Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35392e302f32342d3234203d3e20323132333834.roa
File: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier: 9PzlLnPpvyZA7rJY6HgqfVgDM2u6lMeRC6jdfQFzF4g=
Subject key identifier: 86:13:0D:43:D4:18:BD:9C:10:BC:63:6E:F1:3A:04:8E:93:24:0A:31
Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial: 472EE53C8FFBFBE8B40048DC1B65B44E69467ED3
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35392e302f32342d3234203d3e20323132333834.roa
Signing time: Thu 05 Nov 2026 14:49:40 +0000
ROA not before: Thu 05 Nov 2026 14:44:40 +0000
ROA not after: Thu 04 Nov 2027 14:49:40 +0000
asID: 212384
IP address blocks: 45.81.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2e:e5:3c:8f:fb:fb:e8:b4:00:48:dc:1b:65:b4:4e:69:46:7e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Validity
Not Before: Nov 5 14:44:40 2026 GMT
Not After : Nov 4 14:49:40 2027 GMT
Subject: CN=86130D43D418BD9C10BC636EF13A048E93240A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:97:ef:49:3b:67:8b:cf:11:b4:db:86:22:
a9:94:65:90:e7:fa:b1:d1:37:8a:c6:c3:73:58:3c:
f4:76:78:45:83:cb:90:40:70:b7:e7:fc:6f:b4:58:
44:76:9e:2c:dd:c7:35:92:4b:09:7a:90:63:a8:ed:
51:73:5d:32:b5:19:5e:6c:9b:84:cf:39:b9:36:fa:
c4:1f:fa:ae:ba:05:7d:b0:98:e2:89:41:bf:03:94:
50:2e:dd:14:1f:c3:54:c1:70:90:9c:34:4b:f4:59:
e6:d4:2b:2c:9a:cc:c4:51:9e:ad:e9:21:e1:58:3f:
f2:e4:b6:73:91:0e:4e:2d:0e:94:29:a4:ca:14:20:
5d:b7:99:ea:50:8c:3b:54:e1:54:b5:a0:27:78:34:
06:31:a6:04:48:2f:41:05:4f:2b:a8:80:e4:19:82:
74:02:2f:f4:a0:f5:ed:f9:d2:a2:61:11:77:d3:75:
41:e5:a1:43:b7:b4:cb:81:fd:94:27:d4:70:7d:5d:
db:77:d0:47:b7:e9:d9:19:ea:70:28:83:73:4e:32:
02:11:ce:d6:f7:d8:42:7a:ea:50:c5:a7:c1:8b:35:
41:e9:8e:25:71:87:fc:ca:ad:72:44:98:35:2b:71:
74:e9:a7:c1:54:1c:54:86:68:35:fc:51:2b:f9:23:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:13:0D:43:D4:18:BD:9C:10:BC:63:6E:F1:3A:04:8E:93:24:0A:31
X509v3 Authority Key Identifier:
keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35392e302f32342d3234203d3e20323132333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:de:37:63:78:9f:63:e2:4e:22:2a:eb:10:f5:65:87:8b:34:
c8:0b:14:b2:b4:60:a5:38:cc:68:e9:ef:7b:3c:56:67:2b:0f:
80:e9:85:a4:c3:e1:a1:ba:f1:ac:10:97:9f:68:88:cf:dc:18:
a9:ab:93:f8:7e:15:9d:3a:37:5c:98:24:19:df:e3:40:0c:65:
b8:ee:1a:52:8f:24:f7:30:e4:e3:28:c1:1d:b2:da:ba:dd:0d:
74:2a:a3:f8:83:8b:d4:93:55:e4:83:46:74:30:9f:85:d4:95:
d6:4b:81:11:da:fd:a6:31:66:3d:4a:cc:e5:81:d9:15:b1:61:
7c:6b:16:b6:1a:60:fc:ed:67:64:55:97:9e:8e:a4:27:8d:6a:
b7:a3:16:2e:26:c7:ab:36:75:25:fc:91:89:bf:7f:2c:24:0e:
df:ec:eb:de:d6:67:84:2c:52:63:58:6c:f8:13:a7:51:63:6e:
27:14:9c:43:98:b2:b9:39:89:44:47:cb:b3:17:98:40:bf:11:
4f:d7:57:83:1d:19:b2:a0:22:bd:14:56:47:21:6e:13:bb:81:
26:cb:f1:40:a9:78:1a:fb:ac:a2:21:dd:b8:88:38:16:a2:66:
27:dc:a3:06:31:9f:94:9a:02:39:89:ff:e7:aa:98:85:65:0b:
93:b1:89:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:10:48 2026 by rpki-client