Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e2039323934.roa
File: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (raw, json)
Hash identifier: VpEKhz7umJbmzKVJDVzsQ68HCIsHIOJmXbqn2EpmOdc=
Subject key identifier: AD:24:91:B7:3F:DA:5E:17:2A:5B:10:7B:35:59:52:30:D1:2D:C4:54
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 08B83806E7D861B2E74F4CD98F23D11887D4014D
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e2039323934.roa
Signing time: Thu 08 Oct 2026 05:49:36 +0000
ROA not before: Thu 08 Oct 2026 05:44:36 +0000
ROA not after: Thu 07 Oct 2027 05:49:36 +0000
asID: 9294
IP address blocks: 45.13.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b8:38:06:e7:d8:61:b2:e7:4f:4c:d9:8f:23:d1:18:87:d4:01:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 8 05:44:36 2026 GMT
Not After : Oct 7 05:49:36 2027 GMT
Subject: CN=AD2491B73FDA5E172A5B107B35595230D12DC454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:2c:ab:6b:d4:54:0e:5b:b4:50:e2:63:3e:
a9:cc:6b:14:b2:9e:5d:a9:c0:cd:b8:bb:c9:00:ec:
68:7a:13:52:64:5c:a5:bd:bc:92:35:0f:68:c1:22:
88:52:bf:9d:4e:f6:6a:bd:c4:37:8c:5a:cf:81:ef:
b2:cc:24:69:6f:97:1a:34:14:7b:26:62:34:f7:59:
5f:65:c8:8e:fe:6c:60:31:f4:ae:bc:2e:ed:53:d0:
22:03:47:d8:af:48:3e:1e:b1:c2:04:7d:d0:63:bb:
34:9f:e7:d2:61:e5:21:99:9a:bc:16:1a:a6:0d:88:
9a:0e:c1:7e:06:61:f6:a6:2e:e4:2e:08:5f:38:bc:
b1:a3:2d:0c:a0:9a:da:61:c2:80:6a:26:3a:63:62:
f1:d2:41:1a:43:2a:0c:f4:fb:3c:49:c0:02:6f:33:
e0:30:6c:8e:8d:7a:75:cb:c9:15:b2:6f:8a:28:3b:
e8:5e:5b:07:6e:7e:7e:86:79:41:ed:45:1d:2b:c0:
15:99:43:05:b6:29:df:26:7e:ba:22:67:97:e5:6b:
c4:89:57:77:b1:0f:dd:a9:68:87:01:de:73:58:24:
b0:ad:f7:ed:80:32:53:cf:e5:87:09:90:91:7a:02:
02:e9:52:b0:4d:a1:d8:49:68:64:97:1d:48:bd:f8:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:24:91:B7:3F:DA:5E:17:2A:5B:10:7B:35:59:52:30:D1:2D:C4:54
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e2039323934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:48:fb:86:3d:aa:4e:d1:ef:67:2f:ab:2d:25:13:31:09:fe:
f1:c5:74:c8:07:5c:df:35:0f:2a:de:e7:66:8d:53:0c:03:6c:
b8:59:b5:96:df:0a:48:82:32:39:39:05:68:5a:a7:24:79:ef:
5e:8a:d3:a2:c4:a5:c8:bc:af:71:09:2e:ac:6c:a4:22:86:bb:
10:98:91:5e:9e:ed:c1:ee:32:0e:23:0c:0b:c5:9e:da:dd:a5:
da:44:43:ab:c3:a9:a1:8a:4e:6e:ca:64:51:a0:56:1e:d9:75:
3f:89:97:42:86:68:b2:62:e6:2e:bc:61:33:f0:73:47:19:fe:
26:2a:09:fc:be:8c:72:47:5a:6c:79:03:24:8e:86:4e:42:54:
4c:0e:5c:8f:7f:95:50:1e:a7:f0:98:74:b7:61:89:0b:af:4d:
5d:fe:ea:9f:ef:4f:8f:9e:7f:d9:fa:f9:21:77:31:9d:8f:76:
93:16:29:ae:8e:14:43:b2:c6:1a:61:04:0f:20:26:7b:4e:10:
56:5c:08:96:dd:38:80:88:dc:89:57:42:69:f7:28:81:f5:b8:
b8:a0:b9:c0:7e:59:74:b2:d5:c6:7c:17:c6:7e:cb:66:8c:b0:
15:d7:70:71:db:62:e1:e5:45:3c:ad:1f:85:a3:6e:3d:23:b8:
ec:50:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:44:36 2026 by rpki-client