Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3230382e302f32342d3234203d3e20323132323338.roa
File: 34352e39342e3230382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: x7jDCVzGlVf/Itr90lnHfJjWG3JZjU2vQNag8bXO54g=
Subject key identifier: D5:2F:14:38:EC:9E:CA:2C:E3:E3:23:D4:FC:4E:50:11:35:E5:B6:E7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2F9F756D05E7193D1F39175AF183F56264418139
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3230382e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 09:27:22 +0000
ROA not before: Thu 30 Jul 2026 09:22:22 +0000
ROA not after: Thu 29 Jul 2027 09:27:22 +0000
asID: 212238
IP address blocks: 45.94.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:9f:75:6d:05:e7:19:3d:1f:39:17:5a:f1:83:f5:62:64:41:81:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 30 09:22:22 2026 GMT
Not After : Jul 29 09:27:22 2027 GMT
Subject: CN=D52F1438EC9ECA2CE3E323D4FC4E501135E5B6E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:fe:1e:ff:c0:01:67:20:55:bf:1a:97:20:
d3:1e:0a:ee:41:fa:34:d9:a7:cf:29:fd:7b:e4:32:
2a:63:04:19:8a:b8:8c:ab:15:e3:61:bb:ae:8b:89:
41:53:27:a7:0e:d5:b7:71:70:de:40:24:11:57:26:
fe:28:23:b6:88:68:fc:4f:61:7f:d1:8e:05:f1:f9:
df:70:a3:fb:20:04:0a:17:96:32:aa:8d:36:f9:fb:
46:c4:59:69:49:27:a4:ca:4a:7f:a9:47:fa:32:9c:
11:f9:60:57:8a:59:c8:7e:bc:80:a0:8d:f0:e1:d7:
ca:9b:70:e1:24:6e:c8:a6:00:19:db:fd:42:a3:6f:
eb:5e:49:a7:4c:ac:dc:3f:0b:cb:54:28:ab:b1:d9:
7c:8e:86:c1:42:0d:a7:ec:8d:e9:81:4b:ea:b1:78:
b4:b5:84:ad:ab:5e:14:fc:c9:e6:d2:04:b8:6c:a5:
9c:1e:f0:29:06:45:ba:5c:be:18:17:73:8d:e4:db:
09:ff:34:f0:0b:53:7f:fd:a4:f0:54:65:c3:c1:26:
a4:0b:86:c8:93:87:b5:48:ea:41:d9:c6:fe:d2:41:
9b:5b:99:38:aa:14:9d:b7:a0:1b:e7:0d:7e:f3:32:
da:60:3b:b9:67:09:c6:c3:f1:04:a4:2f:01:bd:74:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2F:14:38:EC:9E:CA:2C:E3:E3:23:D4:FC:4E:50:11:35:E5:B6:E7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3230382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.208.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d3:21:ca:47:a9:d2:a7:fb:18:44:9d:18:cd:27:92:70:68:
e7:02:4e:e5:24:c0:23:21:14:b0:cf:dd:72:b3:05:ee:a5:30:
70:34:1b:ee:0f:29:51:20:04:78:56:bb:40:f2:d0:0a:e0:02:
de:11:42:6f:22:8c:ce:86:45:c0:05:ae:34:c1:a2:31:12:fe:
68:5e:86:5d:7f:42:8c:92:c4:bc:42:db:03:3b:5c:cc:56:e7:
7f:b8:d0:b3:d5:d8:2e:7f:a1:af:a6:d7:f1:a6:06:d4:b8:d4:
53:b1:45:b6:66:1a:c1:e2:b3:07:ae:ac:10:4a:98:81:69:f7:
7f:a9:a2:6d:e2:04:cc:46:93:56:1f:8d:50:63:47:53:a4:e4:
8b:6b:25:4f:c3:94:e0:dd:91:7f:46:3e:24:4f:00:ca:25:f0:
62:e3:77:c1:d2:35:3d:d7:f7:58:e7:e2:b5:be:a7:5b:37:3b:
c5:c9:96:5c:43:f9:68:86:04:64:94:3a:19:43:63:f6:43:28:
92:38:5e:4f:17:4a:69:af:df:64:74:e5:b4:ce:e9:5c:61:37:
db:fb:b3:f6:fe:f5:6d:26:70:70:e5:99:bf:04:89:bf:c9:6a:
13:b3:e3:80:d3:aa:a8:8d:63:00:56:fc:51:87:e7:39:c6:00:
7c:13:60:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:41:29 2026 by rpki-client