Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39322e302f32322d3234203d3e20323134343332.roa
File: 34362e31382e39322e302f32322d3234203d3e20323134343332.roa (raw, json)
Hash identifier: NyXurW1DFDhqL0gW2AhubSlX8l+W/Em/ZT/cZ6caczo=
Subject key identifier: A5:3B:80:C9:5B:1B:80:EB:85:20:03:EE:EE:1E:0F:3D:31:E1:8E:01
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 6B455D58A81258C0E8D43DF2095DCB1B9FD339E7
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39322e302f32322d3234203d3e20323134343332.roa
Signing time: Sat 18 Jul 2026 06:49:20 +0000
ROA not before: Sat 18 Jul 2026 06:44:20 +0000
ROA not after: Sat 17 Jul 2027 06:49:20 +0000
asID: 214432
IP address blocks: 46.18.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:45:5d:58:a8:12:58:c0:e8:d4:3d:f2:09:5d:cb:1b:9f:d3:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Jul 18 06:44:20 2026 GMT
Not After : Jul 17 06:49:20 2027 GMT
Subject: CN=A53B80C95B1B80EB852003EEEE1E0F3D31E18E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:de:17:ca:cf:2d:6d:4a:7e:d0:8a:77:73:
7a:71:38:d7:71:6f:31:95:20:36:cf:55:e3:0b:9c:
9a:be:6b:19:f7:e9:ae:a6:0a:55:bb:2c:72:e0:03:
8f:cd:e1:49:5f:1b:e2:e7:92:0c:70:81:ab:ce:58:
82:da:5d:6f:e4:6a:33:f6:01:61:8b:ed:c4:a9:c1:
e4:8b:f4:39:f2:1f:fd:80:e7:0e:cf:07:b6:d6:4e:
9f:46:fc:90:28:b2:10:c4:3b:39:62:31:ad:4c:f4:
ca:04:20:ff:43:f2:8a:96:c3:56:60:ee:5d:3c:5d:
ed:ef:d8:29:a6:c1:ee:24:95:a9:ac:15:5d:2f:50:
82:82:3c:3a:6a:a0:68:52:f9:30:0a:4b:6e:d5:bc:
ac:96:7c:73:34:78:2e:6e:3a:ef:95:d6:b2:db:96:
37:0c:87:e8:94:27:02:4e:ba:a1:cc:c7:2b:e2:94:
e5:67:cc:84:bb:b7:1f:62:4e:68:fd:90:9b:52:ba:
ae:95:40:5c:cf:c6:3c:2e:b6:1b:89:ca:2c:05:69:
af:13:c8:00:e6:8f:65:a7:56:d8:1e:8e:9c:18:d1:
59:5e:fb:94:a4:f0:71:74:0b:a7:16:05:69:0a:38:
06:d1:71:9d:be:15:ad:0a:8e:f0:e3:27:7e:aa:29:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3B:80:C9:5B:1B:80:EB:85:20:03:EE:EE:1E:0F:3D:31:E1:8E:01
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/34362e31382e39322e302f32322d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.92.0/22
Signature Algorithm: sha256WithRSAEncryption
06:e8:59:1c:7d:3d:c5:29:61:18:90:26:5e:e6:6e:7f:be:ef:
dc:db:90:c1:e4:e9:31:0a:72:bd:18:d1:6d:44:07:ef:2c:35:
23:13:17:e9:a0:99:4f:96:da:75:af:e9:ba:90:00:1e:ea:08:
01:30:a3:b2:51:52:ec:59:5a:ba:7f:65:b0:f3:ac:22:41:b1:
f7:26:a5:9d:63:41:59:9a:4d:f7:00:8e:d9:b6:bd:37:ce:8a:
60:62:c2:49:9f:b6:6b:48:2d:fe:dd:03:74:5b:c2:14:4b:70:
c2:09:68:e0:44:90:ff:81:e0:fb:8c:c2:65:0c:e7:7e:fa:86:
34:38:9a:d8:a9:20:1a:7f:8c:cc:8c:c0:de:4e:1f:48:94:21:
9f:63:f7:66:ad:6f:55:c2:0b:7c:dc:e2:5e:bc:6f:1f:07:00:
73:e2:f9:db:c1:a2:2b:d3:df:3a:b3:6b:c0:ae:37:bb:29:37:
e1:1c:84:8c:64:77:5d:0b:4c:a2:39:56:7f:23:96:b3:8a:74:
98:b6:bf:aa:53:b5:9b:a4:33:fd:af:aa:77:c2:19:a9:0c:0c:
2f:cc:e4:e9:c7:77:2f:6b:84:ca:63:a6:5c:58:37:70:d4:06:
35:87:62:96:82:5c:00:c0:cc:55:25:2b:10:38:b9:cd:28:51:
f9:1d:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:38 2026 by rpki-client