Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33382e302f32342d3234203d3e203330363434.roa
File: 34352e3134302e33382e302f32342d3234203d3e203330363434.roa (raw, json)
Hash identifier: AZZB9SuLX1x8XpwKAmFMXbenhTiNAkpOpPfsMOXVeRE=
Subject key identifier: 69:C3:E9:14:87:6D:AF:1B:89:85:B9:F5:81:77:BD:DC:4D:8B:9C:7E
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 427BE66C62D98F808F374471E4C3723FF87C09B2
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33382e302f32342d3234203d3e203330363434.roa
Signing time: Wed 01 Jul 2026 14:48:52 +0000
ROA not before: Wed 01 Jul 2026 14:43:52 +0000
ROA not after: Wed 30 Jun 2027 14:48:52 +0000
asID: 30644
IP address blocks: 45.140.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:7b:e6:6c:62:d9:8f:80:8f:37:44:71:e4:c3:72:3f:f8:7c:09:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 1 14:43:52 2026 GMT
Not After : Jun 30 14:48:52 2027 GMT
Subject: CN=69C3E914876DAF1B8985B9F58177BDDC4D8B9C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:14:4c:18:23:ac:0d:e2:c5:0c:71:dc:40:
b4:4c:b6:2f:8a:33:12:05:80:1f:ab:b5:15:55:77:
70:fa:01:b0:d3:4b:be:9e:fc:f8:8d:e8:69:a4:4f:
20:5b:68:56:bc:11:d0:d4:d5:9f:65:f4:1b:5d:cb:
95:f9:7b:8a:fa:a9:94:ac:36:cb:0f:01:9a:fa:be:
a4:7a:ca:75:41:7c:1c:3b:4c:a2:35:0a:85:b8:ff:
fb:7e:e9:bc:09:7f:e5:5d:ce:05:fe:7b:da:47:58:
10:9d:eb:e3:90:04:07:2f:14:95:55:5d:d2:5c:cf:
c1:23:8e:fe:d7:f3:a3:b2:a5:62:83:8f:f8:26:55:
e4:a2:e5:bd:92:47:a9:83:80:2e:21:08:5f:24:ce:
e7:35:cb:58:81:cb:4a:35:82:88:96:bd:da:57:69:
83:e9:e0:a8:ae:37:5a:de:16:28:3e:bd:7d:87:ae:
6a:0b:d4:6e:5a:f9:78:14:f5:64:52:0a:a8:a3:5c:
83:77:2e:df:0d:00:f5:33:1e:70:13:d6:5f:82:bb:
b6:85:e9:55:97:48:e6:65:c3:df:82:39:0f:37:e6:
93:c5:10:b7:6d:00:db:12:a3:55:68:3d:61:be:c6:
7a:58:f1:b4:eb:00:5f:0b:78:e4:49:ad:ba:26:36:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C3:E9:14:87:6D:AF:1B:89:85:B9:F5:81:77:BD:DC:4D:8B:9C:7E
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33382e302f32342d3234203d3e203330363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.38.0/24
Signature Algorithm: sha256WithRSAEncryption
03:10:eb:00:f2:4f:2e:a3:5e:34:54:6f:5a:ad:63:bc:04:07:
9d:bc:cb:e4:eb:62:b1:df:28:1d:1f:6c:30:ef:91:d7:9f:85:
46:84:bc:9e:02:84:50:a8:77:6c:f1:db:4f:db:7d:04:fd:1e:
10:72:68:2d:65:3e:3e:83:88:c1:ae:d4:c8:b6:13:20:fe:54:
85:93:38:e4:5f:94:06:19:93:c7:d1:2b:fe:f5:ec:73:b9:3e:
c4:c1:bc:f8:df:8f:3e:6e:0d:8f:26:6a:6a:8a:5f:1a:51:62:
be:bc:4f:6f:1a:0e:f8:65:5f:38:9d:2d:8e:3c:df:3b:34:ea:
6d:5f:75:c7:8a:70:a1:b0:61:2e:03:10:d9:e4:58:a6:0a:66:
d1:89:1d:78:56:ff:fa:2d:19:5c:0b:d0:69:27:25:68:61:d2:
05:d6:80:b6:10:cb:a8:8b:37:80:10:c3:f3:7f:60:2c:ca:9e:
a0:7b:d4:a2:c8:d1:67:27:95:49:7a:77:9f:61:e9:bb:29:0d:
c6:e1:aa:b9:78:45:b0:c8:22:09:18:c7:cb:e2:46:d3:24:5a:
9e:8d:16:38:3d:76:12:ec:ac:0d:c1:19:97:98:f3:de:9f:12:
5a:a2:0a:ca:d4:7a:cc:e4:6b:fe:a5:5c:ca:5e:9d:2c:e7:b9:
3b:af:ce:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:54 2026 by rpki-client