Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139352e302f32342d3234203d3e20313337323335.roa
File: 34352e3133372e3139352e302f32342d3234203d3e20313337323335.roa (raw, json)
Hash identifier: NUg2FBnyE9qJRGOnmSE9TfAyTzYx++FZUTVtJPdm/UQ=
Subject key identifier: 98:65:51:C3:54:7E:87:EA:6E:72:72:D6:DE:8B:DC:37:83:60:8E:6B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1D073E93F058C38EF428BC344DDA483F9791A142
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139352e302f32342d3234203d3e20313337323335.roa
Signing time: Thu 14 May 2026 06:24:11 +0000
ROA not before: Thu 14 May 2026 06:19:11 +0000
ROA not after: Thu 13 May 2027 06:24:11 +0000
asID: 137235
IP address blocks: 45.137.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:07:3e:93:f0:58:c3:8e:f4:28:bc:34:4d:da:48:3f:97:91:a1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 14 06:19:11 2026 GMT
Not After : May 13 06:24:11 2027 GMT
Subject: CN=986551C3547E87EA6E7272D6DE8BDC3783608E6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:33:f1:69:20:a1:88:ba:35:91:fc:39:dc:
35:2a:90:2a:94:6e:1d:ef:1b:d8:c0:8b:13:93:87:
d8:a3:0a:ed:ee:8a:55:3f:4a:e1:0b:ff:53:a1:9d:
b1:ca:e8:72:0f:b8:83:45:8a:5a:03:e5:f8:16:3c:
87:cb:fb:94:20:9c:f2:7d:be:f0:31:5a:25:04:8b:
86:28:b1:09:c9:3a:82:9c:54:7a:de:d0:41:62:3c:
d4:78:d8:04:46:e4:74:1c:19:0c:9e:18:c9:57:3d:
e3:68:ae:97:db:8d:66:d1:a6:26:49:06:27:63:d4:
e9:81:d7:b9:11:26:8c:f9:5b:bb:0c:e5:bf:cd:7a:
61:c8:c9:24:b7:15:8c:39:26:f5:47:43:a1:d3:43:
ff:86:7e:05:99:63:06:54:8c:e0:d5:d8:51:94:e0:
0e:1f:9a:11:36:a5:ac:a8:63:ce:72:bc:96:3c:d6:
d3:c6:5a:b0:49:de:93:d5:98:35:a9:79:fa:88:60:
c0:10:82:7d:29:08:bb:c6:67:63:1f:d8:9b:d1:0c:
ea:94:46:ff:bd:0d:13:39:f6:2e:48:4b:0f:c0:fc:
ba:62:8a:14:66:23:df:82:2f:29:02:5a:18:f5:72:
02:07:b0:c5:7f:d4:8c:e4:f4:3d:2d:12:30:ed:18:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:65:51:C3:54:7E:87:EA:6E:72:72:D6:DE:8B:DC:37:83:60:8E:6B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139352e302f32342d3234203d3e20313337323335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.195.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:5c:87:8c:d7:d6:ec:2e:ff:0f:b7:66:5d:d5:c7:5f:e0:06:
48:91:58:fe:59:db:d5:e1:1d:b7:96:e6:fc:22:a1:f7:6e:20:
03:fb:ce:73:dd:aa:0d:ab:be:a9:e2:fa:f9:d9:2e:99:b6:49:
95:c5:3a:5c:5c:52:a6:40:40:7e:20:3f:da:3c:dc:fe:04:05:
e1:7d:f6:41:0a:a1:d3:47:84:75:44:87:85:16:e8:ba:87:9b:
32:61:0c:dc:80:29:e5:39:b2:e9:19:62:c5:05:6c:85:57:ed:
6f:d6:ba:9f:65:a0:09:34:c1:c8:4f:d9:2f:d0:ee:0d:3a:e4:
72:6c:4e:b4:d7:b0:1e:e0:38:c1:67:5c:98:22:68:8f:72:8b:
c9:9c:25:30:ea:9b:19:fe:fa:6b:38:8c:06:99:e8:96:bf:7c:
4a:03:83:b9:bd:4e:51:a1:35:3c:d6:23:f1:71:16:b2:94:51:
a8:10:fa:39:33:b3:08:ae:d9:af:b0:33:8b:2c:18:91:4c:ce:
78:63:fc:10:e6:6f:d3:5c:bd:56:63:69:56:f4:07:a7:0a:69:
90:d6:8c:91:ff:3a:90:68:2f:ab:48:d0:ca:8d:52:48:7f:11:
f5:de:31:a8:89:5b:10:6b:62:81:a0:fa:ac:f3:a2:7f:ab:b6:
87:43:b1:e4
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUHQc+k/BYw470KLw0TdpIP5eRoUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjA1MTQwNjE5MTFaFw0yNzA1MTMwNjI0MTFaMDMxMTAvBgNV
BAMTKDk4NjU1MUMzNTQ3RTg3RUE2RTcyNzJENkRFOEJEQzM3ODM2MDhFNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClITPxaSChiLo1kfw53DUqkCqU
bh3vG9jAixOTh9ijCu3uilU/SuEL/1OhnbHK6HIPuINFiloD5fgWPIfL+5QgnPJ9
vvAxWiUEi4YosQnJOoKcVHre0EFiPNR42ARG5HQcGQyeGMlXPeNorpfbjWbRpiZJ
Bidj1OmB17kRJoz5W7sM5b/NemHIySS3FYw5JvVHQ6HTQ/+GfgWZYwZUjODV2FGU
4A4fmhE2payoY85yvJY81tPGWrBJ3pPVmDWpefqIYMAQgn0pCLvGZ2Mf2JvRDOqU
Rv+9DRM59i5ISw/A/LpiihRmI9+CLykCWhj1cgIHsMV/1Izk9D0tEjDtGNVNAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUmGVRw1R+h+pucnLW3ovcN4NgjmswHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzcy
ZTMxMzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzMyMzMzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAC2JwzANBgkqhkiG9w0BAQsFAAOCAQEAvFyHjNfW7C7/D7dmXdXHX+AG
SJFY/lnb1eEdt5bm/CKh924gA/vOc92qDau+qeL6+dkumbZJlcU6XFxSpkBAfiA/
2jzc/gQF4X32QQqh00eEdUSHhRbouoebMmEM3IAp5Tmy6RlixQVshVftb9a6n2Wg
CTTByE/ZL9DuDTrkcmxOtNewHuA4wWdcmCJoj3KLyZwlMOqbGf76aziMBpnolr98
SgODub1OUaE1PNYj8XEWspRRqBD6OTOzCK7Zr7AziywYkUzOeGP8EOZv01y9VmNp
VvQHpwppkNaMkf86kGgvq0jQyo1SSH8R9d4xqIlbEGtigaD6rPOif6u2h0Ox5A==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:32 2026 by rpki-client