Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32302e302f32342d3234203d3e203538323931.roa
File: 34352e3134312e32302e302f32342d3234203d3e203538323931.roa (raw, json)
Hash identifier: HC/XypY67fJrkVqO9abbOYSXvQQveRNk/iAjFcuFcGw=
Subject key identifier: 4A:CC:7E:E6:28:72:A8:C8:82:F3:3F:75:F1:35:07:CB:B6:7B:60:16
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0E04397945E5F714947A2665295A60CECE815F8F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32302e302f32342d3234203d3e203538323931.roa
Signing time: Wed 12 Aug 2026 10:05:55 +0000
ROA not before: Wed 12 Aug 2026 10:00:55 +0000
ROA not after: Wed 11 Aug 2027 10:05:55 +0000
asID: 58291
IP address blocks: 45.141.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:04:39:79:45:e5:f7:14:94:7a:26:65:29:5a:60:ce:ce:81:5f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Aug 12 10:00:55 2026 GMT
Not After : Aug 11 10:05:55 2027 GMT
Subject: CN=4ACC7EE62872A8C882F33F75F13507CBB67B6016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:a6:1b:01:8d:0c:c8:5e:4e:bc:0c:28:b9:
b6:34:03:db:29:81:1f:ef:5e:63:f2:e4:51:85:ef:
82:3a:d6:84:3b:e7:97:7b:c6:8d:ab:7b:dd:60:e4:
98:22:41:e3:b4:0c:59:fe:99:2f:85:e8:64:fb:6b:
96:c2:00:3b:c0:9d:0c:72:05:71:85:a0:78:d1:61:
70:5f:b0:df:65:a7:34:10:3f:c1:ad:23:32:20:90:
c7:08:78:f2:c3:57:a7:50:ef:ea:c2:b2:ee:6b:92:
91:87:ba:0a:89:31:bf:b0:bd:6d:ce:9e:89:98:2b:
35:e6:e6:95:54:0a:8a:f5:07:e1:cf:e7:69:e2:7e:
dc:09:93:46:ce:68:65:d5:53:90:df:39:10:02:5a:
6c:28:8e:a8:99:69:4f:5f:72:7b:a7:38:c9:54:4d:
4d:20:15:00:63:0a:57:cd:7f:85:8f:9e:5b:6a:e8:
53:d2:32:c4:13:fa:bd:1f:35:76:f2:8b:da:24:7e:
fd:a6:04:54:78:e5:af:24:40:66:d8:32:61:74:7b:
ed:73:ba:e4:a5:09:75:1b:49:55:cf:df:47:07:5e:
cf:a8:36:2c:61:56:05:0b:b2:b1:7b:5f:1d:4e:b6:
48:70:91:63:4c:47:d9:dc:66:75:d4:66:73:18:38:
63:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CC:7E:E6:28:72:A8:C8:82:F3:3F:75:F1:35:07:CB:B6:7B:60:16
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32302e302f32342d3234203d3e203538323931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:01:b6:d5:1f:6d:82:ed:d5:fe:fc:5f:2b:9b:4a:8d:a9:5d:
0f:f8:7b:8b:5b:70:5d:4e:f6:35:32:5b:a7:b5:7f:98:d8:8b:
0f:84:52:57:14:fe:65:7b:3b:02:9b:5a:eb:16:96:6c:0f:89:
01:37:72:bc:86:5a:e6:c7:24:14:a6:df:60:24:23:c4:b0:bc:
7d:7d:f7:f1:51:65:81:76:20:0d:65:a8:2f:6f:57:b3:71:4c:
5c:fe:84:8e:eb:2f:2b:c1:0a:8f:71:31:e5:90:06:1d:22:1b:
37:40:8a:82:ed:89:74:ae:87:dd:f0:71:53:c2:a1:a1:3d:9b:
9e:17:d8:df:60:52:53:a6:53:47:3f:7b:75:6a:fa:8d:d7:fb:
5a:79:6c:6a:70:f5:31:f9:a3:6d:0b:4f:cc:60:e2:79:4e:67:
1d:8b:f5:ca:36:e4:e0:be:16:ad:bf:03:1a:41:cc:26:e9:6a:
d9:a7:4f:87:0c:0a:c0:3d:bc:47:2e:0e:0d:3e:f3:14:8a:5c:
e5:33:e1:f5:99:e6:58:92:a7:78:d9:48:90:fd:51:aa:b7:f5:
8c:90:1e:04:65:66:c7:f9:2e:2d:3f:6d:3e:c2:92:15:91:15:
af:35:b5:40:2f:93:18:e0:81:81:1a:f3:42:47:63:8c:53:b2:
f6:4a:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:00:41 2026 by rpki-client