Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3234302e302f32322d3234203d3e203437353833.roa
File: 34352e3133322e3234302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: WE6gEPWlR5q3PD8TQ9dH6u3UrA3jrgD98adzPTqXSkg=
Subject key identifier: 77:14:70:2B:C1:17:6B:3C:DB:67:91:46:C6:79:FB:98:0A:88:84:B5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 127FD45F4DE12849E07D849EF96F5B0B85B543CD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3234302e302f32322d3234203d3e203437353833.roa
Signing time: Fri 23 Oct 2026 16:30:37 +0000
ROA not before: Fri 23 Oct 2026 16:25:37 +0000
ROA not after: Fri 22 Oct 2027 16:30:37 +0000
asID: 47583
IP address blocks: 45.132.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:7f:d4:5f:4d:e1:28:49:e0:7d:84:9e:f9:6f:5b:0b:85:b5:43:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:37 2026 GMT
Not After : Oct 22 16:30:37 2027 GMT
Subject: CN=7714702BC1176B3CDB679146C679FB980A8884B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:58:6d:d7:0d:fd:65:49:a3:01:bd:77:da:
5b:74:65:6f:59:f7:b7:a4:b1:37:57:95:96:8b:78:
9d:c6:be:35:af:59:26:15:5a:68:d8:a0:69:9f:fd:
c0:79:a0:8f:4b:fd:c2:23:8d:4d:1b:7e:50:8a:f1:
0e:f8:d4:e0:0b:a5:15:52:07:0a:09:c5:be:b1:31:
4e:93:26:38:e8:5e:aa:65:b8:16:5d:80:26:75:99:
ff:fb:a5:9e:ea:5e:e9:41:b7:2f:bd:5b:01:e0:a2:
b2:a9:38:95:36:5e:90:ae:34:1d:26:01:99:73:12:
9c:42:37:eb:b8:e6:bb:d3:8b:3b:7b:71:32:98:e4:
cc:03:00:a0:21:d3:57:ed:e8:15:c9:26:91:02:4a:
8f:a7:d8:ae:70:3c:3a:a8:f3:21:75:74:45:da:67:
ae:da:63:ac:c9:18:45:4b:69:ed:98:30:24:f0:bc:
f6:dd:1a:b9:6c:5d:34:28:05:84:39:69:f7:36:03:
bf:7a:3e:b9:d4:d8:a2:17:91:f3:26:d5:bd:74:42:
54:18:af:56:0e:b9:f8:77:21:b7:32:0c:29:b5:ec:
07:8d:80:e3:9b:b3:4e:5f:20:57:05:a5:97:01:f4:
25:81:b2:c1:74:97:88:29:2a:9c:ee:36:3c:e2:bb:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:14:70:2B:C1:17:6B:3C:DB:67:91:46:C6:79:FB:98:0A:88:84:B5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3234302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:35:df:30:69:ab:6f:4e:a8:70:4a:68:dc:30:c4:0e:ce:24:
b3:71:7e:10:04:37:1b:a0:d0:22:4a:51:ed:15:8c:38:57:ef:
10:c4:4f:f9:6c:43:35:6b:d0:c0:1c:92:c3:89:11:1e:b3:c1:
63:e0:ed:7c:71:88:9b:a5:71:7b:bd:d1:60:1b:7f:e8:43:9d:
9f:41:b2:52:34:a1:9e:a9:a3:c7:c9:31:ce:38:3d:05:fc:38:
f0:e7:9a:9a:8e:1c:25:d2:87:34:76:97:0c:79:80:36:12:c5:
2f:9b:71:73:d9:83:e1:96:04:e5:ee:7c:31:59:d3:01:5d:a7:
2f:ea:7c:66:7d:83:ae:6e:9a:d5:24:a1:fc:ad:f1:63:6f:2c:
19:b9:d2:6f:8e:36:0e:ef:9c:3d:28:c8:e1:f0:92:55:6f:59:
09:66:86:d4:b3:00:5c:21:e5:61:09:46:f7:4a:f1:8e:68:ad:
06:dc:ba:ff:5a:c8:a4:ea:5f:5c:4a:f0:98:e9:e2:8a:48:a0:
ca:c7:18:f8:6b:32:f9:6a:28:5a:7a:d5:b1:67:3f:d6:3f:b8:
58:10:45:9d:95:a2:26:27:64:1b:49:12:a9:ee:7d:b6:54:54:
67:66:24:c7:15:f6:d7:09:cd:aa:1c:e8:8b:37:cb:c9:dc:cd:
f8:1d:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:19:15 2026 by rpki-client