Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231392e302f32342d3234203d3e203536393133.roa
File: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: G0c0TG4r9M6R4wR7nSPXALxBy7wbHZv94f8xKNobEpM=
Subject key identifier: 16:B5:42:F6:C0:AA:B3:AF:6E:4E:85:A2:14:0B:3E:8F:B4:AE:00:AA
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 0B0D9B8DB27424EEF11726CA4201095E45A72067
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231392e302f32342d3234203d3e203536393133.roa
Signing time: Wed 01 Jul 2026 14:48:52 +0000
ROA not before: Wed 01 Jul 2026 14:43:52 +0000
ROA not after: Wed 30 Jun 2027 14:48:52 +0000
asID: 56913
IP address blocks: 45.132.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:0d:9b:8d:b2:74:24:ee:f1:17:26:ca:42:01:09:5e:45:a7:20:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 1 14:43:52 2026 GMT
Not After : Jun 30 14:48:52 2027 GMT
Subject: CN=16B542F6C0AAB3AF6E4E85A2140B3E8FB4AE00AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a5:ba:46:9f:58:c9:f4:fd:1d:f1:de:b2:00:
5b:fa:7c:5a:29:82:00:43:23:72:5f:a7:44:cb:0d:
09:5a:0f:09:9c:52:ad:e4:2a:5b:c0:cd:2f:e9:ab:
f1:50:1b:fe:76:e0:17:6d:33:c2:8a:07:a0:70:00:
32:f5:d5:0f:5a:1f:b3:b5:02:3a:a5:37:9d:92:97:
b1:02:69:64:6d:fd:c9:4a:66:68:a8:88:3a:6e:13:
00:9c:b9:71:93:21:39:5c:ab:13:9d:21:d0:c1:15:
2c:76:7c:ed:99:bb:4e:1f:42:5b:fb:17:c8:c1:bf:
37:38:a1:bf:a4:2b:6c:88:0d:71:0d:e0:15:fc:74:
32:e5:3c:56:d3:ab:f5:b2:6c:04:4e:71:9d:0b:52:
02:6d:48:20:57:76:b7:04:77:5d:03:b8:c3:bc:4e:
80:43:5c:19:6b:82:2c:ba:0a:5e:40:97:d2:bd:ce:
b5:30:c2:30:7b:17:e2:8f:46:d0:55:e5:9a:97:91:
b6:8a:41:6a:2d:45:e4:70:5c:19:65:54:3b:41:07:
e9:4a:e0:cf:8c:0e:67:4d:25:90:0d:f7:e0:07:de:
fd:9c:1e:35:7d:0b:96:04:80:3e:aa:7a:4b:83:e6:
95:73:ee:67:64:7b:f0:56:8e:17:73:c1:8f:48:f5:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B5:42:F6:C0:AA:B3:AF:6E:4E:85:A2:14:0B:3E:8F:B4:AE:00:AA
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231392e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.219.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fa:29:a8:e7:e6:8a:3e:9b:6f:66:db:65:e2:77:10:41:b9:
4b:90:15:00:56:40:bc:fb:aa:fa:98:74:a6:9d:b8:24:dc:67:
15:1d:6f:87:61:42:6f:00:51:40:34:80:f0:c7:90:7f:2a:0c:
75:a0:0c:dd:ff:a8:5b:0f:45:d0:ba:11:d5:eb:49:37:07:4f:
53:b4:52:bb:24:ba:6b:8d:0d:73:c1:d5:d8:43:76:07:8c:15:
8b:95:f1:0d:50:30:b3:de:3d:03:a0:97:41:8e:ba:aa:e0:96:
43:c7:a1:d7:99:2f:33:47:d3:fd:03:e7:6f:7c:cc:f3:65:8d:
4d:f9:38:b7:54:de:aa:47:b8:92:0b:5e:ed:67:ea:16:62:b3:
29:c3:50:bc:8e:7b:81:7d:80:25:28:08:c8:9e:b0:88:96:57:
12:af:1a:49:4f:3c:e9:58:bc:27:23:5f:6e:15:f3:de:c0:9f:
8a:c6:0b:6e:20:1f:06:fc:55:a3:e2:46:71:32:e6:6f:d1:bf:
70:7b:d1:d6:c7:e6:26:e2:72:15:1f:19:91:b8:83:75:7a:5b:
72:a4:20:4a:c2:a5:13:e8:30:d0:57:37:ea:a4:ba:61:57:6e:
ff:86:52:63:77:f7:0f:6d:81:68:d5:6b:b1:46:a5:66:d2:d6:
52:ad:ab:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:43 2026 by rpki-client