46:7d:d7:f8:2d:c1:e3:1f:16:98:84:
23:bb:dd:c4:a0:6b:28:5c:e5:66:71:be:ec:90:94:55:4d:19:
20:a5:38:71:9b:1d:98:a0:f3:b5:b7:c6:11:99:ce:ef:82:50:
d6:e3:2f:39:18:b1:30:7c:08:7f:37:16:26:9b:74:b4:87:dd:
12:63:53:7d:8e:a2:1c:82:65:cf:26:26:5c:de:df:2b:d3:1c:
da:d2:ae:ae:95:c7:c5:04:09:2c:2d:be:ad:20:81:2d:9d:04:
8b:e4:ff:d0:8e:03:12:5d:ea:36:4c:dc:28:52:11:2f:60:33:
fc:9d:78:68:26:38:73:68:6b:90:35:de:01:95:bc:85:ba:30:
92:a8:d0:6f:e7:aa:5b:20:2a:24:35:58:db:70:ea:19:36:16:
7c:17:da:39:9e:02:da:0c:1e:7d:cf:26:b2:11:2d:8a:85:41:
07:76:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:19:48 2026 by rpki-client