Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133392e302f32342d3234203d3e20313336373837.roa
File: 34352e36362e3133392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: jwulUgODfg521INJAorr3LMyS9Fwx26BFLEXG6XcFEE=
Subject key identifier: D4:98:96:EC:C9:BC:41:F2:E8:86:D3:39:9F:7E:BD:90:0D:98:DB:1B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0D405D9D4993BE009979DE502977C8EEEBEB2463
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:43 +0000
ROA not before: Fri 23 Oct 2026 16:25:43 +0000
ROA not after: Fri 22 Oct 2027 16:30:43 +0000
asID: 136787
IP address blocks: 45.66.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 11:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:40:5d:9d:49:93:be:00:99:79:de:50:29:77:c8:ee:eb:eb:24:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:43 2026 GMT
Not After : Oct 22 16:30:43 2027 GMT
Subject: CN=D49896ECC9BC41F2E886D3399F7EBD900D98DB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:55:a8:c3:dc:6b:8c:23:56:ed:20:3b:a0:
3d:ff:b0:56:c0:d8:c9:d5:db:d3:70:be:bf:89:93:
d8:df:ca:19:90:0b:2c:e7:b6:88:1e:51:32:d9:b6:
fc:f9:fd:3e:42:c0:d8:28:5b:1a:cc:2c:df:a4:1f:
25:cd:b3:4b:8f:9e:c2:57:33:9e:80:19:57:90:1f:
ef:00:19:a3:f7:56:61:c8:f5:17:93:4c:56:7d:7d:
c5:0e:7a:97:67:83:72:c5:00:ac:57:1e:20:fb:63:
40:9a:7b:a9:29:b7:e3:c0:0b:02:fa:7a:55:24:54:
e0:a9:9b:1f:86:0d:4d:9a:af:89:ee:62:f0:11:28:
5a:a3:8d:ae:51:c7:3d:13:bc:b2:7f:03:c4:44:d3:
9b:35:a4:7f:19:a9:c9:46:1e:6b:57:4d:cc:9a:f9:
8b:c5:a9:0a:e6:e0:9e:77:00:e4:f2:ee:61:f2:47:
12:0b:0f:11:0d:5f:e8:f1:bb:25:23:8c:71:9c:13:
2a:88:d3:27:a6:20:4c:a3:91:0d:ef:e7:88:26:f0:
9d:f4:e2:94:ca:86:a0:a3:b7:e0:6f:aa:ab:e3:99:
5b:50:8f:7b:aa:95:da:a6:60:bc:f2:3e:fc:f0:fd:
63:ff:5c:b4:45:d3:ab:7d:7c:65:39:22:ee:54:2d:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:98:96:EC:C9:BC:41:F2:E8:86:D3:39:9F:7E:BD:90:0D:98:DB:1B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:bd:87:57:62:b9:dd:c7:64:a3:ac:01:23:51:56:22:47:ee:
d6:78:35:0e:da:4c:e5:11:0c:33:43:28:06:5a:a2:3f:a0:fb:
4a:f3:4f:d2:5e:18:27:50:1c:c4:88:3f:55:be:aa:80:e4:ce:
d3:16:20:18:43:92:61:79:83:ff:76:da:16:f3:46:f3:88:99:
63:1c:0a:30:ad:72:ca:9d:17:45:a8:fe:5f:99:f7:63:51:3d:
7b:c5:fe:8b:a5:54:a4:0e:03:9a:92:0b:af:64:f2:1f:5b:22:
49:bd:2d:9d:ce:63:3c:6c:d1:86:0f:82:f0:94:52:a5:06:2a:
ec:84:98:95:cb:32:73:80:5b:c0:1d:27:20:b4:6c:8a:c1:57:
5a:a5:9c:43:22:3d:a3:60:b3:b9:64:a1:d7:c5:bc:cd:49:3c:
0b:67:94:eb:5f:b9:fe:ff:3e:45:59:0b:7f:7e:d3:75:1b:9f:
e1:32:26:88:6f:48:f2:8d:d4:15:ed:19:7c:2c:ac:6b:c1:1a:
b2:d8:c0:6c:54:48:87:e0:3a:fd:3f:bc:db:e3:66:13:b4:11:
32:5d:76:64:78:9a:4e:68:e4:26:57:87:27:a8:3d:91:11:54:
59:fe:7a:02:34:ea:f3:8c:0b:31:5b:c1:bb:be:07:8f:b8:80:
0d:53:bf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:53:18 2026 by rpki-client