Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3230382e302f32342d3234203d3e20323132323338.roa
File: 34352e39342e3230382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: NIYp4XhmVml0j2A9RisPy9avJI41e9GlJM4RKdu21fQ=
Subject key identifier: 77:2E:6E:B8:32:C8:D6:8F:C3:29:E3:3E:F0:11:75:D3:8C:F9:F5:C7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0A9DC71EDED2DCD1F0072677E5D251C98BD66873
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3230382e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 28 Aug 2025 08:51:25 +0000
ROA not before: Thu 28 Aug 2025 08:46:25 +0000
ROA not after: Thu 27 Aug 2026 08:51:25 +0000
asID: 212238
IP address blocks: 45.94.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9d:c7:1e:de:d2:dc:d1:f0:07:26:77:e5:d2:51:c9:8b:d6:68:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Aug 28 08:46:25 2025 GMT
Not After : Aug 27 08:51:25 2026 GMT
Subject: CN=772E6EB832C8D68FC329E33EF01175D38CF9F5C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:26:9a:79:c4:ff:fd:8e:8d:70:0b:64:6f:43:
51:4b:f5:03:5b:bb:16:ad:96:f5:b2:28:44:d9:39:
b8:df:37:c8:29:51:0b:4a:6d:b3:cd:55:ee:4a:f3:
43:fb:1e:02:1d:1a:ac:f2:53:9d:75:f0:96:e6:45:
b8:29:83:72:05:c5:ec:4c:37:f6:ac:ed:93:a5:20:
6b:16:80:7d:7b:ac:8e:c6:ad:da:88:0d:6a:73:aa:
26:f3:8a:a8:9d:60:ee:02:d9:77:8a:5c:04:44:0c:
13:18:28:24:00:07:6d:9e:6b:85:b4:9d:96:c3:20:
39:7c:83:53:57:95:c3:35:ab:41:c4:fd:31:21:d0:
62:9b:4b:2b:c3:f5:8c:50:e0:60:2b:bc:fa:2d:ac:
44:a3:16:12:b4:32:af:62:69:d6:2d:6b:64:df:31:
46:be:07:eb:57:fa:13:02:3d:72:25:08:b1:9e:58:
be:9f:ef:22:28:84:3e:f6:46:59:97:68:4f:3e:4b:
04:4f:f5:13:7a:ee:de:b1:33:67:ab:b2:26:bb:b2:
2e:f1:d6:cb:66:d8:37:f2:bc:8f:c1:63:69:3b:94:
08:76:09:05:e3:42:00:f6:63:55:9a:e7:18:37:5a:
ff:11:41:a0:c5:10:d4:eb:3d:16:ce:bd:e9:d4:6b:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2E:6E:B8:32:C8:D6:8F:C3:29:E3:3E:F0:11:75:D3:8C:F9:F5:C7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3230382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ac:27:42:82:ab:22:0f:9d:94:b7:fb:37:3f:d2:e2:74:82:
75:da:f9:c4:51:bf:5a:50:ee:44:62:1f:a9:27:a9:6e:1c:d9:
0c:dd:dd:fd:67:af:02:0e:dd:eb:49:3e:d5:11:d0:7c:25:d8:
19:f3:9f:cf:66:f3:1a:f7:f4:9f:f8:2b:cc:e3:4f:5c:b4:3f:
1d:ab:0f:6e:f0:f0:17:c1:cc:0d:d9:95:7a:e8:51:16:23:f0:
1e:d3:58:e2:5e:47:1a:74:a7:0a:73:e9:7d:c5:b9:b0:0f:c9:
16:f3:fc:a8:93:52:20:f3:b1:9f:aa:8f:db:d8:98:ca:87:bd:
5a:78:ab:4d:d5:c2:c3:e9:aa:48:3d:86:44:c7:36:7d:0c:7d:
65:00:1e:a2:20:ec:5d:0e:c6:17:0a:b6:07:80:52:dd:4b:c7:
8f:ae:02:d3:94:8f:73:24:3c:4c:dd:c4:91:40:3c:1e:e7:3f:
bb:de:93:29:d8:ea:35:34:c2:e2:0f:0d:cd:45:4b:8e:3f:0c:
74:37:51:b7:bc:74:07:f5:c9:39:b0:07:17:88:23:dc:99:85:
d4:a8:c4:f7:83:3f:68:88:d5:44:33:d0:2a:95:f4:b7:79:06:
55:d9:d1:b8:cb:1d:8c:f1:e8:a1:b1:c7:83:f9:c5:20:46:0e:
99:ac:64:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:55:31 2025 by rpki-client