Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32312e302f32342d3234203d3e20323134393631.roa
File: 34352e3134312e32312e302f32342d3234203d3e20323134393631.roa (raw, json)
Hash identifier: bBckXOb3aX3LOk9eu7Nuk2S0L3N5Bn6ghSqbqoLX9n8=
Subject key identifier: F4:1E:71:2C:9A:8B:7F:9D:55:33:5A:9E:4F:4E:E2:D7:56:3C:BB:D0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 16DEF3D1ED5FE185EA060A82D0558BAED7B0B8D3
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32312e302f32342d3234203d3e20323134393631.roa
Signing time: Tue 18 Aug 2026 12:31:16 +0000
ROA not before: Tue 18 Aug 2026 12:26:16 +0000
ROA not after: Tue 17 Aug 2027 12:31:16 +0000
asID: 214961
IP address blocks: 45.141.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:de:f3:d1:ed:5f:e1:85:ea:06:0a:82:d0:55:8b:ae:d7:b0:b8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Aug 18 12:26:16 2026 GMT
Not After : Aug 17 12:31:16 2027 GMT
Subject: CN=F41E712C9A8B7F9D55335A9E4F4EE2D7563CBBD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:72:01:dc:ca:b3:ef:fb:73:84:74:e2:9e:
11:cf:0d:d4:2a:33:06:3e:e1:62:6e:ac:c6:4b:fc:
7b:50:05:84:2e:74:55:63:bd:b9:56:0f:79:d1:50:
73:0b:56:bf:ab:e6:88:17:a0:22:42:08:05:64:f2:
b2:9d:76:b6:42:b7:b2:f0:04:0b:94:ce:b5:40:cb:
2c:6d:44:00:f6:53:c0:72:b8:5e:5d:75:56:9b:b7:
e3:fb:61:01:f3:f0:66:57:7a:1b:03:a9:35:5a:5b:
27:0b:a1:30:19:0d:9c:b9:83:70:22:89:35:d8:7e:
50:0f:63:c9:24:b5:5a:76:6b:9a:3b:fe:96:92:87:
e2:bb:69:23:bc:ab:2e:eb:c9:f1:cd:f9:57:31:13:
b7:92:05:23:63:4d:b6:c6:fd:5d:c6:b4:53:9e:e9:
35:4c:ef:b4:a0:f2:99:85:42:b5:0d:03:ab:88:bb:
5c:92:80:70:20:28:38:cc:de:ac:0a:65:51:ef:09:
be:b5:96:d8:5b:fb:2f:54:ac:4c:30:88:ec:7c:73:
2c:f2:b6:5e:b2:5f:1c:46:90:e0:21:13:c2:f9:ae:
18:b4:5b:81:ca:38:5c:cc:07:8b:f1:99:3b:94:cc:
55:d3:9b:2d:b9:a6:a5:a7:36:b6:de:a2:10:7a:b8:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1E:71:2C:9A:8B:7F:9D:55:33:5A:9E:4F:4E:E2:D7:56:3C:BB:D0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32312e302f32342d3234203d3e20323134393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.21.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f7:7c:f7:9f:8b:3c:51:39:80:d4:47:6b:b8:76:a9:72:42:
de:53:f5:5e:ed:3b:e6:78:01:64:21:b0:d8:47:bd:45:2d:44:
b0:70:b3:a9:5b:65:a7:22:55:63:e8:ce:b1:e2:ba:94:6c:5f:
9b:c2:44:c0:fc:ec:50:21:f6:52:cc:a1:d2:0d:b7:9d:93:08:
e0:03:d6:02:43:53:58:e1:c3:9b:4e:b6:6b:44:ca:3b:e4:31:
57:e9:f3:ee:bd:72:63:05:4d:25:7c:13:f8:ff:d0:20:aa:43:
35:52:dd:9d:e3:ac:e1:d9:74:be:b5:61:b2:40:37:8b:12:8b:
cc:c3:44:ed:15:34:e2:84:57:17:d6:ed:c9:7b:9f:e9:04:2b:
f1:bc:15:a1:f0:9a:39:ed:6f:7b:d8:6c:db:77:7e:8d:77:95:
ba:e9:09:ec:c8:e3:7a:02:7e:2b:3a:3a:d4:62:b2:d9:f6:c6:
39:b6:a2:d1:46:07:b6:26:7f:b3:6a:09:32:51:a4:73:99:1f:
92:61:9f:92:77:7d:60:a7:94:fb:b3:d8:38:07:3f:92:6a:d1:
74:f1:09:bb:3e:8b:1e:d3:26:6b:3c:a1:fe:93:57:d7:99:e6:
b8:43:f7:3b:82:70:51:a6:e5:73:6f:ac:4b:3d:96:2d:1c:09:
81:83:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:04:51 2026 by rpki-client