Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138352e302f32342d3234203d3e20323132323338.roa
File: 34352e38302e3138352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: GBFXRuuOqD+qjWSwfv7Jne+7ylkm+ap9r5vZKig0cJU=
Subject key identifier: 5C:B4:EA:F7:DE:DF:10:AB:64:03:87:93:5E:44:8D:EF:94:65:89:37
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6BCE7B427377941C933F8311C42F5E31D9C6AFE0
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138352e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 28 Aug 2025 08:51:29 +0000
ROA not before: Thu 28 Aug 2025 08:46:29 +0000
ROA not after: Thu 27 Aug 2026 08:51:29 +0000
asID: 212238
IP address blocks: 45.80.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ce:7b:42:73:77:94:1c:93:3f:83:11:c4:2f:5e:31:d9:c6:af:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Aug 28 08:46:29 2025 GMT
Not After : Aug 27 08:51:29 2026 GMT
Subject: CN=5CB4EAF7DEDF10AB640387935E448DEF94658937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:8e:b7:ab:53:42:1c:e9:54:5a:61:fb:3e:
a0:33:3e:f9:3d:5a:d4:50:07:f5:12:39:f4:a9:07:
24:57:b4:60:77:03:c9:e8:f8:3c:f8:b5:88:9b:1e:
a3:00:1c:fd:4f:62:61:c0:da:12:62:ed:8e:33:dd:
4d:2d:31:1c:a6:ad:d6:cf:67:0c:66:90:17:86:9f:
05:c8:fc:a9:b1:63:bf:8d:83:9b:34:82:fe:d4:c0:
d3:d7:e4:df:a7:3c:f8:96:b9:e1:3d:c9:9c:0a:dc:
bf:d8:7b:46:09:ac:70:e9:d4:34:86:7e:a0:63:4c:
c9:b0:e9:66:49:85:c2:fd:43:ea:f9:34:50:7c:2f:
a5:74:35:d0:7c:f9:7b:4b:84:2d:27:6f:42:39:6d:
31:dd:f8:6b:7e:33:60:2c:0f:24:45:70:f9:73:be:
87:6f:bf:c3:7f:c4:fe:76:87:ab:1a:69:fe:bf:e2:
50:ed:62:76:d7:eb:64:c4:00:69:e1:92:2f:d1:13:
43:16:38:cf:76:e2:1d:d9:49:f5:b3:95:33:58:f1:
a8:9b:77:9d:e2:d6:62:76:8d:c7:ef:f0:74:51:b6:
9f:05:bc:7c:39:05:0a:70:bb:ed:ff:d8:50:18:bc:
f0:1e:e2:24:51:61:76:53:a7:b4:61:fa:bd:84:b1:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B4:EA:F7:DE:DF:10:AB:64:03:87:93:5E:44:8D:EF:94:65:89:37
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.185.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8b:21:2e:aa:76:b0:71:2a:b2:10:8d:5a:28:78:33:cb:1f:
8e:3a:ab:68:d4:e4:f9:12:aa:8c:2f:82:bf:39:9b:10:af:18:
c0:70:aa:28:5e:e7:f0:3d:10:20:df:ce:20:99:8d:20:d6:b7:
fd:eb:64:c8:b3:bd:00:78:dc:91:d3:38:67:e3:1b:98:cb:49:
7d:3e:55:cb:7a:8e:62:94:50:ec:d0:6f:c0:a0:fe:54:57:ee:
7c:f6:f2:e8:d1:e9:e1:df:26:a0:8d:fc:a2:73:1b:5b:24:92:
04:89:f3:c2:21:10:d3:46:ca:9e:9f:68:ee:6b:e3:17:5e:a1:
b2:b6:3e:2e:43:82:65:bc:df:a9:f2:ce:09:38:d5:c5:43:95:
ac:cb:ef:20:72:b6:a2:d3:8d:6b:4a:0e:e0:28:77:3d:86:20:
29:00:2a:5b:01:44:23:99:fc:36:c8:74:cc:9a:f3:8c:5a:97:
3a:aa:c0:c4:0f:1d:97:be:78:7a:d5:ae:ff:eb:7b:f6:0c:02:
0a:b4:89:04:c3:c4:93:13:89:27:ae:21:a6:74:55:9b:de:82:
22:80:12:8b:b8:fa:90:02:12:67:2c:21:a9:2b:f3:7d:07:62:
b9:ed:28:d1:b0:53:b2:84:1e:2b:4a:e3:34:75:19:8f:25:f1:
4c:7a:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:52:55 2025 by rpki-client