Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37322e302f32342d3234203d3e20323136323533.roa
File: 34352e3134372e37322e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: p00MY1Sl2616Rvd24x7IHqAmI/qv0M68M561F12QlJs=
Subject key identifier: 2D:9F:98:24:71:FE:47:9B:0E:79:6E:9A:03:FC:4A:0C:16:75:76:4E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0397DBCC01FCA40C38D3BBE2941D6C425B3F7104
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37322e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:19 +0000
ROA not before: Fri 16 Oct 2026 18:44:19 +0000
ROA not after: Fri 15 Oct 2027 18:49:19 +0000
asID: 216253
IP address blocks: 45.147.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:97:db:cc:01:fc:a4:0c:38:d3:bb:e2:94:1d:6c:42:5b:3f:71:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:19 2026 GMT
Not After : Oct 15 18:49:19 2027 GMT
Subject: CN=2D9F982471FE479B0E796E9A03FC4A0C1675764E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:39:14:3f:ed:05:1b:4c:a7:fa:55:46:3d:
d8:77:13:97:29:8a:e3:97:14:8e:7d:fd:33:a3:c5:
5d:c4:0f:d6:f2:bf:c9:ba:5e:ba:4e:e3:4e:61:c9:
a3:28:80:79:96:b9:9f:ea:0b:cf:ed:3d:b3:73:4f:
cd:c2:06:a8:16:3a:a8:19:36:d6:77:cf:ff:1b:7c:
b1:1c:ea:d6:c1:d7:4c:35:85:5c:d9:69:74:87:43:
63:9c:8e:2d:db:05:5a:32:0b:7b:28:93:6c:5c:53:
f6:91:fc:08:ad:5b:71:65:69:6f:75:8f:55:6f:46:
ca:fb:c0:2c:6a:68:53:82:10:c6:80:7c:ca:d4:c4:
b2:f2:ee:7c:1d:ff:81:87:49:29:9f:71:64:2d:dc:
a2:92:c1:13:ab:bf:2d:13:ae:60:54:ee:be:c0:c1:
e3:60:05:72:dc:b4:a2:f5:8f:0d:f5:47:36:d3:12:
1e:ed:3b:95:66:91:60:93:44:dd:ca:58:8e:83:6b:
1b:04:e0:22:5e:aa:57:51:e5:eb:fa:ca:fe:48:fc:
d3:a8:40:22:60:34:7f:3f:c8:e0:36:5d:0d:a3:47:
62:38:04:38:8e:c7:a3:70:39:cd:1a:98:84:29:5e:
83:07:6f:59:70:25:ea:29:be:44:55:df:00:cc:12:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9F:98:24:71:FE:47:9B:0E:79:6E:9A:03:FC:4A:0C:16:75:76:4E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37322e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.72.0/24
Signature Algorithm: sha256WithRSAEncryption
55:70:9c:b0:a5:d6:bc:2a:66:97:31:d8:f1:73:a9:08:af:1d:
4e:5c:c0:1c:25:ee:ea:ef:f6:de:d2:76:0a:83:38:a9:59:ff:
34:8a:a0:d4:4d:be:19:e2:45:92:5a:2b:74:b0:77:bd:63:41:
01:65:71:d5:2a:66:ae:97:d8:7a:4d:88:fc:9f:e5:0d:7d:36:
99:a3:56:6e:5d:e2:7b:0a:bc:70:8f:39:45:c4:a2:ff:3d:ae:
b0:86:fb:22:c4:f3:f3:87:ba:56:d6:df:ad:bb:57:58:64:65:
03:1c:bb:7b:24:a1:e0:bd:6c:03:32:ce:be:1a:2e:fc:16:a7:
23:9b:8d:42:5f:ba:9c:f3:09:81:d5:7f:35:12:16:b7:49:5e:
dc:54:80:fc:58:88:ca:48:4a:76:ee:88:df:8a:2f:81:2d:dd:
9a:f2:d8:6a:af:18:93:ee:84:77:ec:df:3e:85:b7:8c:a4:37:
2a:1e:dc:a3:ea:3d:ec:56:7b:3b:45:d9:9f:20:41:3a:4f:db:
03:8e:63:6b:96:a5:50:f2:0d:2d:00:35:41:fb:33:17:ec:09:
46:66:df:75:92:81:61:7b:68:2a:7b:09:c1:81:69:66:40:5d:
72:e1:6a:74:c2:0a:64:cc:12:72:70:cf:ba:24:ca:76:ab:57:
01:25:86:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:38 2026 by rpki-client