Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38302e302f32332d3332203d3e203531313637.roa
File: 322e35382e38302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: sq/paFltRaeL9tO+5kgDsbZrisqPGCmrUXVjBsZRRe0=
Subject key identifier: 4D:61:2D:26:1B:44:7E:8C:08:93:EF:85:63:68:C2:CC:D6:5D:5A:CD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6B894C8C464759A53E394468A9FC83FE95038D17
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38302e302f32332d3332203d3e203531313637.roa
Signing time: Fri 23 Oct 2026 16:30:45 +0000
ROA not before: Fri 23 Oct 2026 16:25:45 +0000
ROA not after: Fri 22 Oct 2027 16:30:45 +0000
asID: 51167
IP address blocks: 2.58.80.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 07:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:89:4c:8c:46:47:59:a5:3e:39:44:68:a9:fc:83:fe:95:03:8d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:45 2026 GMT
Not After : Oct 22 16:30:45 2027 GMT
Subject: CN=4D612D261B447E8C0893EF856368C2CCD65D5ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:fc:ec:6a:92:17:7c:cf:54:d3:2c:18:32:
e8:a3:0d:e8:be:5d:d1:1c:05:ba:18:dc:7d:86:cb:
c7:d3:02:b9:ff:a1:42:82:f8:3a:3f:2c:cd:b6:77:
1a:8e:f5:de:53:bf:cd:5c:83:87:60:b7:e7:0a:21:
34:df:79:03:2f:57:64:e1:dc:18:91:50:1c:43:ba:
46:f0:26:19:7c:42:ff:24:9b:90:39:a2:42:ef:30:
81:e7:e0:91:d3:88:5b:92:20:db:ae:75:a5:84:f5:
23:4c:d3:02:08:77:54:f3:f0:f8:df:c1:f1:b5:9a:
64:e2:83:32:cd:34:ba:32:cb:bb:7c:74:e5:03:7f:
1f:8d:d0:d7:8e:a1:55:ee:4b:31:e0:74:33:a4:fa:
1f:2b:92:15:4d:b9:5b:ee:dd:98:eb:14:dc:41:81:
34:55:b2:33:a4:37:bb:5f:99:e8:43:f3:b4:79:c6:
63:f9:2a:5f:78:bb:c7:76:c1:d7:be:54:07:8e:ae:
52:16:0e:4e:a9:76:64:be:ea:42:20:b9:b0:81:5c:
03:dc:e4:03:61:2f:f2:50:ab:31:6f:6a:08:91:3c:
72:59:2b:0d:32:f0:a8:84:d6:db:0f:f7:c0:af:dc:
1b:c0:69:60:78:56:d5:4b:c9:02:cc:9e:44:60:3f:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:61:2D:26:1B:44:7E:8C:08:93:EF:85:63:68:C2:CC:D6:5D:5A:CD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.80.0/23
Signature Algorithm: sha256WithRSAEncryption
62:8c:e9:d2:6c:f7:54:da:20:52:67:64:98:0f:a9:fc:13:bb:
f1:74:62:c3:2c:e1:13:f9:8d:0d:2f:42:5e:36:03:08:a5:7d:
5f:46:61:05:70:5f:e0:67:7c:6e:35:7e:13:24:b9:60:bb:78:
7a:cc:0f:e3:da:1f:16:b1:93:83:09:0d:7a:d7:16:c6:a2:35:
18:c0:54:15:05:aa:de:10:97:8a:3a:9c:c5:65:1a:73:ad:7e:
c2:26:6f:0e:7f:8e:f5:ce:60:82:3b:c8:48:9f:ed:d5:e3:32:
92:e5:f8:15:ef:1b:32:7e:9c:d6:03:9a:0d:8d:7a:df:23:33:
c2:a2:80:05:f7:3c:c9:54:53:78:62:23:f0:0a:67:0a:76:e2:
3f:29:42:e0:06:98:4c:9a:d4:45:8e:fe:19:4e:e9:78:44:2e:
1d:2c:73:e8:04:96:ed:b5:7d:8d:16:79:f5:3a:ac:e6:7c:04:
09:d5:43:23:a2:48:66:a7:53:ab:a9:91:68:70:d2:2e:01:a4:
2b:86:f7:1b:f1:7d:51:9b:b5:65:0c:15:02:27:ed:63:09:18:
97:83:0d:7b:eb:0f:2c:48:55:21:b4:b9:c0:2e:11:c9:36:ce:
25:18:6d:c7:60:8e:fb:49:5b:af:d0:6f:45:c8:88:26:5e:61:
8b:98:8a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:59 2026 by rpki-client