Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa
File: 34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: 6s796mJ3pG+Wc9EZSdMb1pLtttJPn4x/8fmefg50LYQ=
Subject key identifier: 31:1B:68:8D:C4:A0:64:CD:37:24:DA:2A:78:6F:71:1F:01:E7:05:7C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3C54B38CD2F236A4AD9CE9F70E4AEA399799A897
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa
Signing time: Fri 23 Oct 2026 16:30:13 +0000
ROA not before: Fri 23 Oct 2026 16:25:13 +0000
ROA not after: Fri 22 Oct 2027 16:30:13 +0000
asID: 201341
IP address blocks: 45.141.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:54:b3:8c:d2:f2:36:a4:ad:9c:e9:f7:0e:4a:ea:39:97:99:a8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:13 2026 GMT
Not After : Oct 22 16:30:13 2027 GMT
Subject: CN=311B688DC4A064CD3724DA2A786F711F01E7057C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:1a:d4:4e:43:5f:f7:94:97:dd:80:3f:19:
c1:48:5a:f9:d0:45:51:51:90:bf:6e:4c:a6:f2:a8:
64:ec:48:f5:d5:9b:29:3f:29:6b:dd:3c:71:69:6e:
16:6f:dc:bf:55:8f:ff:26:0b:9c:9a:ad:ae:54:a3:
8c:a6:56:07:6d:9a:48:d4:77:23:e4:1b:8c:48:df:
e2:99:20:bd:51:e0:54:7c:df:a3:85:4c:27:e7:74:
f2:71:30:da:64:21:4f:9c:0d:c7:1c:53:d9:85:71:
ea:78:44:b4:f2:b1:91:3c:cb:d7:d3:95:36:aa:32:
5c:ee:81:b1:60:eb:92:29:96:ee:ab:19:9a:6d:11:
f0:33:6c:d2:42:87:d1:82:49:6d:6a:ed:47:b6:ee:
0d:73:49:60:dd:80:ad:b5:24:a5:c4:43:d6:53:f0:
a7:41:29:06:0f:d3:df:00:84:a6:66:d5:73:78:79:
80:63:60:8e:06:6c:e9:2b:d4:33:20:46:bc:80:bb:
c6:b2:6b:3b:8f:05:7f:42:b0:f8:54:76:c4:6e:a0:
49:cd:c0:49:02:37:2f:1b:2e:78:3b:19:d8:0c:d2:
74:e7:3a:03:cc:68:05:93:6e:03:b8:e1:59:fe:4d:
60:7c:ed:af:39:37:32:2e:8d:91:41:90:18:e9:88:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1B:68:8D:C4:A0:64:CD:37:24:DA:2A:78:6F:71:1F:01:E7:05:7C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.220.0/22
Signature Algorithm: sha256WithRSAEncryption
62:f3:4a:d4:56:da:49:94:d9:29:36:25:a1:f6:dc:29:53:c9:
94:aa:4f:f0:4c:d3:83:e3:c9:04:3e:d3:89:44:c9:a4:fb:a9:
65:ce:84:d9:1e:4a:db:e9:18:c0:f9:3d:33:2b:a2:5e:5d:d2:
a7:06:d3:23:1a:4a:ec:23:a8:44:41:44:fb:98:65:e7:7b:29:
8d:9b:e6:2c:90:95:e8:69:f0:f2:10:c7:34:9c:a7:e5:0d:da:
32:71:33:18:4e:97:a8:5c:87:79:4b:e6:42:fd:60:03:41:44:
fc:70:6d:20:0c:6f:10:83:58:91:4a:39:e4:a2:77:84:3d:97:
0d:52:b6:56:85:cd:91:a2:c0:b8:e2:1e:28:36:68:4d:7c:a5:
02:70:f6:73:b3:0f:3c:f7:de:2a:1f:48:69:47:f0:a3:63:73:
80:c1:e1:36:df:ef:26:49:96:1f:9f:45:06:48:6f:ba:20:2e:
4c:08:1a:ad:cd:86:a6:92:20:6b:cd:f2:eb:da:34:40:ec:70:
77:9f:1c:3a:62:cb:58:34:30:11:76:2a:df:65:cb:86:1b:cb:
1c:72:d5:74:ec:ae:da:2f:73:63:8e:da:b0:3c:95:ac:d5:52:
4b:58:86:25:84:c7:d2:77:7b:8d:a5:88:30:b1:83:ed:3b:93:
d4:29:73:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 24 03:13:34 2026 by rpki-client