Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138362e302f32332d3234203d3e2033333230.roa
File: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (raw, json)
Hash identifier: 8N3rmoJrslTdiyYtzb92Od86uCgbbd7eqKU0To5euU8=
Subject key identifier: 5C:16:08:14:EC:71:9B:87:7C:5C:49:57:A4:CE:DC:2C:F9:E4:26:DC
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 088740CFCCE0BD2385135169D38389A6BD5B8CD0
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138362e302f32332d3234203d3e2033333230.roa
Signing time: Wed 01 Jul 2026 14:48:52 +0000
ROA not before: Wed 01 Jul 2026 14:43:52 +0000
ROA not after: Wed 30 Jun 2027 14:48:52 +0000
asID: 3320
IP address blocks: 45.93.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:87:40:cf:cc:e0:bd:23:85:13:51:69:d3:83:89:a6:bd:5b:8c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 1 14:43:52 2026 GMT
Not After : Jun 30 14:48:52 2027 GMT
Subject: CN=5C160814EC719B877C5C4957A4CEDC2CF9E426DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:49:79:3d:97:85:2b:9b:49:06:f6:b4:3c:
d2:d9:97:23:6e:46:76:d0:fa:f2:e2:50:98:85:0b:
fa:58:41:d5:4d:62:21:4b:a8:c2:8b:4b:16:72:c9:
e8:b6:4e:e5:c3:1d:34:42:3d:3c:ab:3f:9f:64:87:
ff:67:33:58:70:bc:22:8d:ed:8c:7c:71:42:1a:0d:
0d:4d:7a:40:fc:7a:82:39:69:1e:25:32:e2:db:92:
e4:93:6a:51:17:a6:60:f7:70:4d:94:d3:9a:0b:62:
c5:50:2a:98:02:84:a5:c1:ab:99:f5:01:97:81:67:
c1:25:fe:3d:88:f3:50:9b:37:61:2a:89:49:86:55:
ef:e8:33:3b:6a:e7:08:0e:a5:09:b2:b5:cd:b5:74:
e2:d4:b4:ba:f3:38:6c:a2:03:80:9f:f5:6d:1b:37:
3a:38:c1:b7:ee:97:56:2d:13:c8:80:67:6e:17:31:
ce:71:95:d4:f9:4c:94:25:50:de:19:63:cc:da:13:
8b:06:c4:84:e3:b8:66:9e:e7:e5:0e:cf:ca:56:dd:
d9:a4:9f:f5:59:6c:79:1c:47:1e:b4:3a:7c:ab:fb:
bb:0f:c5:ba:c4:39:b2:89:8c:fd:a0:9d:b9:f2:22:
40:84:67:99:15:35:16:37:79:b5:fd:34:01:35:5f:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:08:14:EC:71:9B:87:7C:5C:49:57:A4:CE:DC:2C:F9:E4:26:DC
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138362e302f32332d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.186.0/23
Signature Algorithm: sha256WithRSAEncryption
89:f5:fd:a4:d3:cc:f7:1f:95:89:45:02:49:f1:9b:e3:b7:d9:
d1:25:0f:74:d1:ae:5e:6d:49:9c:0d:a8:4e:a4:2d:26:74:92:
06:6f:45:95:19:2f:ea:46:8a:f1:92:1d:e7:36:e1:1c:4f:9b:
ea:36:96:d0:22:07:2e:b7:c0:b8:a8:39:bb:14:cd:44:a5:92:
6d:ee:6c:e3:fc:b5:c5:73:ed:94:2f:b2:3d:0d:2a:3a:17:93:
5f:ed:fb:6b:c2:4b:41:96:27:0e:81:01:37:dc:77:5e:c4:6f:
ab:bd:d0:2c:2f:72:4c:81:62:61:7f:e2:e9:f9:27:4a:68:d6:
f0:fe:f6:94:6f:5b:95:59:68:b7:b8:4f:3b:ed:bb:1f:a1:82:
85:28:55:83:3e:a9:87:e9:b2:3a:85:60:6e:6b:a1:c7:c9:ca:
aa:b1:af:3e:05:30:d5:d3:e6:11:97:4d:cc:81:8c:ed:4f:5d:
9c:8c:ef:85:1e:c0:45:20:36:c2:b7:48:3c:71:b2:d8:90:30:
dd:18:d9:72:00:ff:c3:6f:02:d7:00:0e:04:2b:b6:bf:ca:a8:
ee:fb:0b:9e:43:35:96:62:d7:fd:3e:53:23:48:4b:dc:7c:d1:
e6:cc:7a:72:e4:8a:3e:9f:53:7d:a2:62:16:29:a5:a6:6c:a2:
21:8c:44:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:07 2026 by rpki-client