Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e20313334343934.roa
File: 34352e3134302e3138372e302f32342d3234203d3e20313334343934.roa (raw, json)
Hash identifier: s7d0jLL7mQyXigCB/MpZTb1nU//KulEFUNZuc8+pHuQ=
Subject key identifier: 9B:AA:A0:AB:7A:CD:A3:62:F0:88:20:93:CC:D2:0C:9E:10:74:61:02
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 34A8465C607400E11E2E68C3E3A6F3B99E276050
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e20313334343934.roa
Signing time: Wed 05 Aug 2026 12:21:44 +0000
ROA not before: Wed 05 Aug 2026 12:16:44 +0000
ROA not after: Wed 04 Aug 2027 12:21:44 +0000
asID: 134494
IP address blocks: 45.140.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a8:46:5c:60:74:00:e1:1e:2e:68:c3:e3:a6:f3:b9:9e:27:60:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Aug 5 12:16:44 2026 GMT
Not After : Aug 4 12:21:44 2027 GMT
Subject: CN=9BAAA0AB7ACDA362F0882093CCD20C9E10746102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:0a:36:32:8f:b1:9e:01:ae:27:53:9e:c1:
2f:be:d3:ad:00:45:8f:66:50:eb:37:8f:69:c1:98:
93:02:d2:ba:84:f5:1a:d1:6b:6e:3b:6e:4e:2f:f8:
bf:89:c9:de:11:1a:df:d7:18:c1:32:88:69:81:40:
08:7c:78:67:f7:12:65:0a:5f:78:af:11:fa:99:01:
96:6f:f2:1c:ef:c1:ea:aa:60:94:36:38:2c:65:1b:
c9:24:93:8c:84:8e:5c:d5:4f:5f:08:b9:06:b4:52:
de:b1:30:6b:1d:6a:ca:9f:c7:b7:9a:07:49:b5:f8:
09:50:95:e4:a2:21:be:2f:f9:94:64:64:07:94:5c:
1f:d0:98:e8:6d:86:d4:3f:69:42:18:4d:c5:24:d4:
a2:fb:b8:8f:b9:16:91:72:44:91:05:2f:39:80:01:
cb:62:7f:34:80:91:8d:f7:af:5f:1d:c8:18:f6:c6:
bb:02:a0:b8:8e:a7:56:2a:a6:76:fd:e3:03:fe:cd:
30:10:74:94:11:74:2a:c0:40:83:cb:16:fb:90:8d:
1b:25:2d:b7:26:51:59:94:34:d7:06:00:6c:68:64:
7b:2f:bd:9e:88:5f:2a:45:ab:26:0d:48:2a:6e:98:
64:ff:c3:e3:9d:fb:22:76:b3:fc:dd:98:30:85:aa:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:A0:AB:7A:CD:A3:62:F0:88:20:93:CC:D2:0C:9E:10:74:61:02
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e20313334343934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:94:92:45:1c:00:98:4a:e3:23:36:c8:69:44:cf:69:a3:fb:
20:68:d2:f4:10:8a:31:d4:d2:7d:32:50:c5:c3:81:92:e0:d3:
e1:f1:2f:3e:12:72:1f:d4:53:15:28:56:d2:39:46:6b:2a:21:
6b:6f:ff:a0:48:de:12:43:77:56:a9:19:cc:2c:da:77:18:96:
61:c2:ed:5c:89:ad:87:72:04:a8:68:de:41:60:b6:39:66:78:
0f:d1:04:01:8e:ce:b7:44:a3:86:b4:d0:4d:23:77:b0:b6:03:
97:6d:3e:d0:b9:41:62:f3:91:bb:d7:8a:ad:86:7e:cc:06:ea:
1e:ae:97:2e:ae:b6:76:ac:9a:a6:96:e0:c3:ed:d9:de:b6:6e:
eb:0c:b2:56:9a:46:c0:c7:14:b2:6c:3e:6f:3a:29:67:f0:54:
f3:92:73:5c:6a:54:58:df:91:c1:7c:1f:58:e3:3c:eb:23:64:
1c:02:d0:de:47:cf:b9:5f:ef:3e:57:aa:fe:ae:e4:83:61:e6:
7f:7d:4d:d2:98:0c:9b:d1:c7:49:09:f8:9d:7d:ba:cd:57:49:
f9:50:67:14:1a:28:3c:38:22:97:51:aa:7d:3d:66:a6:91:fa:
53:44:db:97:a3:1e:44:77:07:6d:8d:bd:91:46:7b:e9:ba:ac:
1f:ec:da:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Aug 13 00:29:11 2026 by rpki-client