Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37332e302f32342d3234203d3e20323136323533.roa
File: 34352e3134372e37332e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: 61o/haTct3zUZpbnPJc8Sahi2aMw6ZAzGQRMkOHVs6Q=
Subject key identifier: 60:73:4D:B5:CB:58:16:63:F9:A5:EE:E7:C7:92:2A:C0:1B:17:1A:5A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 37D97738C194B8178B600401EFBE6F14AAF1B9DB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37332e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:20 +0000
ROA not before: Fri 16 Oct 2026 18:44:20 +0000
ROA not after: Fri 15 Oct 2027 18:49:20 +0000
asID: 216253
IP address blocks: 45.147.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d9:77:38:c1:94:b8:17:8b:60:04:01:ef:be:6f:14:aa:f1:b9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:20 2026 GMT
Not After : Oct 15 18:49:20 2027 GMT
Subject: CN=60734DB5CB581663F9A5EEE7C7922AC01B171A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:c5:65:bf:9b:25:4d:05:f3:7d:14:c2:31:
d4:b2:43:38:b3:35:a8:d0:14:6e:73:31:89:60:0a:
bf:e9:18:73:02:ff:7d:2c:d8:c2:29:c9:1a:20:ae:
ce:90:43:4e:3e:81:ca:1e:22:ee:5f:ba:a5:68:8b:
f8:2a:76:13:d3:27:d2:a0:4a:ff:74:73:1f:6c:48:
34:19:38:6c:ee:d9:49:28:94:a6:63:f4:9b:2f:62:
89:db:84:26:5b:f4:7f:66:8b:a1:61:a1:3e:0d:4d:
eb:8d:3e:e0:03:db:25:10:6a:07:05:aa:58:fe:b6:
13:f4:2e:19:6b:1c:46:0c:59:6a:c7:05:57:5e:1a:
b4:0f:36:d7:e3:6d:fb:f5:b3:ae:fc:65:30:dc:fe:
f3:f7:ed:fb:1c:a3:be:6e:5f:2a:93:d2:26:af:cc:
c9:02:83:0f:ee:11:10:e1:73:33:3e:5b:9c:b6:7c:
e3:2d:1f:45:00:12:c4:96:f9:f5:62:d8:9d:6f:36:
a3:9c:f2:75:29:c9:3d:dc:28:4b:06:94:b2:6a:cc:
60:ee:73:2b:d7:9b:0d:96:88:43:1e:9c:c8:dd:f8:
a4:db:e8:4a:15:f4:9b:d8:69:ea:ee:72:ec:98:8d:
58:6a:af:28:c7:21:87:20:61:f4:58:78:f1:b7:24:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:73:4D:B5:CB:58:16:63:F9:A5:EE:E7:C7:92:2A:C0:1B:17:1A:5A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37332e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.73.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:5d:a9:8f:2b:b2:ff:7d:e0:c5:39:e3:5d:7d:bd:21:fc:0b:
94:f7:0d:08:eb:d4:70:0d:65:5c:64:cb:a5:59:2b:a8:7c:ce:
19:78:9e:9f:72:f3:0d:a5:e2:a7:b8:40:67:25:39:49:ec:54:
82:bc:d4:92:4e:ae:70:2c:5b:a9:66:04:f0:4a:8f:68:f9:76:
97:f3:b4:34:62:af:96:dd:9d:6a:e5:be:ef:5a:9f:8a:cb:c2:
22:7d:96:22:60:63:20:85:41:30:fd:4f:b9:9f:e9:78:42:15:
21:71:cd:ca:a2:4d:56:c7:c1:3c:db:f2:32:3c:c8:f3:40:12:
3d:17:e7:29:87:48:7d:a9:a4:55:59:a5:b3:bf:c0:18:6f:52:
94:e5:f6:76:0e:70:96:0d:ee:8e:5b:d9:aa:5b:ee:97:a8:c7:
b4:c7:b4:7b:5f:81:c3:d9:6a:e4:43:82:7d:a9:83:35:b5:f0:
d9:40:df:51:b7:de:d9:06:04:37:bd:5e:4f:7d:d8:a4:50:71:
53:1a:18:f8:65:d7:69:57:d8:6c:ea:35:3f:7b:04:57:19:5a:
4a:52:88:42:53:29:15:a1:d2:77:9b:fc:48:6b:2a:81:45:66:
84:eb:66:17:f9:30:7f:da:59:ad:ea:63:ab:6a:9e:50:ea:e0:
78:42:db:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:32 2026 by rpki-client