Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32312e302f32342d3234203d3e203433383437.roa
File: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (raw, json)
Hash identifier: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=
Subject key identifier: 28:34:0C:C7:76:00:1C:BC:D9:E7:2F:F1:60:15:4B:52:65:D1:D3:F4
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 7B3FC279519929D3A938F0CB552C878EF3D6433A
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32312e302f32342d3234203d3e203433383437.roa
Signing time: Wed 11 Mar 2026 03:46:48 +0000
ROA not before: Wed 11 Mar 2026 03:41:48 +0000
ROA not after: Wed 10 Mar 2027 03:46:48 +0000
asID: 43847
IP address blocks: 46.182.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:15:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:3f:c2:79:51:99:29:d3:a9:38:f0:cb:55:2c:87:8e:f3:d6:43:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Mar 11 03:41:48 2026 GMT
Not After : Mar 10 03:46:48 2027 GMT
Subject: CN=28340CC776001CBCD9E72FF160154B5265D1D3F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:a5:94:ff:ce:92:0e:f8:5f:4e:45:6f:74:
dc:be:54:ca:ba:39:d7:be:37:bc:d4:ef:a2:78:f3:
e2:e8:f0:4e:1a:7f:64:5c:ed:da:79:50:72:fd:23:
a6:7d:38:a7:59:97:14:85:b7:e7:07:85:a3:3a:6d:
c8:7d:c5:e2:a7:1f:cb:87:34:e8:28:29:69:34:4a:
7a:37:88:30:1f:9c:aa:c1:9c:ff:49:cf:5f:c1:96:
3e:ab:42:04:85:51:df:d1:d6:72:8c:3e:38:b0:98:
62:a7:db:4d:38:f3:95:62:4e:39:1a:d7:ad:66:1a:
f5:a7:1c:2c:c3:29:e4:04:42:e0:b4:70:6a:fe:13:
f5:30:d4:9a:29:02:79:5e:00:84:98:b2:8c:b2:f2:
31:2d:f7:a5:02:47:e2:89:e5:24:e1:ab:41:ed:32:
45:13:52:1c:6c:89:20:7f:11:2c:a6:81:6e:0d:0b:
1b:f9:9e:c5:61:97:34:b6:80:94:65:6a:27:ec:e1:
2a:26:ee:c6:d0:72:7e:fe:72:a9:e3:19:4c:18:ae:
a4:01:dd:c9:8b:6a:86:e9:06:b7:a8:c0:fa:a5:22:
b6:c9:3d:9f:01:d0:28:2b:ed:98:ad:c7:f2:3a:5d:
d4:4d:6e:b7:f9:90:43:ec:15:73:a1:5d:e9:e2:14:
ba:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:34:0C:C7:76:00:1C:BC:D9:E7:2F:F1:60:15:4B:52:65:D1:D3:F4
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32312e302f32342d3234203d3e203433383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:fe:ec:a0:3d:e1:95:c7:95:4b:28:31:9b:1e:22:3b:ad:48:
28:b2:d2:50:c9:48:9c:a0:b6:2a:fd:26:d4:13:0f:ca:69:3e:
84:17:93:de:f4:42:07:da:3e:13:ec:7f:6d:b1:b7:9d:58:f0:
a1:b4:11:1c:63:d5:9b:f8:59:46:75:7e:bc:5b:f9:02:7b:27:
02:ac:6b:ca:6f:72:bd:ef:5b:0c:90:37:b7:bd:f0:d0:82:4c:
f9:91:ee:c5:18:94:5a:8d:c4:2d:9e:65:4b:ad:0d:43:2c:3d:
4b:a6:23:42:a4:84:c2:30:a3:57:26:00:4a:e1:c2:2c:25:0a:
12:fa:46:47:d2:1d:c6:be:68:19:1e:c7:0f:91:1d:a1:6d:37:
aa:52:2d:15:55:2b:03:a8:cd:f8:5c:8c:b9:dc:7e:62:af:b8:
23:ec:a3:50:f1:7d:66:14:c3:d8:e7:88:d4:23:5c:da:2c:2f:
15:f2:68:b5:a6:49:99:85:f2:96:73:25:c7:98:5b:ed:83:28:
7a:04:ee:96:0e:d9:ee:fc:d9:07:c2:34:ca:55:76:8f:d5:15:
f2:93:02:f6:6b:f3:cb:82:95:cf:01:61:57:bd:50:cc:58:22:
96:fe:28:2a:0b:0b:54:74:7c:f9:46:d4:5b:2a:68:c8:15:9e:
2b:10:31:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:41 2026 by rpki-client