Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38332e302f32342d3234203d3e203437353833.roa
File: 34352e3134332e38332e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: u03/IY1kSHVRm+bKtwL/a6615Ds7VkXB+tHooCxqwHU=
Subject key identifier: B6:D9:C8:97:00:27:24:67:CD:53:58:C8:78:77:DA:AE:1E:E1:72:E1
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2C7E32D1D751F721B56377B53C9C3286D417154B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38332e302f32342d3234203d3e203437353833.roa
Signing time: Fri 23 Oct 2026 16:30:17 +0000
ROA not before: Fri 23 Oct 2026 16:25:17 +0000
ROA not after: Fri 22 Oct 2027 16:30:17 +0000
asID: 47583
IP address blocks: 45.143.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 07:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7e:32:d1:d7:51:f7:21:b5:63:77:b5:3c:9c:32:86:d4:17:15:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:17 2026 GMT
Not After : Oct 22 16:30:17 2027 GMT
Subject: CN=B6D9C89700272467CD5358C87877DAAE1EE172E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:01:7d:d5:fe:c5:1d:fc:33:8e:2e:b7:f0:19:
a7:ee:88:6b:d2:73:af:38:4a:78:56:a5:73:02:7c:
32:69:4e:42:52:9a:bb:f7:be:03:f7:29:48:28:46:
7c:67:35:d0:46:d4:1a:e7:38:0f:3b:b0:b5:aa:9b:
23:33:52:d8:f3:7a:ed:63:f9:36:a8:cb:08:5b:71:
cf:6e:32:52:1e:07:fb:05:d2:86:c7:23:90:f7:3c:
24:82:f4:cc:3a:36:aa:ed:f0:88:b6:3c:09:94:53:
19:8b:4d:15:60:d2:b8:db:2d:cb:8d:8c:45:f6:b1:
8c:69:a4:ba:8e:6e:9e:5b:c6:de:02:0d:43:65:50:
21:3a:59:fa:8e:8d:38:83:e9:45:07:b8:3c:e9:40:
ec:62:f1:b3:da:d6:0e:91:08:ea:07:65:1f:3e:39:
bc:85:05:65:08:09:61:75:ea:7a:44:4b:66:97:4f:
bc:ab:ff:87:8d:a6:51:b1:f1:4c:88:d4:2f:ee:37:
fc:96:0c:43:cb:d2:ae:49:be:d9:29:7c:90:7a:39:
12:6a:79:a7:36:e2:ea:88:eb:7b:78:27:e3:42:c1:
0c:4e:7c:df:35:03:36:ec:d7:f9:3f:ee:72:09:01:
94:2e:fb:29:8d:4f:d1:81:e9:00:a5:6c:a0:3a:79:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D9:C8:97:00:27:24:67:CD:53:58:C8:78:77:DA:AE:1E:E1:72:E1
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38332e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.83.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b1:58:03:3e:c8:88:e9:35:7d:c3:eb:0f:d5:c5:74:5d:b3:
4e:a9:68:e7:08:ca:74:fa:56:6d:ff:f7:9c:04:3a:da:2c:eb:
2b:cb:17:69:d3:52:fb:16:29:57:16:48:ea:50:b9:78:8e:3d:
35:2b:23:fb:65:d7:bd:01:c2:ba:03:f1:a0:e5:52:66:61:3a:
f5:ba:af:1a:ed:01:62:95:4e:1e:cc:38:34:a8:83:c1:c5:b4:
6e:e3:91:e8:32:7c:ae:30:e8:85:df:76:54:69:69:46:a4:be:
98:f2:a1:5f:79:fb:56:45:07:ca:16:9d:10:c3:01:39:c9:cf:
1a:9c:a8:94:a4:f9:65:bc:8e:66:d0:58:1e:88:2c:77:4b:94:
33:aa:ae:97:c2:50:4d:cd:35:50:ce:a5:8e:66:34:1b:a8:14:
79:27:4d:8d:67:82:b1:31:62:cf:fc:8d:f5:2d:8f:20:1d:8f:
41:d5:fa:f3:17:41:68:8a:a0:f4:9b:62:b8:d7:ba:3d:f7:dd:
6c:4e:bf:aa:07:26:69:4a:24:b2:e2:1e:63:ba:50:41:40:9b:
66:18:45:89:41:00:9c:5c:0b:d4:38:9c:7d:f4:86:d3:85:e4:
0b:76:78:22:60:96:1e:70:cf:00:a3:b3:f7:c3:c5:b6:ce:a7:
bc:10:79:3c
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIULH4y0ddR9yG1Y3e1PJwyhtQXFUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MTdaFw0yNzEwMjIxNjMwMTdaMDMxMTAvBgNV
BAMTKEI2RDlDODk3MDAyNzI0NjdDRDUzNThDODc4NzdEQUFFMUVFMTcyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZAX3V/sUd/DOOLrfwGafuiGvS
c684SnhWpXMCfDJpTkJSmrv3vgP3KUgoRnxnNdBG1BrnOA87sLWqmyMzUtjzeu1j
+Taoywhbcc9uMlIeB/sF0obHI5D3PCSC9Mw6Nqrt8Ii2PAmUUxmLTRVg0rjbLcuN
jEX2sYxppLqObp5bxt4CDUNlUCE6WfqOjTiD6UUHuDzpQOxi8bPa1g6RCOoHZR8+
ObyFBWUICWF16npES2aXT7yr/4eNplGx8UyI1C/uN/yWDEPL0q5JvtkpfJB6ORJq
eac24uqI63t4J+NCwQxOfN81Azbs1/k/7nIJAZQu+ymNT9GB6QClbKA6eYP/AgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUttnIlwAnJGfNU1jIeHfarh7hcuEwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0MzMy
ZTM4MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQALY9TMA0GCSqGSIb3DQEBCwUAA4IBAQCKsVgDPsiI6TV9w+sP1cV0XbNOqWjn
CMp0+lZt//ecBDraLOsryxdp01L7FilXFkjqULl4jj01KyP7Zde9AcK6A/Gg5VJm
YTr1uq8a7QFilU4ezDg0qIPBxbRu45HoMnyuMOiF33ZUaWlGpL6Y8qFfeftWRQfK
Fp0QwwE5yc8anKiUpPllvI5m0FgeiCx3S5Qzqq6XwlBNzTVQzqWOZjQbqBR5J02N
Z4KxMWLP/I31LY8gHY9B1frzF0FoiqD0m2K417o9991sTr+qByZpSiSy4h5julBB
QJtmGEWJQQCcXAvUOJx99IbTheQLdngiYJYecM8Ao7P3w8W2zqe8EHk8
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:04 2026 by rpki-client