Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131362e302f32342d3234203d3e20323136323533.roa
File: 34352e3133342e3131362e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: 0dlOG5yriafntjzhHrSpsDVkH/qLBCRNPLgZRjXaBI0=
Subject key identifier: 56:C7:5B:5A:89:A1:53:47:59:67:99:47:43:86:EC:F6:AA:B3:95:63
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 21A8663D459DBF8E722737C40D1E4C6F03D27363
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131362e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:07 +0000
ROA not before: Fri 16 Oct 2026 18:44:07 +0000
ROA not after: Fri 15 Oct 2027 18:49:07 +0000
asID: 216253
IP address blocks: 45.134.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a8:66:3d:45:9d:bf:8e:72:27:37:c4:0d:1e:4c:6f:03:d2:73:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:07 2026 GMT
Not After : Oct 15 18:49:07 2027 GMT
Subject: CN=56C75B5A89A15347596799474386ECF6AAB39563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:ee:ab:e1:66:5d:33:cd:d9:9b:6b:08:50:
07:7d:81:f9:8f:14:61:fa:f7:35:65:b5:58:25:5d:
54:ae:6d:31:ba:d2:0d:4e:a8:05:f0:13:0f:d1:f3:
56:9d:0e:cb:c0:d0:1a:82:c6:b0:ab:66:1f:ea:f7:
bf:05:5d:90:8f:3f:1e:62:5e:26:8e:de:88:41:45:
4f:1e:e4:8d:cb:4d:71:19:b3:e6:7c:c6:ae:66:e9:
69:20:2a:af:e6:46:8d:28:70:5c:78:7b:43:d0:d3:
aa:9b:6a:c1:69:6f:f7:24:65:89:09:61:21:9e:1b:
5d:12:31:b0:38:c7:1e:a4:78:4c:63:d4:fe:66:a1:
a5:5f:db:0e:47:51:45:36:55:3c:05:6c:61:c2:cb:
73:1d:61:7d:b4:9f:67:c0:4b:36:b7:62:15:b0:99:
16:42:a6:58:6b:12:bb:2e:24:b3:de:16:36:76:35:
fc:b4:5a:58:ba:f3:fc:41:5e:b9:d2:55:02:89:e4:
e1:c6:18:0f:f9:8b:27:65:35:b0:a3:ed:c4:d9:7b:
1a:13:ca:b1:b0:5b:06:ad:a7:12:dc:8b:85:2a:f0:
39:11:0f:ad:09:1a:dc:6a:c8:06:9c:3c:71:4f:d2:
15:4c:fc:52:68:7e:8b:c4:10:57:9e:77:23:68:b4:
c5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C7:5B:5A:89:A1:53:47:59:67:99:47:43:86:EC:F6:AA:B3:95:63
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131362e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.116.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:f1:e2:52:5f:20:3d:9f:e0:90:12:7a:88:fd:06:c9:77:38:
1c:4a:2a:8b:9a:3c:11:9c:95:72:9d:85:8e:9b:80:3d:c7:62:
db:48:1d:44:8c:68:5a:26:e8:10:1c:db:af:21:06:e7:6f:0c:
8e:06:a5:a8:4a:41:09:48:72:4c:a2:5f:74:9b:50:c8:ca:d2:
31:d1:6e:73:07:c7:0e:07:9b:9d:45:d2:f0:84:0c:f6:24:b4:
ac:ad:3d:7d:1c:82:dd:04:81:ba:ac:9a:2e:cc:2d:21:07:3d:
d1:b2:28:cd:26:60:29:7d:11:ac:f5:4b:89:44:fa:17:2f:8b:
aa:6a:69:bc:18:9b:fe:aa:00:83:e4:df:d1:d6:ee:54:7e:31:
52:c1:59:e0:28:c8:9a:11:f8:20:80:f2:5f:e9:98:bb:d4:3c:
b5:21:ac:38:b1:39:62:57:7b:1c:16:79:9a:c9:03:da:19:dd:
55:8e:83:b6:c0:12:3a:a9:06:cc:46:5e:15:13:5f:27:35:c6:
ab:80:54:ab:bb:31:80:3d:28:d9:0a:8f:f0:44:9a:96:c7:8a:
61:df:86:97:4f:1b:b6:2a:98:14:dd:9e:be:ae:4b:41:0a:46:
bd:c6:6b:5d:02:44:98:17:a7:47:5d:0b:9b:eb:81:be:46:94:
19:39:29:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:25 2026 by rpki-client