Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133382e302f32342d3234203d3e20313336373837.roa
File: 34352e36362e3133382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JO/xHGYHkpvkddBehc2FDG4NMh8urrAPCrU4xTWfcv8=
Subject key identifier: 96:63:00:11:3E:F4:F8:C8:20:3C:98:96:AA:BE:CC:D0:E0:56:BF:1C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 52234F6B508E5BDEDFD96D64A5D5B0E2546398ED
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:25 +0000
ROA not before: Fri 23 Oct 2026 16:25:25 +0000
ROA not after: Fri 22 Oct 2027 16:30:25 +0000
asID: 136787
IP address blocks: 45.66.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:23:4f:6b:50:8e:5b:de:df:d9:6d:64:a5:d5:b0:e2:54:63:98:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:25 2026 GMT
Not After : Oct 22 16:30:25 2027 GMT
Subject: CN=966300113EF4F8C8203C9896AABECCD0E056BF1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:7c:a3:95:81:bc:9c:d9:58:cc:c3:6f:63:
21:1a:b9:7f:d3:64:f6:96:d5:ca:59:b0:b3:a5:e4:
b8:31:90:ac:9e:95:62:0e:80:04:55:79:ba:72:d4:
33:29:75:e4:d7:46:ec:13:0d:6d:73:a2:56:a3:c9:
7c:7b:d7:7a:dc:50:dc:8a:c4:c6:96:9c:78:85:1f:
99:f9:18:94:c3:01:b1:9f:b3:9d:07:54:bf:43:9c:
aa:e4:47:f8:a5:82:63:b1:8b:b8:b8:19:73:46:9d:
44:4d:c3:b6:64:23:5d:49:14:bd:2b:0c:d0:a6:cf:
44:68:1a:3c:dd:f9:55:88:23:95:f2:83:0c:19:99:
a2:ce:1e:3f:f1:2a:78:d2:0d:d2:44:bc:5c:5f:e0:
61:d3:0c:0c:6f:e7:0e:ff:bf:0a:6c:ca:00:17:93:
0e:6e:90:92:5d:0c:e4:b1:b3:b8:94:bd:70:85:cf:
11:73:3b:83:72:08:e5:16:ca:91:d1:48:18:b9:d4:
ff:84:89:10:0a:50:2d:76:30:cb:32:40:dd:5e:d4:
0c:33:aa:cc:14:2c:a4:59:70:e6:a7:18:e1:14:0f:
a3:d2:7d:04:04:79:bc:2f:13:e1:00:47:64:cd:96:
ec:1e:41:ee:85:d4:3b:50:98:dd:59:77:e0:0e:c7:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:63:00:11:3E:F4:F8:C8:20:3C:98:96:AA:BE:CC:D0:E0:56:BF:1C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.138.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7b:e1:f8:55:3b:47:ed:1e:f6:57:18:ca:f7:c2:a2:d5:3b:
1d:74:03:46:a3:90:e5:f0:c9:30:f8:72:29:a6:95:6f:31:39:
bc:6c:41:03:9c:8e:2e:4e:62:d6:83:15:b8:ab:26:10:98:39:
02:2d:6b:ef:86:d6:cc:4d:87:aa:55:bb:14:c7:cc:80:2d:f7:
00:7b:7b:bf:96:d3:0c:87:3c:01:3c:f3:31:b2:ed:fa:db:1e:
33:e7:ba:30:91:49:73:b5:6b:74:cb:24:a5:0c:ce:87:f4:18:
ac:d5:32:fe:0c:d6:14:1e:32:77:81:64:73:08:1a:9b:21:18:
f7:91:d9:20:ea:b8:d1:e7:c4:44:72:f9:8f:30:08:d1:73:7b:
f5:3d:21:d9:29:d9:47:8e:65:c9:60:1a:35:05:9e:c1:46:99:
ef:2d:8a:d3:a6:5b:61:c8:49:06:e4:ec:a8:4f:27:f3:9b:55:
37:c2:39:f6:78:38:b2:b1:5e:f8:54:69:ad:cc:5f:81:5b:ce:
6d:2b:a2:d3:41:b5:97:41:56:12:7e:ed:68:b4:4f:de:fc:51:
37:e5:0b:21:1f:5d:24:d3:e4:f9:02:03:a6:77:8c:68:d1:40:
33:a0:88:d9:70:cf:ea:85:07:5a:d4:b1:11:f1:5e:5f:8a:10:
34:f8:c0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:51:25 2026 by rpki-client