Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37352e302f32342d3234203d3e20323136323533.roa
File: 34352e3134372e37352e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: slHuGmh79j1hsDKE564t8RxWpc4nVeu5v8AZTBFTLkk=
Subject key identifier: 8D:4C:B3:DE:A7:11:1C:5A:33:CB:BB:4E:64:48:EF:20:50:A0:6E:E5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 226361CBB40B4159E7C9DFF8B21483960CAD9EE7
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37352e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:22 +0000
ROA not before: Fri 16 Oct 2026 18:44:22 +0000
ROA not after: Fri 15 Oct 2027 18:49:22 +0000
asID: 216253
IP address blocks: 45.147.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:63:61:cb:b4:0b:41:59:e7:c9:df:f8:b2:14:83:96:0c:ad:9e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:22 2026 GMT
Not After : Oct 15 18:49:22 2027 GMT
Subject: CN=8D4CB3DEA7111C5A33CBBB4E6448EF2050A06EE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:67:d8:5b:a6:d5:36:38:51:59:1e:a3:3d:
9e:16:ee:5a:ef:f0:0a:99:6c:06:2b:37:c3:c0:2e:
1b:cd:fc:cf:b8:f5:f8:a8:6f:7a:c9:1f:38:be:79:
2e:93:bb:a0:11:ac:3a:15:66:ab:42:10:f1:de:c3:
a8:17:fa:50:7b:0e:27:97:1e:82:f7:8b:6a:19:0c:
40:2f:ee:c5:a2:8b:f2:c8:b1:3a:f6:ee:9a:79:2c:
5a:08:56:77:b0:cb:55:f7:fa:37:a4:c3:6c:30:7c:
6a:71:e3:51:ac:7d:ed:60:35:74:2d:c1:a0:3a:67:
c6:f5:07:c2:4d:ca:ed:0c:5c:5f:2b:4d:28:9b:8f:
7c:9c:13:a5:13:c2:ef:cc:9a:6b:7d:f5:d5:5e:dd:
45:66:6a:21:b7:a4:2b:00:8b:7e:85:ed:83:a1:23:
63:14:96:95:7b:b2:0f:fb:56:d1:97:6d:c7:54:6f:
75:79:00:6a:69:f0:f8:62:1a:cc:df:f4:e8:62:aa:
71:18:96:fe:d8:56:cf:a0:8a:4b:d8:eb:90:21:da:
54:2d:25:7c:25:ca:24:57:f7:fa:85:2f:10:3e:10:
29:e4:8a:ea:ac:fd:9a:11:ce:c5:33:8a:2f:57:60:
8f:9e:82:98:fc:f6:29:03:33:12:d3:4d:6d:35:ea:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4C:B3:DE:A7:11:1C:5A:33:CB:BB:4E:64:48:EF:20:50:A0:6E:E5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37352e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:35:88:77:b4:db:35:c2:09:fb:6c:4f:42:aa:2e:c7:0c:2c:
3c:61:05:57:bb:16:7a:8e:5e:34:e7:e7:b6:88:17:8d:65:1f:
a3:f7:32:68:df:17:43:ca:df:9e:cf:58:6b:8c:7a:21:7e:ad:
0d:c1:62:b8:36:3f:4d:de:e8:a5:2a:e6:fb:b5:1c:6f:24:14:
b7:75:fa:54:43:f6:da:bb:ec:b1:d9:e8:fc:c4:fd:f8:51:6f:
97:e9:5c:62:c0:e5:21:82:8b:e8:4c:c9:69:23:ee:13:9b:7f:
c8:40:34:a4:27:54:25:95:65:9f:ed:b8:ed:4e:d6:b8:a7:89:
de:69:e2:65:e0:f4:3d:fb:3c:9b:48:0f:98:f6:cc:f9:90:b7:
04:7d:d9:61:f3:0a:e6:d2:c1:ee:37:ca:56:52:e6:95:fb:ec:
4e:c3:ea:d2:16:1e:3f:5e:99:b3:0e:0e:c1:91:fd:36:46:db:
6e:87:1f:d5:a1:63:95:f1:ab:de:0f:94:a0:06:49:71:6d:84:
46:9d:31:f7:03:ff:7b:8c:db:c1:d4:6b:fc:44:21:70:7a:da:
dc:a0:59:c7:4d:57:fd:22:78:46:7a:c0:5d:8d:1a:88:4c:1e:
8d:1b:d4:a9:a4:77:d9:48:c3:0c:de:bf:4a:91:89:2c:29:e1:
6b:aa:6f:0a
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUImNhy7QLQVnnyd/4shSDlgytnucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMTYxODQ0MjJaFw0yNzEwMTUxODQ5MjJaMDMxMTAvBgNV
BAMTKDhENENCM0RFQTcxMTFDNUEzM0NCQkI0RTY0NDhFRjIwNTBBMDZFRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZGfYW6bVNjhRWR6jPZ4W7lrv
8AqZbAYrN8PALhvN/M+49fiob3rJHzi+eS6Tu6ARrDoVZqtCEPHew6gX+lB7DieX
HoL3i2oZDEAv7sWii/LIsTr27pp5LFoIVnewy1X3+jekw2wwfGpx41Gsfe1gNXQt
waA6Z8b1B8JNyu0MXF8rTSibj3ycE6UTwu/Mmmt99dVe3UVmaiG3pCsAi36F7YOh
I2MUlpV7sg/7VtGXbcdUb3V5AGpp8PhiGszf9OhiqnEYlv7YVs+gikvY65Ah2lQt
JXwlyiRX9/qFLxA+ECnkiuqs/ZoRzsUzii9XYI+egpj89ikDMxLTTW016hTlAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUjUyz3qcRHFozy7tOZEjvIFCgbuUwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzcy
ZTM3MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzYzMjM1MzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAtk0swDQYJKoZIhvcNAQELBQADggEBAAo1iHe02zXCCftsT0KqLscMLDxh
BVe7FnqOXjTn57aIF41lH6P3MmjfF0PK357PWGuMeiF+rQ3BYrg2P03e6KUq5vu1
HG8kFLd1+lRD9tq77LHZ6PzE/fhRb5fpXGLA5SGCi+hMyWkj7hObf8hANKQnVCWV
ZZ/tuO1O1rinid5p4mXg9D37PJtID5j2zPmQtwR92WHzCubSwe43ylZS5pX77E7D
6tIWHj9embMODsGR/TZG226HH9WhY5Xxq94PlKAGSXFthEadMfcD/3uM28HUa/xE
IXB62tygWcdNV/0ieEZ6wF2NGohMHo0b1Kmkd9lIwwzev0qRiSwp4Wuqbwo=
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:28 2026 by rpki-client