Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133362e302f32342d3234203d3e20313336373837.roa
File: 34352e36362e3133362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: vf47iI8ohQNpStjXfhkkNWyRsd3u9tsKksLESjgKTgk=
Subject key identifier: A2:B4:87:AE:5E:08:65:D3:29:C8:96:5F:7E:79:FC:AA:95:E9:4A:F7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1EBA30FA69BE5A834D558EDF3DE061FE40D90423
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:12 +0000
ROA not before: Fri 23 Oct 2026 16:25:12 +0000
ROA not after: Fri 22 Oct 2027 16:30:12 +0000
asID: 136787
IP address blocks: 45.66.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ba:30:fa:69:be:5a:83:4d:55:8e:df:3d:e0:61:fe:40:d9:04:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:12 2026 GMT
Not After : Oct 22 16:30:12 2027 GMT
Subject: CN=A2B487AE5E0865D329C8965F7E79FCAA95E94AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:87:8b:d3:bc:55:a3:20:6d:65:35:11:ff:
3c:a5:e3:ed:ab:f9:fc:45:9f:87:bb:8e:ea:20:a1:
00:27:93:50:93:16:7f:ac:fc:3a:e6:8e:98:39:aa:
78:6f:af:2d:22:e9:38:b5:51:9b:b5:de:33:52:96:
84:4d:e1:1e:2a:51:e2:e4:7a:23:68:ec:ed:d1:b4:
36:52:c8:10:1e:e8:5b:17:a4:08:ad:29:fe:0e:58:
10:cd:d2:dd:a0:0a:3d:da:cc:ca:c7:15:33:30:92:
dd:89:dd:aa:0e:42:8f:df:14:17:48:a5:8f:69:72:
89:d0:c4:88:23:85:dc:07:76:25:74:1a:aa:d5:b8:
44:c0:a6:79:48:83:18:be:5c:e3:16:d6:e0:70:bf:
ec:bc:9f:a2:6e:ff:9f:77:1e:38:6f:7e:cf:2e:43:
d1:8c:dc:f0:bb:ef:ff:5a:e9:2a:1c:0b:44:43:8d:
99:ea:88:1c:b0:87:c3:59:8b:f2:1b:a9:12:11:a1:
97:d1:01:8a:0c:d1:1c:fa:fb:f7:29:81:03:d4:8b:
63:84:2e:37:45:07:fe:75:1a:78:e2:d0:e0:ab:1a:
42:eb:fd:df:18:8a:a6:ef:59:10:4d:66:00:85:03:
40:44:a9:5a:8f:cf:2a:f6:81:ac:b1:b5:46:12:c1:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B4:87:AE:5E:08:65:D3:29:C8:96:5F:7E:79:FC:AA:95:E9:4A:F7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.136.0/24
Signature Algorithm: sha256WithRSAEncryption
70:cc:58:2a:d0:a8:e4:98:1e:99:42:8c:44:40:44:a8:dc:66:
0d:23:30:14:db:42:6d:84:30:97:b7:a9:ad:96:68:98:89:cf:
06:df:e9:b0:be:74:72:84:d9:26:2b:75:9d:ec:e5:d6:dc:41:
43:e2:d9:35:63:6d:7a:e7:18:33:88:91:9c:73:04:1d:e5:70:
7e:0f:92:45:b7:aa:bc:d9:a3:16:00:8d:7a:02:5a:90:38:68:
92:42:d1:7b:48:46:fb:55:39:7d:74:d9:4a:d5:4b:f6:3b:cb:
6c:f4:68:c8:9f:07:15:e0:dd:56:03:98:60:ab:7b:d6:9b:ed:
bc:43:61:f2:d2:dd:a1:56:e0:65:1f:f4:b2:10:af:a2:df:b0:
e9:51:7e:9e:5e:3f:97:af:2f:75:c2:fc:89:77:28:09:c4:23:
38:df:36:ab:45:a0:48:90:44:99:c4:db:fe:26:4a:f2:ee:69:
0e:34:8a:d2:42:d6:f2:42:bf:c3:df:c5:35:b6:85:6a:34:0c:
70:97:4f:35:a3:01:ec:c5:00:79:4b:ed:d7:5c:7f:7c:8f:28:
a1:7e:84:80:d6:fe:98:88:91:83:e2:9f:49:ed:bf:18:fc:6b:
ab:c2:56:7c:69:64:1a:a9:72:4e:46:68:48:31:13:f4:44:5c:
48:2d:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:44:33 2026 by rpki-client