Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33342e302f32342d3332203d3e203531313637.roa
File: 3137382e3231322e33342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: LHmNLyIW6quNssP4vf+mFTbwdfxUJQxK4TZly5Db+e4=
Subject key identifier: 70:B9:70:DA:B4:66:FA:F9:CE:03:0D:E2:2D:4B:49:EE:D5:F4:78:A4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6B237C1821F206CE0332F660A9610E7AE9EC73C0
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33342e302f32342d3332203d3e203531313637.roa
Signing time: Fri 23 Oct 2026 16:30:44 +0000
ROA not before: Fri 23 Oct 2026 16:25:44 +0000
ROA not after: Fri 22 Oct 2027 16:30:44 +0000
asID: 51167
IP address blocks: 178.212.34.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:23:7c:18:21:f2:06:ce:03:32:f6:60:a9:61:0e:7a:e9:ec:73:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:44 2026 GMT
Not After : Oct 22 16:30:44 2027 GMT
Subject: CN=70B970DAB466FAF9CE030DE22D4B49EED5F478A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:23:e3:3f:4e:9c:45:32:7b:43:51:5d:99:
e2:e0:ad:5b:89:1b:b7:d3:46:e0:20:be:3e:fb:e9:
51:b3:09:22:44:7d:6f:d2:0f:a5:b8:17:7c:ee:3b:
67:21:f0:92:35:bc:d9:11:00:45:be:1d:95:40:61:
f1:e7:ab:8f:f4:a1:be:de:84:3e:3a:de:c3:4c:dc:
01:d6:90:84:80:02:e7:4a:50:c1:a2:a2:de:6c:35:
d7:7c:3c:17:7f:df:83:66:ac:15:e9:da:00:f1:e6:
b0:9e:f8:24:c9:5a:fe:17:45:e4:b3:0e:17:45:f3:
be:51:b7:a0:e7:af:4b:bc:61:2b:dd:c8:0a:b8:d1:
ae:d9:20:9d:59:6e:96:6b:00:f7:81:41:3c:42:95:
ea:40:2a:7c:2e:c0:65:c7:94:6e:b2:53:51:d1:0b:
9f:de:bd:02:f7:b5:fe:b2:ec:c4:ad:b8:b2:70:69:
34:68:ae:8c:95:75:64:1a:d5:de:4b:d6:81:d0:f0:
59:e6:07:b1:0f:3d:c1:2a:f5:24:7a:83:d2:a7:4d:
27:3d:b9:a1:6b:f1:0d:ec:95:f6:1d:01:12:02:d2:
8c:39:96:c4:9e:58:c1:ff:19:a4:bf:65:df:61:41:
02:92:92:e1:98:c7:74:fa:2c:57:cd:4f:89:ae:dd:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B9:70:DA:B4:66:FA:F9:CE:03:0D:E2:2D:4B:49:EE:D5:F4:78:A4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33342e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.34.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:52:9c:21:c6:1c:33:4d:46:dd:dc:a4:33:68:d5:e3:e2:43:
5b:4e:4e:e2:fe:b8:fb:98:f1:c8:b1:9f:02:54:e5:22:f8:02:
6f:34:60:79:26:36:ee:c8:dd:2a:fb:0f:84:9b:5a:11:42:7f:
08:94:41:89:a2:65:50:fe:f7:f1:0b:63:e6:f9:4e:1f:14:81:
52:f4:c7:c6:bc:84:35:e0:d8:32:fc:ba:80:15:80:62:80:5e:
d8:11:b3:41:5c:86:26:63:1f:ca:1a:3d:e2:d8:37:b9:e8:76:
29:11:ff:2f:cd:74:fc:bd:5b:1b:bd:4e:e2:9f:7a:eb:17:00:
ff:b5:76:6a:d4:6f:e2:c5:92:ed:f4:8d:78:71:e7:99:a6:04:
fd:a9:16:64:9a:71:2a:49:4a:a3:25:ea:ae:37:31:f8:03:a4:
cf:0a:c8:f7:bc:71:b2:32:71:32:1c:8a:b1:54:e1:3e:e5:26:
92:44:25:92:50:96:8a:19:23:59:48:ff:d4:e4:d2:7a:35:6d:
17:c3:02:bd:c5:8e:a5:df:91:9c:d9:26:8a:86:b0:b2:16:89:
3a:14:e4:35:64:6c:0c:ef:94:e6:b4:1e:04:02:89:22:f1:f4:
14:8a:b7:c4:d4:27:e7:8c:b2:79:29:07:71:be:3e:25:aa:b4:
ae:32:42:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:59:03 2026 by rpki-client