Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34342e302f32322d3234203d3e20323034313730.roa
File: 34352e3135352e34342e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 1pPNbaKh/+OP4gieEog/3JvabOBl27IDjl6HDP0XLq4=
Subject key identifier: E2:57:D4:46:D0:3D:C9:AA:C4:89:24:38:8C:D2:C6:B6:72:2A:BE:58
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1967AAB9E47AB8C0A61C1FE0BFE20033C0EE4D2E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34342e302f32322d3234203d3e20323034313730.roa
Signing time: Fri 23 Oct 2026 16:30:33 +0000
ROA not before: Fri 23 Oct 2026 16:25:33 +0000
ROA not after: Fri 22 Oct 2027 16:30:33 +0000
asID: 204170
IP address blocks: 45.155.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:67:aa:b9:e4:7a:b8:c0:a6:1c:1f:e0:bf:e2:00:33:c0:ee:4d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:33 2026 GMT
Not After : Oct 22 16:30:33 2027 GMT
Subject: CN=E257D446D03DC9AAC48924388CD2C6B6722ABE58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:f1:c5:e3:62:fb:b3:08:61:77:33:ed:59:
7f:f9:f0:26:c6:1a:18:d8:43:90:0c:19:07:07:67:
06:ef:df:21:fa:07:c1:6d:f9:47:97:f6:7a:65:6f:
3e:6b:9a:1a:55:ff:ef:ee:b2:14:ae:a9:cd:72:21:
ec:30:4e:db:7b:a4:51:3c:b0:91:22:a9:35:40:9f:
99:4a:d2:6b:bd:65:4a:93:61:c9:e8:7b:d7:44:76:
40:bf:77:ab:41:8c:df:0b:eb:62:a0:f2:5c:1d:f9:
50:a1:76:78:c1:ad:1a:4d:6d:43:e8:36:a2:41:f5:
ec:11:0b:cf:ac:01:8e:63:a5:80:03:bd:53:02:a4:
67:39:ac:3a:74:26:d3:13:d2:10:fb:90:d3:85:71:
aa:23:b0:90:20:28:63:3a:0f:77:a4:69:02:f6:2e:
bf:a8:c7:c9:b5:16:c1:6f:6f:28:03:16:43:31:0e:
f8:8b:39:7e:63:ea:6a:a8:be:91:b6:c3:9f:b7:4e:
7b:f5:86:03:cc:84:8e:e1:d6:ab:57:1d:a9:3a:b3:
37:b2:d5:21:18:ce:e6:85:de:ef:52:63:91:a3:dd:
ee:bd:fd:6c:57:e6:8c:c7:9c:73:03:af:a1:3b:a3:
f9:34:c5:ab:b3:13:b6:21:c3:07:a4:9a:b2:86:9d:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:D4:46:D0:3D:C9:AA:C4:89:24:38:8C:D2:C6:B6:72:2A:BE:58
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34342e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:73:f1:ff:56:c6:af:6f:af:9a:14:98:f4:7f:6b:5f:28:2f:
b7:f1:a1:63:ba:d1:3f:4e:61:b2:18:06:8f:f8:72:09:56:71:
42:c8:9a:c4:cf:e6:96:ce:ec:df:6b:9b:65:18:f0:03:0e:dc:
90:7c:4a:47:36:51:df:2e:4a:78:8b:3a:a0:d7:6d:4f:b0:df:
43:67:be:dd:76:84:80:b8:f5:2e:0b:9e:38:15:21:d8:dd:4b:
91:b1:62:02:47:48:22:08:11:40:8e:9b:32:c7:b2:ee:47:b1:
41:e0:78:ef:9f:4f:23:b0:9e:e4:b0:78:ad:6f:a7:7e:81:23:
5d:e4:bc:a2:21:bc:f2:07:a4:b4:a8:04:f9:a3:d7:e1:33:47:
35:56:4f:6b:03:6b:eb:d4:3f:49:55:30:7d:f3:bc:d9:9c:7a:
71:20:e6:49:fc:c1:c3:0b:63:3b:5b:c6:f3:ad:9d:79:9b:9e:
a3:3d:de:b9:10:60:60:d9:58:18:d2:9a:62:ec:07:ab:64:3b:
65:f5:9e:fa:af:c8:4b:89:0c:96:ab:6c:24:fe:de:41:78:66:
7a:6e:94:0f:5f:68:88:44:e4:15:dd:d1:87:2e:cc:ae:eb:99:
44:c3:10:e2:11:fa:07:a2:49:04:3b:7f:61:a2:99:9c:4d:2d:
38:e4:92:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:50:24 2026 by rpki-client