Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131372e302f32342d3234203d3e20323136323533.roa
File: 34352e3133342e3131372e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: 2CEwXUaiDnvKnHdKz4C+4Y2zJJVwWdBKmEB4+ylygLI=
Subject key identifier: 6C:4E:1F:27:67:0B:DC:73:9D:51:DB:A0:C4:86:09:FE:D3:AF:29:C2
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1AFBBF502ABC1FD5CA59F1B76E2E1AB9783C63FF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131372e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:09 +0000
ROA not before: Fri 16 Oct 2026 18:44:09 +0000
ROA not after: Fri 15 Oct 2027 18:49:09 +0000
asID: 216253
IP address blocks: 45.134.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:fb:bf:50:2a:bc:1f:d5:ca:59:f1:b7:6e:2e:1a:b9:78:3c:63:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:09 2026 GMT
Not After : Oct 15 18:49:09 2027 GMT
Subject: CN=6C4E1F27670BDC739D51DBA0C48609FED3AF29C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:90:4c:ac:dc:f4:47:1a:49:04:c9:89:bf:
c9:2b:09:8e:fe:9d:bf:97:f2:58:c3:2f:4b:65:af:
0a:ea:88:63:af:ae:b4:f2:49:1b:bb:d1:3b:94:ae:
5a:90:7f:38:0c:21:59:56:87:29:5c:c6:f1:a4:15:
cd:3b:ae:27:d9:57:49:2d:64:4d:8a:61:d3:6a:0b:
ca:28:dc:8e:97:f5:66:16:87:ca:60:1c:b9:39:f8:
42:2e:24:0c:3c:d7:b6:6a:32:58:ae:a5:32:06:80:
3a:63:98:3a:06:b2:2e:2d:05:c8:fe:53:1d:88:c1:
5a:6f:e7:e5:9e:ea:57:89:9c:d5:f7:0a:7a:86:ed:
9e:d3:73:6e:e6:a1:26:ab:2c:81:d7:66:28:52:2a:
e5:f3:26:77:a7:cf:4e:e1:1f:03:2b:ad:6c:fa:48:
7c:ce:07:b8:50:43:4f:ee:c0:35:a7:29:27:53:62:
0b:bf:f0:1c:4e:01:e5:4d:49:4c:46:5b:d5:58:34:
31:19:38:6d:63:81:de:ec:db:15:36:85:4d:6a:2d:
8f:0b:85:42:5d:20:d2:d2:c0:fc:34:c4:c9:c3:59:
78:df:4d:7a:e4:5c:df:99:55:5b:97:15:cf:ba:93:
9b:53:cd:4f:4a:1e:cb:45:12:9f:38:cc:52:b6:00:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4E:1F:27:67:0B:DC:73:9D:51:DB:A0:C4:86:09:FE:D3:AF:29:C2
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131372e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.117.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4d:c7:d6:01:67:6f:bf:d6:38:23:1f:54:b6:b8:af:99:c4:
a7:6c:2f:4a:8c:4d:8e:a5:e1:04:c4:a3:0f:60:c6:18:7c:02:
53:31:a7:2f:98:3d:14:d9:c4:36:1f:b0:88:ff:99:95:94:eb:
a6:d4:c5:75:58:ec:80:9f:9d:0a:80:c4:e0:d3:3f:7a:73:e5:
fa:43:d1:82:a4:20:9e:45:e9:2d:69:43:d5:71:50:98:9a:08:
92:86:95:05:45:68:ca:a6:57:22:b4:2f:d1:57:ab:01:e7:55:
e4:32:94:4f:11:f4:bd:70:e1:f8:b6:55:7b:72:ce:18:ce:c9:
e3:9b:5e:e9:ef:19:33:55:63:dd:18:db:9f:dc:b7:ae:c4:b1:
0d:01:6d:f3:12:9c:c9:9a:25:d7:55:90:fb:3f:ae:8e:f9:5a:
e3:ae:c4:52:1b:e2:70:4f:b2:f3:38:9d:0e:43:ad:46:ed:70:
df:56:77:d4:c1:8e:1e:e4:de:5a:cc:0f:b8:a8:1a:db:85:22:
2f:6e:02:66:5e:56:4e:5b:c9:62:19:c1:c0:9a:ed:5a:b2:71:
2b:86:89:3d:f3:b2:c6:7c:f8:9d:34:83:1b:c1:dd:b8:eb:cd:
a2:0f:16:7c:e2:8e:e6:6c:a4:13:12:bc:c0:c7:23:75:10:a9:
42:63:6b:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:24 2026 by rpki-client