Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38322e302f32342d3234203d3e20313336373837.roa
File: 34352e3134332e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: okuHu/YiO/YpE4MC9H62IbfGTI6IMVaaOVBVlOiGrHc=
Subject key identifier: 74:53:4D:AE:B3:2E:AF:11:DF:1E:8A:5E:6E:B4:8B:BC:3C:60:A5:F1
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2E123A66F71C66C52361F0570BCDB6141E609200
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:27 +0000
ROA not before: Fri 23 Oct 2026 16:25:27 +0000
ROA not after: Fri 22 Oct 2027 16:30:27 +0000
asID: 136787
IP address blocks: 45.143.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:12:3a:66:f7:1c:66:c5:23:61:f0:57:0b:cd:b6:14:1e:60:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:27 2026 GMT
Not After : Oct 22 16:30:27 2027 GMT
Subject: CN=74534DAEB32EAF11DF1E8A5E6EB48BBC3C60A5F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c1:6e:a1:16:e3:94:99:a7:59:53:9c:18:42:
1e:66:58:5b:05:28:a8:84:5f:69:98:38:a2:84:ca:
80:a8:3a:f7:bd:e3:82:72:1b:c1:96:76:39:2d:18:
a6:d1:20:87:ef:79:3c:23:94:fb:a5:6d:e7:d1:73:
e6:1c:d2:f8:1b:ae:09:cb:22:97:27:02:79:4e:10:
2d:13:db:88:c1:57:1e:0a:c0:a8:75:55:68:10:0a:
47:f0:43:4e:1d:72:01:23:17:7e:3d:e0:9a:88:da:
27:58:35:3a:e1:28:bf:df:6d:51:1b:f3:d3:62:84:
db:93:65:38:02:dc:9f:76:e7:d3:7e:38:63:9f:bf:
4a:b0:56:8e:39:f2:56:01:02:e2:9d:1b:69:5c:7b:
44:84:3b:17:15:a9:4c:21:c7:87:88:a2:73:6d:a5:
4b:b9:e5:a1:34:f4:8b:3a:4b:f0:87:cb:a2:94:6f:
67:d4:b1:50:f0:fe:e1:dc:fb:54:bb:1c:45:81:72:
4c:3e:19:ac:3a:5d:7e:43:22:59:40:cd:8e:6a:db:
12:d4:b0:3a:cf:fc:0a:c4:69:1c:85:65:9f:38:1b:
0d:23:43:39:07:e6:e5:7f:5c:98:64:6a:a9:60:9a:
72:0c:6a:e6:53:9a:92:99:c0:d0:f5:72:6e:e4:dd:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:53:4D:AE:B3:2E:AF:11:DF:1E:8A:5E:6E:B4:8B:BC:3C:60:A5:F1
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.82.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f3:99:49:47:29:2f:7e:58:11:b8:47:7f:f8:5f:f4:46:fc:
26:7b:99:35:67:00:6f:a5:fe:28:4d:5c:53:8f:35:ea:5c:04:
e9:0b:b3:82:e9:8d:8f:94:73:ba:11:41:ad:24:e0:d7:87:01:
4c:a7:10:ab:05:c4:d7:b1:4c:24:c5:9a:51:bd:8e:35:64:05:
05:c0:76:ad:e3:33:49:db:6a:78:87:ff:81:e7:57:fe:0c:35:
5e:fe:19:6f:63:23:22:04:4b:63:10:6e:73:b0:3c:fb:63:0b:
74:91:96:e6:12:92:3c:25:c0:29:76:71:7b:c2:e4:e7:32:33:
59:c3:4b:4e:42:bd:96:52:61:b2:7e:76:95:6f:ce:86:82:40:
8c:63:e8:ba:3a:04:2f:6d:0a:c8:0f:c6:68:05:e4:e1:bf:91:
92:24:b0:4f:12:e8:14:d9:b7:81:09:b0:22:fc:c8:b3:66:d2:
6b:f8:24:59:9f:90:3f:d3:a6:ca:19:4e:24:5f:60:b3:77:8a:
0e:d9:41:4b:57:b2:d6:2f:e3:a8:00:0b:e8:de:6c:2f:39:82:
3b:6b:0e:3b:f4:2d:80:50:b2:de:0f:6c:ab:76:d2:b4:8c:21:
b2:b6:0b:5e:77:f1:5e:b3:f1:be:57:29:e6:ae:13:46:6c:4d:
ea:3a:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:02:42 2026 by rpki-client