Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131382e302f32342d3234203d3e20323136323533.roa
File: 34352e3133342e3131382e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: JKhviVSVwgVEoysd2fqBrWk9Vm91RLRcLagBh6fLk1k=
Subject key identifier: 54:D8:76:03:5D:E5:68:B6:65:D9:2A:19:96:5C:39:F0:00:1D:DD:8C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7DDE1F2CC6844EF599C67DD7002DCBBDC654C757
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131382e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:10 +0000
ROA not before: Fri 16 Oct 2026 18:44:10 +0000
ROA not after: Fri 15 Oct 2027 18:49:10 +0000
asID: 216253
IP address blocks: 45.134.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:de:1f:2c:c6:84:4e:f5:99:c6:7d:d7:00:2d:cb:bd:c6:54:c7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:10 2026 GMT
Not After : Oct 15 18:49:10 2027 GMT
Subject: CN=54D876035DE568B665D92A19965C39F0001DDD8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:ee:21:22:93:bc:f1:fc:f8:2a:43:8d:2b:
15:fc:a1:ca:ba:7d:61:8e:81:a2:27:86:45:51:da:
f5:15:45:89:05:c9:e9:29:ab:f2:2e:9f:49:0f:0c:
20:b4:c9:c9:25:1f:7c:87:cb:2f:c5:81:78:3a:89:
0b:b7:40:6b:d9:10:17:fc:48:33:00:0c:0b:ea:2e:
4f:da:3a:ae:00:b0:9a:40:c5:4a:43:10:a2:9a:db:
df:36:cf:be:79:d4:25:44:29:ae:a6:82:73:fc:f3:
f8:6f:b1:00:b5:4b:0e:38:69:54:0a:a9:93:ee:97:
23:1b:5b:73:fe:f6:7b:85:34:38:ec:88:f9:77:a6:
aa:d8:61:c8:c7:d8:d5:bb:64:2c:81:f8:6a:94:71:
f8:1b:48:e8:e5:81:98:3c:08:4a:a6:1b:a3:5a:8b:
82:8d:67:19:15:af:19:b8:77:12:5c:2a:0c:b2:79:
f3:ea:7e:b0:f6:63:66:c9:ae:83:4f:b1:ef:b9:9b:
c7:15:b6:bc:36:f7:01:ea:87:33:20:45:47:d2:3e:
88:d7:50:9d:a1:d8:dc:5e:b7:cb:d8:6a:02:ba:90:
ee:ea:5a:d4:69:6a:b8:03:6b:9a:db:12:75:0e:fc:
3e:1b:9c:f0:8a:7e:60:d5:31:4f:11:2a:ab:05:67:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:76:03:5D:E5:68:B6:65:D9:2A:19:96:5C:39:F0:00:1D:DD:8C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131382e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.118.0/24
Signature Algorithm: sha256WithRSAEncryption
65:57:33:7d:41:07:3c:08:20:6c:40:bd:49:c2:f1:b7:08:95:
d6:d8:30:91:29:3e:2c:e0:a1:37:3a:4e:e1:93:a1:4b:ea:ab:
99:a9:ff:ce:ab:3e:eb:8b:c0:6a:17:f1:e8:d9:73:79:66:a3:
20:c3:00:f4:91:e1:0b:f1:d4:0d:13:e6:dc:43:a4:0c:78:c1:
c7:e8:de:1e:b8:74:66:f0:6f:3f:5f:d5:54:b1:1f:d3:a2:c4:
85:95:6e:20:1b:2f:0b:1b:1e:5f:a2:f1:19:f5:62:4e:42:b5:
a4:2f:50:df:79:a7:10:23:1a:e2:84:16:6b:ab:97:f3:7a:ec:
10:9e:60:88:10:35:30:87:65:bf:1e:0e:f4:f0:49:1e:11:d6:
b2:94:7c:c6:63:54:a0:39:97:12:14:68:bc:f0:e8:9d:f2:7c:
90:3b:1b:7d:6e:8e:b4:f2:bc:c6:e4:2b:9f:f5:7c:7a:ca:8c:
e4:48:de:9c:64:fe:a3:a2:ad:7e:a5:cc:e9:b8:e5:7d:0a:75:
7b:ed:3a:71:ac:77:44:aa:6e:02:f9:56:6f:46:63:16:fc:71:
5d:a1:60:bc:f6:6f:ce:6d:31:68:11:53:4d:eb:6f:ab:e4:ed:
bb:48:9f:c2:f9:16:92:d9:40:a9:f2:dc:bc:3b:c0:e8:f0:fc:
95:7a:e1:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 20 07:27:48 2026 by rpki-client