Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e20383334.roa
File: 34352e3134302e3138372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: E8Mhh6qqVCXxZearAuirPoG7mPBeBl07J3JQAFqkNu8=
Subject key identifier: DC:00:96:D8:09:54:25:DA:1D:6E:DD:34:89:75:D9:02:C1:D8:BE:87
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4B9F9E6044E71A7D77846502FED660B34C212A09
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e20383334.roa
Signing time: Wed 01 Jul 2026 17:18:51 +0000
ROA not before: Wed 01 Jul 2026 17:13:51 +0000
ROA not after: Wed 30 Jun 2027 17:18:51 +0000
asID: 834
IP address blocks: 45.140.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9f:9e:60:44:e7:1a:7d:77:84:65:02:fe:d6:60:b3:4c:21:2a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 1 17:13:51 2026 GMT
Not After : Jun 30 17:18:51 2027 GMT
Subject: CN=DC0096D8095425DA1D6EDD348975D902C1D8BE87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:01:b5:09:ff:d1:61:9e:22:5a:ec:bc:c2:0e:
db:95:8f:ec:b6:63:72:77:60:19:35:75:68:13:df:
c0:85:4c:e7:dd:d6:98:cb:19:16:2c:26:ee:4d:ac:
52:f9:fb:4b:e1:53:2b:1a:56:42:51:8d:55:6b:6b:
ce:ef:61:bf:fb:a7:41:3e:a0:85:26:1f:3b:7b:e7:
04:39:ed:36:a5:dc:80:90:ca:bc:1c:f0:c3:2c:70:
05:fb:8c:4e:ec:d2:d9:5f:d9:98:e0:2c:af:cd:11:
9c:d6:64:ba:f6:16:09:4b:9d:d8:f0:85:b6:78:e7:
c9:fa:1c:d5:12:95:8c:9f:c1:03:30:cc:aa:a0:7b:
10:f4:1c:8a:c4:81:21:25:77:3a:ee:73:56:ba:79:
e9:a5:ee:f9:fe:48:a5:69:35:2a:14:4a:c6:0e:7a:
25:0a:62:5e:48:dd:6f:d9:43:20:84:4b:e0:45:27:
d0:b2:b8:8f:a7:6d:46:7d:20:a0:2b:33:10:ca:63:
55:92:17:11:f3:38:7f:26:e6:56:f3:a9:1c:03:5d:
ec:08:eb:29:18:8f:c2:ef:77:87:db:ac:cc:b8:71:
2e:68:83:f2:02:8a:c5:32:b6:d9:46:1a:d7:db:65:
1c:7f:f5:17:e2:4f:2f:86:78:e3:a3:5f:e5:81:93:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:00:96:D8:09:54:25:DA:1D:6E:DD:34:89:75:D9:02:C1:D8:BE:87
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3d:3c:27:f0:2c:b5:1d:1d:da:db:03:2f:36:db:d8:32:7c:
a0:7f:8e:5f:d6:0b:dc:62:1d:7f:5e:16:ad:b2:53:f6:91:2c:
e9:68:50:74:47:df:5d:ad:70:3f:6e:cf:53:fa:a8:aa:3b:71:
46:4f:b5:5d:d6:fb:ae:f6:ec:f8:07:ca:df:f2:83:ac:d3:ee:
0c:22:4c:6c:fc:f5:be:35:87:27:b4:0c:06:ef:77:c6:0c:c9:
98:1b:70:d6:b4:50:41:a3:11:25:69:af:14:b1:64:95:f8:b3:
ed:f4:24:94:fe:4e:59:21:9b:83:a4:82:25:e3:3a:73:ea:97:
69:22:a4:c4:ec:f2:e4:c3:dd:f1:dc:c9:e3:b3:d2:aa:16:74:
b6:85:63:90:77:d7:1e:92:2c:6f:50:b3:f6:94:01:6a:88:46:
25:2c:e8:2f:5f:fa:a4:7c:f7:92:59:64:53:37:f9:b0:a8:25:
a2:b5:ee:7d:b9:d0:6a:23:e9:ac:1b:1c:cd:8b:53:4e:1e:1c:
5f:33:bc:f3:cd:76:51:7f:c6:97:0a:4e:43:04:51:48:1e:6c:
3f:be:d5:53:d1:dd:cd:66:6e:fa:1f:87:78:8c:13:6e:28:c4:
ee:9e:f1:9c:e2:f3:43:a4:be:b6:97:9f:08:5e:c1:5c:8b:be:
a7:04:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:23 2026 by rpki-client