Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e203136323736.roa
File: 34352e3134302e3138372e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: LzsUZONN+1LDMkijCnoqTWZtbBZ2KhXYSeo1KlyD/6U=
Subject key identifier: 33:25:76:1E:15:B2:BC:D7:F9:3F:FE:BA:C0:6F:2F:EF:73:50:79:24
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0C16A9296329E66D99EFF3C8ED8C9F5D4161F4CB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e203136323736.roa
Signing time: Fri 16 Oct 2026 19:20:24 +0000
ROA not before: Fri 16 Oct 2026 19:15:24 +0000
ROA not after: Fri 15 Oct 2027 19:20:24 +0000
asID: 16276
IP address blocks: 45.140.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:16:a9:29:63:29:e6:6d:99:ef:f3:c8:ed:8c:9f:5d:41:61:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 19:15:24 2026 GMT
Not After : Oct 15 19:20:24 2027 GMT
Subject: CN=3325761E15B2BCD7F93FFEBAC06F2FEF73507924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:5c:26:0f:b2:cb:92:f5:38:dd:4e:8b:4d:
03:92:ea:9c:0a:8c:00:7e:a5:b5:0b:f2:d1:d8:a1:
b1:32:e8:30:fa:c5:0c:35:3f:29:76:5e:54:18:48:
92:7e:50:2e:fa:98:67:fd:92:1d:1e:e5:f8:8f:c8:
89:7c:e7:3d:03:09:ad:fc:44:94:29:b7:a4:80:a3:
48:0b:16:b2:b2:1c:91:ac:8e:ac:b8:6a:65:89:1a:
7f:e7:0b:3f:3e:fa:a8:e4:cc:e5:b5:4d:f0:0e:82:
5c:f2:62:08:e9:8b:6b:8e:95:ca:68:28:3a:31:97:
58:b3:8f:81:cd:bb:a0:92:9a:a7:e9:65:88:40:4d:
9b:42:b3:49:3e:ed:c6:00:5f:46:1a:b7:33:62:ea:
89:78:11:8e:ff:02:44:5e:ca:b6:d0:a5:38:a4:06:
bc:c0:00:8c:94:89:67:e5:60:ba:5d:87:53:42:75:
9a:01:08:ed:9a:dc:e7:bd:a6:71:cb:9c:59:cf:98:
cf:41:7f:00:17:75:00:64:39:59:40:fe:62:9b:7a:
e3:b8:a7:4c:1a:b4:3a:50:08:8d:d8:b9:d3:b3:bc:
ad:76:7e:09:bb:51:0c:92:56:72:22:e1:f2:db:92:
9b:5e:a4:bf:cb:06:03:13:6a:c4:b8:2c:db:42:92:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:25:76:1E:15:B2:BC:D7:F9:3F:FE:BA:C0:6F:2F:EF:73:50:79:24
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
58:91:0d:e6:69:cf:93:0f:5d:b3:89:9a:a2:00:16:49:c3:ee:
a7:b1:46:7a:ad:4d:e4:81:a4:0f:91:40:38:7e:2a:e0:2b:6f:
ec:bd:1b:c0:67:b5:cc:f0:3d:0b:27:96:38:c1:de:7f:06:b6:
64:df:79:5b:f5:64:06:87:2c:06:f4:d0:10:5d:ef:3a:5f:2a:
b6:50:6a:dd:f9:f6:13:da:6d:8d:c1:90:70:41:00:50:3b:d8:
17:1e:5f:b8:9d:ff:25:48:01:1a:9e:2d:a8:5f:c7:be:22:44:
be:39:0c:e1:66:9b:30:48:6d:d1:92:22:b1:42:a6:00:e0:28:
2c:c7:03:d9:ff:fd:ee:f4:37:ad:6c:0d:39:b4:72:96:b5:0f:
ec:c8:9d:68:9b:bd:a5:e1:a7:b5:64:a9:d5:6c:69:41:85:c0:
c1:ce:1e:34:08:bb:aa:ee:74:01:5c:5c:d1:c8:e6:d2:51:4a:
e6:5f:3d:f6:64:e0:07:33:d1:06:2a:0d:a9:6e:88:cb:3d:30:
77:d5:68:7f:87:6f:7f:e0:06:c0:4e:90:cf:b6:21:cb:49:f5:
eb:ed:37:b2:3c:6b:78:b8:d1:9d:84:46:33:53:17:16:fd:70:
2d:34:98:93:31:09:d6:86:30:46:fc:27:e2:0a:d3:77:de:f7:
ca:b6:38:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:39:55 2026 by rpki-client