Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131392e302f32342d3234203d3e20323136323533.roa
File: 34352e3133342e3131392e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: Q8lywwGY35Ns2ulQZTs0ksBHMmCQjT0aY6n8sYPtaXw=
Subject key identifier: 0F:96:B6:1E:F7:3A:E9:C3:32:AB:24:CE:06:29:67:1C:0D:8A:03:2B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2DCD99CBACBD107B4E93CD27A4AE94F9C4664D7A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131392e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:11 +0000
ROA not before: Fri 16 Oct 2026 18:44:11 +0000
ROA not after: Fri 15 Oct 2027 18:49:11 +0000
asID: 216253
IP address blocks: 45.134.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:cd:99:cb:ac:bd:10:7b:4e:93:cd:27:a4:ae:94:f9:c4:66:4d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:11 2026 GMT
Not After : Oct 15 18:49:11 2027 GMT
Subject: CN=0F96B61EF73AE9C332AB24CE0629671C0D8A032B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:02:28:15:de:5d:2e:47:00:47:7b:95:58:
ce:8f:18:ec:de:e4:40:c8:42:72:70:70:73:2e:97:
00:39:1f:68:4a:41:11:39:2b:ca:a2:86:22:0d:bb:
b6:55:8d:10:6e:8f:5d:2e:b0:e4:19:64:ec:97:cf:
64:39:79:1a:4a:f4:0f:6b:ab:96:70:46:c2:21:e3:
8f:5c:74:0a:f5:5d:e3:6b:29:db:d7:dc:0e:89:84:
2e:e2:78:07:0b:f7:92:3e:a1:da:40:85:1e:db:19:
61:66:b8:f2:49:f6:4d:94:c8:65:c6:c1:bc:73:2b:
68:c3:8b:2e:7a:99:00:63:09:08:87:7c:46:17:3b:
f9:e3:60:7a:3e:68:1a:b3:b4:ca:f2:1b:6a:70:12:
fa:bb:f2:be:ff:51:1b:c9:fb:6c:b0:72:09:84:51:
67:f3:e9:d2:be:5d:bc:4b:76:ab:f0:dd:ae:21:ce:
00:27:e2:8b:af:60:da:21:97:24:8f:44:71:8a:b9:
89:92:05:d0:c9:6f:3d:e5:80:03:ed:2f:aa:b2:a7:
7d:35:8d:6a:26:85:ee:1c:b3:7b:68:73:bc:63:c6:
2b:06:67:ab:8b:11:e0:e2:6a:34:f6:31:d0:ea:ec:
77:ed:f4:29:8b:48:ca:41:20:ce:4b:7d:ab:b1:cd:
aa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:96:B6:1E:F7:3A:E9:C3:32:AB:24:CE:06:29:67:1C:0D:8A:03:2B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131392e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.119.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:b1:2e:89:f0:d7:ea:4a:66:0c:a4:a2:ef:1f:4d:08:ce:34:
7e:e7:f4:65:dc:bf:75:fd:97:2f:b7:b1:15:08:a6:be:f5:cb:
27:5d:a1:10:68:f8:12:1b:52:1e:27:28:92:c0:d4:7f:76:02:
c4:ed:86:9b:3e:c0:a9:94:25:04:c1:9c:7c:b4:a5:9e:0e:42:
24:f6:02:22:f4:b2:a4:5b:00:29:ca:d4:ce:47:5b:65:df:97:
4c:ce:99:3a:8f:4a:e8:ef:49:ab:da:be:f0:5b:ed:cd:a0:34:
16:bd:8c:d1:01:d7:d3:41:58:f6:3c:97:a1:dc:ae:93:e9:ce:
64:a5:5a:58:a4:99:03:0f:18:25:63:3f:a2:6c:22:12:68:29:
33:31:51:40:3b:db:1b:32:b6:0e:cd:1c:3f:57:5a:19:9d:c9:
b1:09:b4:3d:6f:93:47:fd:ec:7f:c6:12:86:58:ed:8f:c6:4c:
f7:96:cb:a4:6c:30:ca:64:bd:98:ea:af:52:a3:b4:42:d0:d2:
f6:ef:34:2d:3c:d3:9c:2f:e0:e1:9e:d5:cf:d5:c5:4a:73:45:
da:fd:25:bb:8f:a4:05:23:39:57:2e:6d:72:8e:68:6c:41:b5:
41:fa:3f:3e:a7:ac:dc:f7:d7:f3:56:f4:b8:f3:c9:65:9b:0c:
d3:05:2f:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 20 07:27:50 2026 by rpki-client