Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31322e302f32332d3234203d3e20383334.roa
File: 34352e3132382e31322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: qQDmU42EWjU4wKUevsNDoEYYa9XBhD7nPI2x3mfk/9k=
Subject key identifier: 30:18:B2:57:E4:20:23:71:2B:E4:57:0F:8D:28:66:81:AF:92:7D:9C
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 1FBC66BD6CA2940B9D762F2592A203E69E7D77A6
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31322e302f32332d3234203d3e20383334.roa
Signing time: Fri 03 Jul 2026 01:48:53 +0000
ROA not before: Fri 03 Jul 2026 01:43:53 +0000
ROA not after: Fri 02 Jul 2027 01:48:53 +0000
asID: 834
IP address blocks: 45.128.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:bc:66:bd:6c:a2:94:0b:9d:76:2f:25:92:a2:03:e6:9e:7d:77:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 3 01:43:53 2026 GMT
Not After : Jul 2 01:48:53 2027 GMT
Subject: CN=3018B257E42023712BE4570F8D286681AF927D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:a6:cd:3f:d9:9d:3f:42:33:8f:26:5e:ee:
4b:7f:73:59:fc:7c:d7:10:eb:e5:76:3b:1e:6c:56:
f7:16:05:24:0d:21:a0:fd:77:34:80:10:78:ed:93:
f3:15:77:4b:eb:36:82:37:5a:4c:27:9f:78:d5:8f:
c0:a7:b5:f5:e3:41:b4:f1:0a:b2:69:eb:be:5e:63:
7c:b6:78:2f:fd:51:49:ca:6a:c8:16:36:bf:20:67:
90:26:99:a0:68:55:3d:c2:f6:28:b8:d2:4c:f8:65:
9a:0c:93:d7:05:1e:19:a2:ad:dd:1c:8f:8d:6a:07:
46:47:e2:7c:17:f2:e4:c0:e1:71:37:00:36:d5:0b:
aa:f1:ef:aa:5f:80:28:a8:d6:55:c8:60:68:c3:82:
19:4e:5e:0a:88:4d:13:5d:b9:31:b5:70:f4:4c:e0:
34:f6:58:78:f0:c6:b1:e5:47:44:d2:ce:91:3e:17:
d2:48:1d:f7:4b:e2:0a:c8:3d:95:d2:30:2d:a5:55:
43:1c:06:07:ea:08:50:91:82:ac:ec:c3:5d:2d:71:
57:14:d8:bf:1b:c2:41:39:ec:c8:e5:42:7b:e2:12:
ca:11:49:cc:f0:7c:cc:21:0d:e0:b9:84:88:ea:24:
8d:f4:e5:d3:b1:41:11:13:3e:dd:4d:68:95:83:2d:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:18:B2:57:E4:20:23:71:2B:E4:57:0F:8D:28:66:81:AF:92:7D:9C
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.12.0/23
Signature Algorithm: sha256WithRSAEncryption
24:f3:d9:1b:e1:3e:4f:79:bf:69:3e:60:ae:2b:40:dc:8b:84:
c8:57:ea:2a:c4:b6:74:d7:a5:9d:e6:59:15:ff:38:a2:62:c2:
74:8f:36:76:82:05:98:19:1b:9b:c8:c2:02:da:a4:28:38:3b:
cd:66:6e:ea:81:a0:b9:89:b3:91:1f:c9:28:bb:a9:83:9f:27:
56:5c:8f:30:46:e0:b7:64:b6:9c:87:55:9a:e3:14:71:49:28:
50:9e:4f:29:c7:f3:2c:96:70:c5:aa:ef:9c:bc:e5:53:b5:0a:
ba:2c:bb:bf:10:10:08:cb:66:d6:a2:42:ed:46:cc:27:02:82:
53:d8:0e:0a:14:9e:e1:95:90:49:a3:a9:bf:f1:8e:0c:43:c2:
14:68:f4:8b:9e:6f:e4:73:5c:5f:f3:b6:2d:e2:dc:6e:e7:f6:
6c:32:d9:61:58:ba:4e:9a:43:b6:ec:d8:d2:c9:f6:26:2f:5f:
00:77:47:79:e8:1a:f0:55:7e:9d:76:8e:32:b0:4c:fa:1c:c8:
ab:db:7f:d6:b2:74:5e:4b:8d:08:05:5e:0e:77:d8:71:3c:7e:
51:28:7a:68:59:4c:6b:ad:c7:5f:99:ab:45:91:c2:30:20:27:
00:fe:6b:81:3f:4b:d1:0b:d3:94:a7:f2:49:18:85:8a:12:fe:
49:42:36:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:32 2026 by rpki-client