Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138352e302f32342d3234203d3e20323132323338.roa
File: 34352e38302e3138352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: SDR1zlbGWYz6i22Gxv4oldvQgY2oLiMv54rUvxfMEuo=
Subject key identifier: 24:FB:2B:3C:25:ED:99:A8:54:BD:33:AC:3F:33:DD:49:F2:4C:69:DF
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 58C26CD639F83D596ED1702B9B76597067A73673
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138352e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 09:27:23 +0000
ROA not before: Thu 30 Jul 2026 09:22:23 +0000
ROA not after: Thu 29 Jul 2027 09:27:23 +0000
asID: 212238
IP address blocks: 45.80.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:c2:6c:d6:39:f8:3d:59:6e:d1:70:2b:9b:76:59:70:67:a7:36:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 30 09:22:23 2026 GMT
Not After : Jul 29 09:27:23 2027 GMT
Subject: CN=24FB2B3C25ED99A854BD33AC3F33DD49F24C69DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:fe:f0:ec:74:b5:04:e2:b4:5f:0f:d8:e1:
4b:32:3d:e2:d0:40:df:13:45:80:f5:37:5a:89:da:
72:02:0e:cd:fc:af:b7:d7:f5:22:95:4c:25:f7:83:
22:0b:d4:1e:96:8a:69:c8:3b:7b:dc:c1:6f:69:96:
61:ba:a0:b7:77:b9:7e:2c:4e:b9:3a:27:bd:ea:3e:
2d:09:fa:a8:8c:53:ca:12:59:74:28:d7:ff:99:f1:
22:49:96:c6:d8:ef:d7:ad:fb:1c:f9:64:15:c2:80:
be:54:65:8f:8b:0b:6b:f1:e3:59:8f:11:25:6a:e9:
13:c1:23:29:af:92:93:db:a6:96:42:36:03:19:c7:
67:e6:10:5d:2f:08:62:d9:12:2f:10:48:16:26:d3:
60:d6:3e:c5:bb:ad:00:5f:cc:a7:5e:f0:e7:da:7b:
13:b9:89:46:c1:45:40:9e:78:3a:a3:df:fc:ca:36:
eb:b8:97:44:19:9f:8b:70:6d:d4:0d:3e:c3:29:fb:
0d:ac:e2:6b:4e:eb:fe:c6:11:37:f5:18:85:3e:a4:
66:7c:d5:d6:15:b2:fd:ec:e3:10:8d:42:f2:fc:c9:
a5:40:e6:91:a9:a1:c3:0c:5d:7a:77:6f:f3:4a:8c:
de:a8:43:38:e0:a6:98:37:c0:e5:c7:b9:c7:e7:78:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FB:2B:3C:25:ED:99:A8:54:BD:33:AC:3F:33:DD:49:F2:4C:69:DF
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.185.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7f:44:5a:5b:60:04:14:70:a9:2e:c1:e2:26:ff:f4:f9:c7:
c2:66:47:88:2e:3f:97:53:18:f7:35:0b:1e:da:9a:3b:89:57:
99:85:dc:a6:8e:be:b4:39:9b:15:fa:96:6b:d1:c2:bc:28:c6:
4a:1f:77:53:1a:38:7e:3c:43:2b:21:09:fc:61:48:8e:4f:6f:
c6:96:59:a0:cb:53:71:03:db:cb:91:22:55:71:f8:10:9c:94:
d7:4a:0f:93:f4:8f:ff:e7:95:a3:66:2a:a1:b1:80:88:29:ac:
68:83:8a:e7:3a:27:f9:ee:79:3b:79:38:c6:53:c3:d5:52:01:
4a:c7:de:8e:75:d3:93:ff:21:4a:82:bd:bf:8f:1e:86:b7:7c:
59:2a:68:6e:90:9d:c5:43:6b:50:cf:db:3a:f2:54:e5:ee:1a:
6b:ce:ca:d2:73:03:99:1e:fb:29:4f:c9:43:20:55:2c:9e:81:
ba:a9:7f:31:e1:da:72:2d:2b:97:85:80:30:a7:4f:ff:0b:25:
2a:a2:24:ac:3f:42:ff:b4:f9:65:4a:1d:00:08:11:a9:52:5f:
e4:fe:e7:fc:52:b4:c8:69:73:be:9e:68:cc:89:8d:89:0e:42:
ce:be:c9:04:80:de:4d:b3:d1:fc:46:ab:f9:23:a9:53:e6:1a:
9b:5d:7b:d9
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUWMJs1jn4PVlu0XArm3ZZcGenNnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjA3MzAwOTIyMjNaFw0yNzA3MjkwOTI3MjNaMDMxMTAvBgNV
BAMTKDI0RkIyQjNDMjVFRDk5QTg1NEJEMzNBQzNGMzNERDQ5RjI0QzY5REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZNP7w7HS1BOK0Xw/Y4UsyPeLQ
QN8TRYD1N1qJ2nICDs38r7fX9SKVTCX3gyIL1B6WimnIO3vcwW9plmG6oLd3uX4s
Trk6J73qPi0J+qiMU8oSWXQo1/+Z8SJJlsbY79et+xz5ZBXCgL5UZY+LC2vx41mP
ESVq6RPBIymvkpPbppZCNgMZx2fmEF0vCGLZEi8QSBYm02DWPsW7rQBfzKde8Ofa
exO5iUbBRUCeeDqj3/zKNuu4l0QZn4twbdQNPsMp+w2s4mtO6/7GETf1GIU+pGZ8
1dYVsv3s4xCNQvL8yaVA5pGpocMMXXp3b/NKjN6oQzjgppg3wOXHucfneIYXAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUJPsrPCXtmahUvTOsPzPdSfJMad8wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODMwMmUz
MTM4MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAtULkwDQYJKoZIhvcNAQELBQADggEBAE5/RFpbYAQUcKkuweIm//T5x8Jm
R4guP5dTGPc1Cx7amjuJV5mF3KaOvrQ5mxX6lmvRwrwoxkofd1MaOH48QyshCfxh
SI5Pb8aWWaDLU3ED28uRIlVx+BCclNdKD5P0j//nlaNmKqGxgIgprGiDiuc6J/nu
eTt5OMZTw9VSAUrH3o5105P/IUqCvb+PHoa3fFkqaG6QncVDa1DP2zryVOXuGmvO
ytJzA5ke+ylPyUMgVSyegbqpfzHh2nItK5eFgDCnT/8LJSqiJKw/Qv+0+WVKHQAI
EalSX+T+5/xStMhpc76eaMyJjYkOQs6+yQSA3k2z0fxGq/kjqVPmGptde9k=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:12:01 2026 by rpki-client