Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138362e302f32342d3234203d3e203235313938.roa
File: 34352e3134302e3138362e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: F9IgN7WGSiHeRSYFg8vtEQMGRyO+J80zsDn+zwwOa3c=
Subject key identifier: 4F:39:C9:96:42:3C:E0:B0:DC:61:FA:47:9A:97:F2:B4:46:05:F7:D4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0BDDC0BCE7DFDABB4D4711E750A70DBBBB1938F5
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138362e302f32342d3234203d3e203235313938.roa
Signing time: Sun 09 Aug 2026 18:50:06 +0000
ROA not before: Sun 09 Aug 2026 18:45:06 +0000
ROA not after: Sun 08 Aug 2027 18:50:06 +0000
asID: 25198
IP address blocks: 45.140.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 18:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:dd:c0:bc:e7:df:da:bb:4d:47:11:e7:50:a7:0d:bb:bb:19:38:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Aug 9 18:45:06 2026 GMT
Not After : Aug 8 18:50:06 2027 GMT
Subject: CN=4F39C996423CE0B0DC61FA479A97F2B44605F7D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:17:b9:2e:6e:ed:75:e4:f7:80:8b:82:8b:
59:f9:eb:29:5a:0c:19:80:71:90:ef:be:b2:2a:c6:
50:11:40:c1:c9:65:ae:94:9e:98:37:3d:30:16:1b:
2b:88:4e:65:6f:fc:39:61:a4:67:da:41:09:66:04:
c3:fb:95:2a:0c:3b:c2:5d:89:38:07:b3:e8:21:43:
db:a9:1b:60:27:b2:70:71:49:12:79:29:d9:c6:f1:
39:fd:1e:ad:d5:fa:f4:ea:17:56:58:b9:b3:e7:24:
66:98:07:6e:e8:2d:03:fe:0b:77:1a:ff:5f:6e:15:
d2:71:2d:3f:30:dd:3c:6f:00:3b:b4:89:af:e1:73:
79:69:dc:30:e2:84:1a:24:86:16:10:7e:3e:42:ad:
1b:ce:8c:9e:bb:1f:00:6d:e6:4b:86:94:e5:1b:bd:
a4:fd:c7:30:47:d5:60:f7:b0:3e:15:1b:45:53:da:
f2:e3:11:b3:94:b8:db:72:c2:bc:be:a7:a5:0a:91:
e6:03:66:af:3c:bb:95:b7:a1:43:ea:90:3e:bd:4a:
7f:69:db:49:36:62:0e:02:eb:f0:1e:0b:22:1e:81:
a9:f6:14:9c:77:d7:f3:8c:c5:f2:98:00:46:82:b5:
bd:40:b1:c2:eb:44:84:4c:75:8e:90:45:9a:2d:97:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:39:C9:96:42:3C:E0:B0:DC:61:FA:47:9A:97:F2:B4:46:05:F7:D4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138362e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.186.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:dc:88:1f:ef:43:80:b7:40:4b:e8:25:e7:59:1a:57:4a:d0:
e5:14:b0:93:56:7e:48:c2:46:da:7c:2b:21:f0:ee:46:d8:51:
e1:11:57:6a:38:7f:7c:b8:21:c9:df:0d:23:7e:f2:2a:95:d5:
16:26:54:d0:89:1e:21:71:ec:62:77:db:49:6a:84:f5:fc:a3:
cc:3f:e4:36:e0:20:a0:4e:18:85:47:4d:11:37:d8:16:5d:af:
bb:0c:61:83:ab:2a:68:6b:a9:c7:25:58:24:40:49:01:62:3b:
b7:fb:37:e5:85:a0:8d:bd:a0:30:cf:2b:8f:44:39:31:48:4e:
15:53:7b:aa:7e:7f:c4:e5:dc:bf:99:d9:db:8e:58:0e:52:d5:
78:16:95:99:2c:19:38:14:21:b4:6f:5c:31:db:c0:84:91:ed:
25:8a:4c:c2:44:f2:02:fa:0e:6f:60:17:3c:ee:38:41:b6:19:
ff:ee:9a:18:a7:32:93:a6:d7:e0:35:1d:c3:88:19:d4:08:b0:
2c:a1:da:7f:bf:a2:19:72:5c:0c:79:9f:33:b1:3d:74:96:76:
e3:42:cd:79:24:5a:bd:1f:b3:4a:00:ba:37:a1:5a:71:51:09:
20:e5:94:65:01:87:87:50:7d:65:b3:fb:64:eb:a5:fe:ef:75:
ed:b8:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:06 2026 by rpki-client