Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138362e302f32332d3234203d3e2033333230.roa
File: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (raw, json)
Hash identifier: QsFkBfitbwvpDW+gZ0ARVvjc1k4LIU/KZWDeJAgWITQ=
Subject key identifier: CA:29:C7:80:B2:24:C0:08:B0:8E:4C:D3:03:BB:1D:B4:C6:D6:E1:81
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 16CBF5A5170134CEE4B21B4760ED849032287C32
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138362e302f32332d3234203d3e2033333230.roa
Signing time: Wed 30 Jul 2025 13:54:13 +0000
ROA not before: Wed 30 Jul 2025 13:49:13 +0000
ROA not after: Wed 29 Jul 2026 13:54:13 +0000
asID: 3320
IP address blocks: 45.93.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:cb:f5:a5:17:01:34:ce:e4:b2:1b:47:60:ed:84:90:32:28:7c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 30 13:49:13 2025 GMT
Not After : Jul 29 13:54:13 2026 GMT
Subject: CN=CA29C780B224C008B08E4CD303BB1DB4C6D6E181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cb:3f:ad:98:ec:95:07:1a:3c:8a:b6:4b:6a:
53:71:ff:61:67:40:3b:79:d4:12:d2:53:26:d5:46:
d3:5e:db:f9:cf:66:4d:02:6f:7f:2b:29:44:b1:71:
c7:9a:e5:63:db:83:97:e9:3e:da:33:d5:bc:18:21:
14:77:4f:79:33:3b:c2:b4:26:f6:f8:3c:b7:43:eb:
56:b2:c2:fc:bf:1f:d1:90:1a:c4:59:69:66:aa:05:
ba:8c:c7:38:b5:6f:7c:88:3c:0c:36:e3:93:68:64:
87:dc:0b:d3:a9:a9:18:62:fb:e6:2a:ef:64:37:56:
c2:65:28:80:a3:9d:e2:67:95:8a:91:f0:2f:eb:06:
ec:56:30:b7:be:ef:b8:ab:ce:76:89:4a:32:04:e9:
c0:d3:30:84:75:b2:8e:f8:98:a6:62:0e:1c:7c:6d:
85:5c:e9:4e:61:95:19:b8:d2:c6:89:4e:76:f0:1d:
7a:ad:cb:ad:75:75:94:55:c3:90:e2:d0:cb:78:b2:
11:2b:72:0d:ff:ec:29:c9:58:86:55:ec:33:fc:a3:
c2:06:cb:05:8a:84:a7:a3:3f:b4:48:08:a9:d6:16:
b8:d4:01:1c:03:b5:19:8f:da:a9:14:73:5a:7f:b4:
14:53:df:6c:89:3d:f3:2f:c3:62:fd:c1:cb:d0:9c:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:29:C7:80:B2:24:C0:08:B0:8E:4C:D3:03:BB:1D:B4:C6:D6:E1:81
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138362e302f32332d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.186.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:1d:3e:e8:fa:6e:30:45:0b:e8:46:ec:3a:e5:78:d7:c1:2a:
c7:d0:a7:a0:fb:0f:83:6a:17:1e:03:34:cb:8c:87:f6:a4:fc:
a4:aa:1c:ac:7d:9e:a2:b5:87:d3:f6:db:e2:08:e3:98:39:6d:
c7:59:e6:6b:74:2f:ea:db:94:6a:5f:ba:a6:58:76:4c:7d:d5:
d7:47:8d:c2:a2:25:45:9f:7b:ec:3a:eb:40:42:cb:b0:6b:60:
7c:74:92:31:29:ad:c5:01:96:53:e1:0d:69:46:10:14:35:7a:
1f:e8:97:ba:b5:c7:71:b6:52:b9:c9:7d:41:50:e6:73:ea:cd:
83:d5:4f:15:d6:2e:ea:77:25:9d:d5:3a:79:a7:a5:51:c4:e8:
2b:15:f8:f3:47:26:71:2c:c9:db:84:90:ce:e9:59:be:15:50:
45:95:35:c6:4b:0c:54:b9:6e:c7:90:0b:e5:66:fe:22:a5:9e:
b5:c6:f9:f8:ae:6a:5a:77:e8:ca:b2:13:3e:f0:83:42:fb:01:
2c:de:80:9b:c3:bd:52:2b:53:c5:f5:cd:7e:2b:43:78:25:44:
03:54:b4:35:1a:59:7d:0f:71:3b:cf:76:b8:a6:f1:fa:02:e7:
1e:db:c8:dc:ea:da:a9:93:0e:03:fa:c1:6d:a5:6d:2f:23:86:
35:28:8c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:35:03 2025 by rpki-client