Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32332d3234203d3e20383334.roa
File: 34352e3134352e3234302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: IMoKRPcPbx50L8QLCNWWQvkzY/Ai9Qr/onxu6sWl+OE=
Subject key identifier: C0:87:C0:58:8F:64:49:59:1B:E7:26:D4:E2:2F:CE:0E:B3:FD:B9:B3
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 629B8BF65110778C580829563585B293C126D271
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32332d3234203d3e20383334.roa
Signing time: Wed 08 Jul 2026 00:06:13 +0000
ROA not before: Wed 08 Jul 2026 00:01:13 +0000
ROA not after: Wed 07 Jul 2027 00:06:13 +0000
asID: 834
IP address blocks: 45.145.240.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:9b:8b:f6:51:10:77:8c:58:08:29:56:35:85:b2:93:c1:26:d2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 8 00:01:13 2026 GMT
Not After : Jul 7 00:06:13 2027 GMT
Subject: CN=C087C0588F6449591BE726D4E22FCE0EB3FDB9B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:99:24:76:17:aa:ff:e3:81:1e:a4:07:bf:
a3:da:15:27:bd:3b:7c:04:26:6f:d3:88:11:45:b6:
d4:c8:2b:7f:33:54:83:85:93:56:e3:b8:8c:a5:b3:
fe:3b:fe:66:ff:03:b8:b3:7a:d0:cd:e6:00:29:a5:
32:10:66:19:cd:e3:57:d4:0e:88:ff:33:bd:96:51:
82:63:ed:ab:fa:ce:1e:8f:ca:1e:12:b4:9c:04:6d:
45:8e:75:e2:4d:5a:e1:19:ef:90:91:c1:a9:f0:bd:
34:f7:40:70:a2:94:db:df:2e:d8:cd:2c:55:f2:9c:
b7:46:b0:79:0c:fa:9b:7d:15:6c:d5:b4:b2:52:01:
0c:d4:1f:e3:1f:01:34:64:9d:d9:3c:58:0f:69:b0:
dd:d3:61:40:04:50:a5:d9:86:6a:69:98:8b:cf:ec:
d7:c5:64:9f:c0:65:47:b8:5e:e2:a7:ab:99:66:80:
b5:64:7b:bc:eb:89:a5:94:f3:52:f6:4e:34:10:28:
2a:3d:66:df:6f:91:da:8b:99:c0:ae:37:9b:8e:ce:
67:b0:76:bf:2a:20:50:db:a8:00:e4:4a:95:64:89:
85:8c:3c:f5:79:9d:3c:fa:e2:66:fd:cf:dd:72:4c:
40:86:32:7e:8e:5e:3b:72:08:c7:7b:d9:6f:d4:44:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:87:C0:58:8F:64:49:59:1B:E7:26:D4:E2:2F:CE:0E:B3:FD:B9:B3
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:d2:f1:06:2c:d5:92:d7:91:81:6e:2c:e1:30:89:f9:af:61:
90:71:12:4f:e3:1d:92:da:01:82:da:27:20:3b:29:91:22:a9:
68:21:3a:18:95:ec:56:02:bf:9d:78:29:89:18:ed:d6:61:a6:
cc:97:a4:05:35:82:4b:b2:93:cf:54:3d:bf:9a:1b:0c:f3:99:
ca:3a:ef:00:35:1a:74:18:54:f4:08:a0:6e:09:e6:19:a5:5c:
fd:c4:d1:eb:87:dc:7c:5a:c4:40:d3:9f:7e:46:b2:c7:44:61:
3d:12:80:b8:d6:38:8a:c1:0f:46:d0:d3:84:5b:f4:79:7e:02:
6d:83:25:b1:1f:53:7a:61:23:11:d3:4a:89:27:cc:72:a5:89:
34:2c:e6:fb:87:a5:83:17:53:e5:8e:aa:1b:b8:fc:f3:20:07:
c8:ee:99:21:ba:f3:90:91:1b:12:f2:75:84:f9:88:b3:62:c8:
aa:1c:c3:1b:04:58:22:ae:ee:d3:10:9f:d5:de:db:35:95:48:
53:e6:93:c4:75:5d:91:3b:b4:b5:60:6d:76:be:69:12:e0:b5:
aa:c6:ca:50:f5:4a:79:5f:09:1e:c0:d1:6c:0c:46:29:40:76:
c5:bc:d0:d7:bf:71:98:29:f9:75:d5:06:09:72:b6:48:17:ab:
c4:85:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:38 2026 by rpki-client