Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135362e302f32342d3234203d3e20323132323338.roa
File: 34352e31302e3135362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: zyF6efEZsxPMJJ+YPn6mPB10/aABRyYbRR0Auknb98A=
Subject key identifier: D1:F7:5D:0C:44:A4:B6:4E:BC:BA:F1:AA:A4:45:82:F4:F1:25:05:1B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0E536447E0C1416A9B160D6D70422BCAC45E630D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135362e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 19 Oct 2026 15:29:57 +0000
ROA not before: Mon 19 Oct 2026 15:24:57 +0000
ROA not after: Mon 18 Oct 2027 15:29:57 +0000
asID: 212238
IP address blocks: 45.10.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 07:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:53:64:47:e0:c1:41:6a:9b:16:0d:6d:70:42:2b:ca:c4:5e:63:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 19 15:24:57 2026 GMT
Not After : Oct 18 15:29:57 2027 GMT
Subject: CN=D1F75D0C44A4B64EBCBAF1AAA44582F4F125051B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:25:80:7d:a1:e1:3b:8b:f9:5a:7d:5c:1e:
14:cb:9a:a2:5f:34:97:80:a3:87:73:ee:0f:b5:57:
6b:f3:1e:a2:6b:09:8d:8b:d4:ec:19:a7:a3:52:f1:
3d:e2:be:e6:c0:0c:b0:e4:c8:cd:37:cf:63:c7:2f:
11:f9:cb:c9:14:47:4a:a3:8d:cf:0e:4d:20:fd:dd:
1c:2d:0f:73:1d:f6:b7:ef:19:92:ef:df:47:a4:7f:
c1:0e:5b:a9:46:bc:93:21:07:0c:44:3a:0e:f3:c7:
e4:6d:2b:d2:94:4e:97:f6:e2:bc:82:ac:a7:a2:e9:
a0:1c:4b:6a:2d:51:f4:71:1e:23:c8:3d:dc:81:cf:
a3:d8:47:5a:c5:c4:76:42:87:d4:84:42:7a:40:67:
7a:a7:75:9a:6a:3b:4a:70:54:80:cc:ef:a4:f0:79:
9f:c0:e6:34:17:b2:df:1d:1a:c0:d8:49:23:2b:04:
7b:bd:50:f5:03:bf:b5:c1:47:06:29:05:8c:52:ea:
b3:00:13:d7:e1:3f:26:e5:98:bf:30:a4:36:b8:f2:
5e:02:86:48:12:f9:f8:be:15:eb:33:a4:a9:84:e3:
30:5c:3a:7c:da:97:cc:a3:1d:ae:3c:05:66:79:1b:
38:2f:a2:32:fe:2d:8f:bd:47:0b:16:c6:ef:7b:23:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F7:5D:0C:44:A4:B6:4E:BC:BA:F1:AA:A4:45:82:F4:F1:25:05:1B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d7:8d:69:66:c7:9a:76:59:3e:f6:6d:2f:c9:28:17:a3:c7:
cf:12:e5:a5:90:f1:d3:be:ee:e6:74:5c:0b:76:77:78:fc:20:
46:d5:84:bf:ea:b0:1a:c8:59:3f:ff:08:f4:8e:05:aa:37:54:
cd:f9:a7:9a:3c:3f:53:4b:e2:1b:6f:3f:ce:aa:7b:f2:c2:e4:
40:86:5d:e0:c3:b6:7e:ce:f0:c9:b7:60:ac:5d:57:63:6d:f1:
c7:17:ce:c5:e3:37:53:55:e4:2b:ca:7b:e8:e9:30:1a:0e:90:
b5:13:f1:b1:a4:51:e1:c3:f2:d4:7c:c5:d3:67:e7:c7:d7:c8:
76:fb:92:93:01:cb:ca:ed:cc:5c:01:d7:ff:8d:ed:10:30:a5:
b0:55:76:6d:85:aa:aa:68:31:1e:cd:a0:9f:85:92:ae:b1:64:
6f:b7:f7:07:63:09:aa:6e:3c:4a:95:f9:5c:7f:0f:b1:5c:3a:
cd:35:eb:ef:bf:dc:f9:98:da:dc:9f:6e:69:01:01:63:b6:47:
bf:68:da:35:4f:7a:a4:17:64:f2:db:99:c7:7c:b3:d9:a9:a5:
3f:d8:2b:0a:03:ba:d5:f1:27:e5:5c:20:12:0f:4f:f2:8f:43:
0c:89:37:a2:a4:0b:86:91:c5:8b:9a:11:37:b5:2f:a1:32:d8:
4d:fc:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:40:50 2026 by rpki-client