Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138342e302f32342d3234203d3e20323132323338.roa
File: 34352e38302e3138342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: vfIoMR+QJi9vAUxxI8vKcgRsfcvPfmKuT0PW2HorYz4=
Subject key identifier: 83:30:5D:79:BD:6C:F5:25:C4:88:51:5A:A7:94:D1:79:41:8A:0A:10
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7078EFE6B487C2496CC928CF0A427FEDC6F24B15
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138342e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 28 Aug 2025 08:51:28 +0000
ROA not before: Thu 28 Aug 2025 08:46:28 +0000
ROA not after: Thu 27 Aug 2026 08:51:28 +0000
asID: 212238
IP address blocks: 45.80.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:78:ef:e6:b4:87:c2:49:6c:c9:28:cf:0a:42:7f:ed:c6:f2:4b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Aug 28 08:46:28 2025 GMT
Not After : Aug 27 08:51:28 2026 GMT
Subject: CN=83305D79BD6CF525C488515AA794D179418A0A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:3a:ea:cb:87:b8:78:ae:51:07:a6:b8:78:
36:80:b1:21:39:1a:3c:39:de:4d:1c:61:9c:e3:74:
fc:b3:06:04:fd:b1:d5:a9:d2:09:dc:b3:0c:4d:f5:
f7:68:1f:49:02:1c:d6:f6:3c:41:9b:db:2c:16:37:
65:da:f9:81:59:a2:fc:52:0d:c8:ed:4a:06:67:c1:
8f:44:f6:94:67:48:66:90:c8:14:cb:d7:28:b3:07:
6b:46:61:81:9b:60:0e:9c:72:97:86:17:ec:7b:ef:
c1:6a:c5:e6:03:0e:90:d2:bb:f7:c7:de:f5:97:23:
74:cb:23:c2:6f:1f:73:01:f0:30:2b:4c:ea:76:f2:
d7:76:27:74:78:ab:8c:35:cd:10:fb:d5:08:9a:c3:
7b:42:92:6e:f8:3c:c6:d4:1e:dc:01:b1:26:2a:5c:
56:1d:52:53:07:f2:4b:53:09:c2:f6:e2:8e:ff:d1:
7b:2f:d6:0e:f8:00:9b:6b:72:3d:3c:13:31:98:9e:
68:20:4a:b3:e4:a6:16:4f:21:bf:12:b0:47:eb:c4:
9e:64:03:c8:54:db:e6:44:33:8a:17:21:16:f7:85:
30:ae:3c:de:84:e3:4b:31:d5:cf:03:08:e0:c1:2d:
85:c1:08:b1:39:d0:ac:c2:72:07:8c:47:3d:15:8f:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:30:5D:79:BD:6C:F5:25:C4:88:51:5A:A7:94:D1:79:41:8A:0A:10
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.184.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:fb:ec:bb:53:d1:96:0f:bc:7b:67:36:f3:a4:e1:44:eb:35:
bc:48:04:4c:86:71:9e:d8:c4:3e:1c:73:a7:d6:78:0f:40:d7:
a6:be:97:27:07:f7:53:ed:71:0b:ce:7a:a8:67:4f:eb:a8:fd:
c3:bc:b9:1d:cc:59:e8:67:ff:2b:66:4f:fa:41:0e:56:27:3b:
f6:c8:8a:a1:d3:76:72:65:61:a9:a7:87:fd:7d:16:03:ac:54:
d8:b1:05:f3:20:99:89:6c:0a:50:64:96:3a:4c:cf:74:30:96:
eb:a1:e6:e8:47:98:9c:b0:50:e7:7c:bd:c8:29:f0:06:41:98:
f3:7a:65:bf:80:ef:38:1a:03:97:81:c8:8d:3c:ee:a5:e0:f2:
48:36:9d:86:52:2b:26:92:56:17:a8:91:6c:7c:ba:f4:38:d1:
ef:4f:0a:61:fc:7e:91:04:d6:89:0a:74:97:4f:49:2b:7a:90:
96:80:c3:5d:a6:5b:ec:bb:6f:88:cd:7b:a7:61:7f:47:63:f5:
42:5b:19:6c:c5:87:22:38:b4:ae:d8:73:6c:e9:5c:99:dd:80:
f1:dc:b7:89:d7:90:39:8d:fd:3e:3d:98:ed:a8:8c:a3:94:ee:
11:0b:08:f0:fa:f6:0b:ec:0e:c1:6c:2d:f3:8a:e0:31:de:bd:
aa:85:2e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:51:42 2025 by rpki-client