Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20313532313739.roa
File: 34352e3133322e39382e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: dxKNAQqcU9okjq8LEMN0qNrWQoPJrzercQTPId6GiUE=
Subject key identifier: 3B:D8:D2:2E:DA:B9:40:A0:79:67:13:38:3B:0F:9A:A4:DB:9C:36:61
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 0914CC410B2ECAC48A10E560C202D95D6EE4BC2F
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 22 Jul 2026 03:17:15 +0000
ROA not before: Wed 22 Jul 2026 03:12:15 +0000
ROA not after: Wed 21 Jul 2027 03:17:15 +0000
asID: 152179
IP address blocks: 45.132.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:14:cc:41:0b:2e:ca:c4:8a:10:e5:60:c2:02:d9:5d:6e:e4:bc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jul 22 03:12:15 2026 GMT
Not After : Jul 21 03:17:15 2027 GMT
Subject: CN=3BD8D22EDAB940A0796713383B0F9AA4DB9C3661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:48:d7:71:de:57:ea:1d:35:53:22:31:89:
c1:89:08:ce:b8:15:b8:c1:4b:4f:b1:4a:45:26:1c:
ec:bc:ab:22:ab:39:19:19:20:49:58:40:83:4f:98:
57:4b:71:d2:75:d0:c8:0d:21:13:4c:8e:b2:91:1d:
d0:5a:af:a7:a3:32:fc:94:7e:4a:20:d0:57:ed:79:
47:be:39:ac:e7:15:84:71:1a:2c:7f:d2:1f:1c:68:
44:31:96:5b:27:b4:82:f1:03:53:2d:bd:07:8a:40:
ee:ec:f1:94:33:63:ce:56:e5:09:b5:64:18:d6:22:
7d:61:c4:19:48:48:a6:d2:ca:b4:a0:74:5f:8e:ea:
c3:2b:b3:bc:0e:0d:56:87:b4:be:1d:e9:4f:2a:61:
fb:21:95:7f:c1:8f:72:d2:70:df:2f:e4:fa:14:be:
2d:93:15:16:48:81:42:2e:7d:df:68:80:52:d9:6f:
79:32:2d:64:14:ec:e8:fe:90:b2:19:0b:3e:94:48:
c9:bf:d0:fc:06:e5:4f:88:8e:3c:0f:2b:55:be:7e:
93:d1:0b:3f:5d:fe:24:61:2b:db:2e:44:6a:94:61:
38:bb:23:ce:b3:46:1b:5d:6c:e8:b7:f2:6b:8e:56:
fc:36:ae:61:df:9a:f9:01:07:61:40:34:a8:f5:a3:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D8:D2:2E:DA:B9:40:A0:79:67:13:38:3B:0F:9A:A4:DB:9C:36:61
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1b:c0:66:66:8b:c5:f7:1e:63:33:20:e9:77:67:90:a3:a2:
33:50:8f:4a:d6:f2:2c:3d:f9:eb:46:3e:04:9b:ef:cf:a9:d0:
ff:25:c1:e7:51:e4:ac:42:58:cf:d2:05:17:e6:b8:e2:70:17:
ec:c0:82:62:57:d7:1b:df:23:fb:10:53:76:81:a3:db:22:6a:
3d:6f:81:88:2e:f9:f0:45:84:ed:1a:9a:dc:f1:34:f7:27:c8:
3f:94:9a:65:56:cd:b8:09:bb:e3:2c:b2:7e:68:f5:d3:fb:21:
ce:ca:09:24:d9:3f:66:51:15:e0:27:b3:5f:8c:33:a0:a3:55:
da:03:18:d6:cc:0b:58:90:c5:f1:aa:73:61:ca:fa:9e:4a:a8:
f8:6c:28:16:a3:36:98:5f:77:38:a5:bf:99:3d:cf:01:ac:b6:
1f:a7:b4:22:9f:44:c9:e5:af:c7:f3:36:af:1f:ab:00:c5:4b:
70:4e:4f:93:99:d1:be:a0:df:00:a4:5c:21:95:33:b9:46:e1:
8b:d2:ca:49:ed:e0:32:ec:bc:77:be:ff:c1:b2:f1:62:65:57:
f9:4e:06:1b:52:bd:25:34:f2:16:1c:0f:50:c1:15:8d:5e:94:
ca:64:43:84:f6:16:04:86:99:17:0d:03:ca:c2:ca:09:db:bd:
4d:6c:59:84
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUCRTMQQsuysSKEOVgwgLZXW7kvC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNjA3MjIwMzEyMTVaFw0yNzA3MjEwMzE3MTVaMDMxMTAvBgNV
BAMTKDNCRDhEMjJFREFCOTQwQTA3OTY3MTMzODNCMEY5QUE0REI5QzM2NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvTkjXcd5X6h01UyIxicGJCM64
FbjBS0+xSkUmHOy8qyKrORkZIElYQINPmFdLcdJ10MgNIRNMjrKRHdBar6ejMvyU
fkog0FfteUe+OaznFYRxGix/0h8caEQxllsntILxA1MtvQeKQO7s8ZQzY85W5Qm1
ZBjWIn1hxBlISKbSyrSgdF+O6sMrs7wODVaHtL4d6U8qYfshlX/Bj3LScN8v5PoU
vi2TFRZIgUIufd9ogFLZb3kyLWQU7Oj+kLIZCz6USMm/0PwG5U+IjjwPK1W+fpPR
Cz9d/iRhK9suRGqUYTi7I86zRhtdbOi38muOVvw2rmHfmvkBB2FANKj1o56RAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUO9jSLtq5QKB5ZxM4Ow+apNucNmEwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzQzNTJlMzEzMzMyMmUzOTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMyMzEzNzM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYRiMA0GCSqGSIb3DQEBCwUAA4IBAQBDG8BmZovF9x5jMyDpd2eQo6IzUI9K1vIs
PfnrRj4Em+/PqdD/JcHnUeSsQljP0gUX5rjicBfswIJiV9cb3yP7EFN2gaPbImo9
b4GILvnwRYTtGprc8TT3J8g/lJplVs24CbvjLLJ+aPXT+yHOygkk2T9mURXgJ7Nf
jDOgo1XaAxjWzAtYkMXxqnNhyvqeSqj4bCgWozaYX3c4pb+ZPc8BrLYfp7Qin0TJ
5a/H8zavH6sAxUtwTk+TmdG+oN8ApFwhlTO5RuGL0spJ7eAy7Lx3vv/BsvFiZVf5
TgYbUr0lNPIWHA9QwRWNXpTKZEOE9hYEhpkXDQPKwsoJ271NbFmE
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:04 2026 by rpki-client