Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37342e302f32342d3234203d3e20323136323533.roa
File: 34352e3134372e37342e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: X+kBErJMjIJRYlIaSbVRbUkd6/wy83J7NBTu7rQ/5jw=
Subject key identifier: D9:2F:7C:CD:A2:E5:0A:A9:06:EF:E0:CB:A6:24:42:6D:E3:38:3D:12
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1E43AB7A5BA20D38C114573B18C77AAC1DBEA345
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37342e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:21 +0000
ROA not before: Fri 16 Oct 2026 18:44:21 +0000
ROA not after: Fri 15 Oct 2027 18:49:21 +0000
asID: 216253
IP address blocks: 45.147.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:43:ab:7a:5b:a2:0d:38:c1:14:57:3b:18:c7:7a:ac:1d:be:a3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:21 2026 GMT
Not After : Oct 15 18:49:21 2027 GMT
Subject: CN=D92F7CCDA2E50AA906EFE0CBA624426DE3383D12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:e1:b6:a4:a9:23:c3:94:c3:05:3e:d2:be:
0e:d4:0e:9b:cd:e0:88:17:06:d9:02:94:86:e8:ff:
35:1e:b5:61:4b:a0:31:53:7b:24:e7:2d:2d:ff:40:
6f:f8:07:5f:33:ce:b0:2d:5f:ab:c3:8a:bc:46:6f:
a2:95:dc:eb:cb:89:4e:05:2c:fa:91:cb:ec:f7:b1:
c8:73:db:69:29:42:95:08:e6:bd:2a:77:6e:6a:55:
2a:4e:0f:24:e5:c7:69:e8:87:b4:99:dd:7e:52:7d:
5c:58:63:08:88:f3:f7:82:18:7d:b5:28:c5:01:c4:
3e:7c:08:a3:3a:0f:6a:e5:e7:34:ef:3e:a6:44:89:
01:3b:29:f9:a8:b4:f4:0e:0d:71:ed:85:12:d5:dc:
6c:95:65:7d:c9:8c:c3:a9:7a:42:b8:0a:16:fa:69:
c5:5d:1d:0d:59:cd:55:0f:ec:5c:48:b7:58:e7:c0:
45:94:24:a5:f8:4d:f5:15:32:69:08:cb:1c:36:a2:
b4:98:2b:dc:81:8e:a0:72:6a:0f:eb:b4:7c:3d:8c:
2d:ac:62:92:67:fb:c2:42:f1:94:e4:34:5a:19:57:
49:1c:40:d6:38:20:ac:e7:b2:79:31:6b:53:41:90:
91:e1:48:d8:f4:39:35:3b:42:a3:d1:ee:bc:b9:1c:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2F:7C:CD:A2:E5:0A:A9:06:EF:E0:CB:A6:24:42:6D:E3:38:3D:12
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37342e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.74.0/24
Signature Algorithm: sha256WithRSAEncryption
06:62:68:63:92:9a:dc:fa:98:33:62:0f:5f:60:ed:27:6e:d8:
db:9d:ae:60:d5:47:4e:d1:cc:19:51:b5:47:c7:df:b9:15:71:
f8:9e:90:44:0d:d9:e1:7b:bb:02:fc:67:11:59:f7:85:9b:2b:
ef:d8:f2:e2:ea:c0:ff:90:46:ca:fe:98:38:12:8f:22:6d:07:
ec:32:9c:8c:33:a4:e1:39:85:3c:88:12:47:0b:36:3c:9e:be:
2b:eb:51:72:bd:69:cb:f1:90:7e:9c:b6:8d:05:f6:cc:ee:ba:
c8:f0:98:36:ed:62:bd:2a:f8:e0:19:37:5e:b8:7c:6d:d8:7e:
52:f5:24:48:fd:c6:ca:f5:3a:59:c5:00:c1:02:5d:27:0e:b1:
55:fd:47:6f:eb:65:8b:b3:f9:19:c7:6d:d8:1a:5a:bd:92:db:
23:7b:31:63:d5:5b:cc:91:9c:b7:6f:39:2b:4d:7c:5b:a4:62:
8c:f4:e4:b9:a9:af:72:a9:12:bf:75:3c:24:bb:85:ee:f7:a5:
2e:23:19:32:e2:99:a1:a5:e6:b8:32:4b:27:ef:29:9d:c5:e6:
5a:2e:26:61:02:e5:f3:f0:47:d2:6c:a9:2b:6f:92:68:f2:8e:
b8:ca:33:dc:ae:b0:dd:e2:4b:2f:4c:27:6b:86:7c:65:2e:c6:
fe:ad:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:28 2026 by rpki-client