Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e203136323736.roa
File: 34352e3134302e3138372e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: FFayrdhT5EH/P4HckDl5aVY59pwNrtzSYNKwJhAHV1w=
Subject key identifier: 90:FE:E9:59:0D:5D:0E:BC:B5:DC:87:FD:31:E8:87:C6:F8:A1:AD:B9
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1FC88E81C23A439BB46FFD7D8F714F3E45C64313
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e203136323736.roa
Signing time: Tue 10 Mar 2026 07:17:38 +0000
ROA not before: Tue 10 Mar 2026 07:12:38 +0000
ROA not after: Tue 09 Mar 2027 07:17:38 +0000
asID: 16276
IP address blocks: 45.140.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 22:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c8:8e:81:c2:3a:43:9b:b4:6f:fd:7d:8f:71:4f:3e:45:c6:43:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Mar 10 07:12:38 2026 GMT
Not After : Mar 9 07:17:38 2027 GMT
Subject: CN=90FEE9590D5D0EBCB5DC87FD31E887C6F8A1ADB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3e:97:e4:50:15:99:78:40:9c:65:5b:c6:88:
07:13:d0:47:91:b4:37:d7:26:03:50:ae:8b:c5:ec:
5c:70:a3:61:8a:b3:59:90:0f:b2:a6:18:9b:c4:f9:
c6:27:f4:63:70:fd:d9:6b:b3:b6:23:b3:31:60:da:
31:aa:46:26:83:e2:aa:30:18:5e:c6:13:dd:cf:1d:
92:92:27:f4:b4:d6:b3:50:28:38:d7:f3:e4:c0:cb:
ae:d0:78:ee:76:db:e2:c2:47:57:41:52:e0:fe:fc:
b1:a5:c3:6b:1f:10:de:ef:ed:52:40:49:72:58:d9:
3d:9d:82:4e:5f:bc:9f:33:62:63:87:b4:f0:2a:fc:
90:0b:1e:28:b0:3e:f2:d7:eb:bb:46:00:71:a6:3e:
64:5f:e0:db:f4:39:dd:b4:62:2f:ac:cf:2d:4f:0b:
6a:32:ae:3c:3d:0c:82:22:c2:db:23:b0:8e:8c:95:
0e:dc:00:4a:06:01:54:cc:c1:e6:33:5f:26:3b:74:
e5:a9:ce:0e:33:7e:d0:b3:66:3b:7d:92:eb:34:86:
92:77:db:ea:71:01:c9:5d:43:23:7e:9f:e5:5c:1a:
89:d5:bf:28:44:9f:01:c2:d8:0a:1a:01:50:15:b1:
63:79:9c:92:3c:50:4c:79:68:4a:05:b7:6b:fb:a8:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:E9:59:0D:5D:0E:BC:B5:DC:87:FD:31:E8:87:C6:F8:A1:AD:B9
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f8:2d:2f:10:9d:0a:69:30:7b:77:63:a8:7e:25:c6:e2:28:
84:01:09:15:74:8f:2d:c7:58:88:f4:13:62:74:bb:91:9e:b7:
89:d7:65:17:38:b4:c7:85:bb:86:0b:43:8f:90:f6:47:8b:d7:
d2:8f:6d:5f:f7:32:3d:f3:1a:27:fb:5b:6f:af:e2:a5:a7:2a:
40:29:ed:3d:1b:50:49:e3:0b:22:b1:d4:a9:3d:34:e1:e2:d6:
fd:91:c0:21:d4:41:27:fa:bf:7a:aa:ed:a7:c9:76:39:c7:0a:
34:55:11:e5:96:e7:95:fd:c9:e8:1b:8a:e5:fd:ce:c4:55:4a:
ea:20:45:90:74:11:e0:93:96:22:96:06:21:70:ad:2b:82:43:
59:9c:35:2a:6a:d2:94:00:11:b1:f3:7e:80:d4:a2:5c:5b:6f:
de:53:ee:5b:ce:f4:48:16:d5:49:b5:fe:8e:ef:c4:7e:95:5a:
96:a8:e2:8e:64:ff:29:35:0f:04:f1:33:84:05:6f:34:6b:5a:
01:17:60:75:7e:d9:0a:c4:f0:dc:7c:60:f2:86:75:34:e6:11:
80:a6:30:72:07:45:22:c6:88:77:d9:75:93:2c:40:bd:90:f3:
3b:fc:b3:dc:ef:e5:44:09:a3:24:12:ce:46:97:19:4b:60:23:
7e:0e:10:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:18:03 2026 by rpki-client