Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32342d3234203d3e203136323736.roa
File: 34352e39332e3138342e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: 6BwUqeMZ7ecA2UNJi0F9EVVx6eRIanHWdvRTpUDywSo=
Subject key identifier: C6:30:67:10:63:37:F8:2A:11:A7:9F:3D:A7:B7:EE:48:D4:BE:A7:8F
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 6AD83E7D881D3473284A86812D68510821833FD5
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32342d3234203d3e203136323736.roa
Signing time: Fri 15 Aug 2025 12:02:53 +0000
ROA not before: Fri 15 Aug 2025 11:57:53 +0000
ROA not after: Fri 14 Aug 2026 12:02:53 +0000
asID: 16276
IP address blocks: 45.93.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d8:3e:7d:88:1d:34:73:28:4a:86:81:2d:68:51:08:21:83:3f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Aug 15 11:57:53 2025 GMT
Not After : Aug 14 12:02:53 2026 GMT
Subject: CN=C63067106337F82A11A79F3DA7B7EE48D4BEA78F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:f3:1e:23:6f:f0:77:a9:0a:cd:51:21:c9:
dd:fe:80:f8:53:90:57:ca:02:79:75:2a:c4:20:8f:
8c:00:8c:69:db:8e:04:15:3b:a0:59:60:8a:b4:0f:
65:ba:d6:a2:e7:4d:1f:7b:05:65:dd:96:f0:6c:be:
df:10:30:6e:f7:c9:a4:8c:95:e0:5d:52:3d:77:9d:
5c:0e:18:85:aa:d4:5f:c7:e4:51:3e:30:13:4d:68:
ff:32:a7:cd:46:9e:e1:cb:d8:01:cc:dd:58:6b:ea:
5f:77:c7:b6:a2:15:8a:17:d1:cf:c6:d0:94:22:b9:
32:5b:dc:cd:7e:81:83:a2:c8:3c:55:21:0f:6d:7d:
19:37:19:43:15:15:40:a3:bc:8f:23:ab:6d:5a:0b:
65:74:20:f4:79:aa:64:d5:06:16:c9:b1:53:f5:08:
83:d0:08:9a:c7:29:60:30:54:f0:ed:71:f2:ca:41:
6e:da:26:2c:74:8e:8c:d9:aa:07:4c:01:fe:d6:65:
67:d0:e3:a0:59:75:6c:35:0c:d3:f0:10:99:4b:a8:
40:b4:7a:e4:f8:78:4f:29:cc:06:48:69:81:26:a0:
ca:e5:f9:c3:65:b6:1a:18:65:1d:1a:29:1d:f2:89:
6f:30:ae:86:5f:88:e6:a4:66:76:f6:9c:11:3d:ce:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:30:67:10:63:37:F8:2A:11:A7:9F:3D:A7:B7:EE:48:D4:BE:A7:8F
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:67:ec:3d:44:bd:f6:2b:40:f1:df:68:74:8f:29:2c:cd:cc:
72:55:9c:26:79:5c:32:71:80:f3:d5:e3:0e:17:f0:a2:08:ab:
b4:40:e1:9d:45:5c:55:a1:19:ce:78:eb:7f:5d:78:3f:b6:a2:
5c:bd:45:e1:a1:6b:4c:97:ca:ff:b8:9e:4d:99:3f:bf:96:24:
98:00:fd:d0:1e:df:33:55:96:c5:8f:bb:18:b3:c0:96:f3:0c:
c0:f1:a7:eb:27:6f:85:49:ce:47:af:9e:86:4f:b2:cc:8a:8a:
b3:47:8b:15:86:0e:5e:62:08:d4:70:da:ba:40:9d:05:40:ed:
63:e5:66:56:3d:a2:94:08:74:40:71:21:87:c9:ce:7d:b8:bb:
bc:8a:36:66:2a:f7:ab:22:29:75:00:44:fa:26:90:e5:27:fe:
06:3b:ca:4f:36:36:c0:ea:9b:7b:34:4e:b8:d3:33:83:5a:30:
e2:c9:4b:be:e4:c0:a8:c8:40:e2:25:47:c3:e0:81:09:c3:f8:
57:31:1b:3a:96:81:98:08:2b:0f:c0:66:cb:31:2c:7a:cd:5f:
eb:91:6b:8f:b9:8f:a8:4b:48:b6:32:ad:40:81:59:01:e3:40:
5d:28:0a:65:e3:09:20:e2:99:b2:58:0f:6f:f8:41:88:91:61:
7e:64:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:26:41 2025 by rpki-client