Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137342e302f32332d3234203d3e203437353833.roa
File: 34362e31372e3137342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: nrIVNkBnp3LoS6vtmtvX6uynylN87QhtPdo4n5bvTlY=
Subject key identifier: 28:0F:71:CC:FA:8D:3A:27:02:67:C6:08:24:7A:25:34:1B:B6:68:1C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7E3D60E47ACF2407E6C8137E1209A77E3BCB7FDA
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137342e302f32332d3234203d3e203437353833.roa
Signing time: Fri 23 Oct 2026 16:30:36 +0000
ROA not before: Fri 23 Oct 2026 16:25:36 +0000
ROA not after: Fri 22 Oct 2027 16:30:36 +0000
asID: 47583
IP address blocks: 46.17.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:3d:60:e4:7a:cf:24:07:e6:c8:13:7e:12:09:a7:7e:3b:cb:7f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:36 2026 GMT
Not After : Oct 22 16:30:36 2027 GMT
Subject: CN=280F71CCFA8D3A270267C608247A25341BB6681C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:01:b4:cc:ad:01:5d:6f:d0:ad:2d:31:77:99:
fb:d5:7b:48:4e:4d:65:dd:0a:a7:df:87:ba:0e:e3:
e9:a5:d0:63:d5:bd:d8:c5:26:b5:da:5d:3e:7f:ce:
74:42:bb:5f:3e:fe:7e:51:d8:42:81:ca:bb:96:25:
98:4b:07:d3:33:1b:6d:86:e2:ab:e6:bc:09:20:ba:
77:9d:f5:70:63:30:12:28:9e:14:53:44:2a:4c:7b:
1e:85:c5:a7:4f:66:ed:de:0c:6b:5d:bd:24:21:bf:
e9:bb:93:f6:19:8b:82:64:0c:d5:da:f9:bc:c4:c5:
63:cf:2e:ed:2c:30:82:5f:43:c6:1a:7e:6b:68:a3:
41:67:0b:d1:22:97:14:d7:0b:ac:d7:81:c6:6e:15:
48:f4:41:3d:8e:aa:f2:e4:70:51:ec:28:d0:11:a1:
b2:60:ba:c8:b9:d8:e0:ef:08:b3:49:c4:b8:93:4e:
12:43:cd:87:0a:a0:10:3c:cd:94:34:09:a0:2a:37:
9c:ee:68:dc:b0:71:00:07:c1:96:f9:ae:fa:f1:fb:
8a:1a:4f:f4:b5:53:7f:ed:c7:36:4e:1c:a2:ee:de:
48:28:0f:1e:ef:3f:30:1c:90:fc:97:b9:b8:a6:61:
94:64:a0:da:65:92:88:48:a0:d1:98:c1:75:f1:73:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0F:71:CC:FA:8D:3A:27:02:67:C6:08:24:7A:25:34:1B:B6:68:1C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.174.0/23
Signature Algorithm: sha256WithRSAEncryption
06:4a:38:12:f3:71:10:7e:8e:80:3a:b4:c3:a6:bd:c6:a3:ad:
c5:22:a2:56:e7:12:ac:6f:65:67:95:02:eb:21:92:1b:3e:37:
9f:b7:30:cb:4b:df:ab:39:0b:77:06:c7:4b:c7:9e:06:b4:99:
1a:f8:6d:78:b5:e9:b0:9c:ad:08:16:c2:6d:62:03:b4:50:17:
8b:bd:38:56:38:8d:ae:1d:a3:5c:3d:e8:7b:a1:f4:0e:f1:08:
9a:f2:32:e6:48:c5:85:e9:cc:4e:39:e3:7c:95:31:87:6d:ab:
a1:82:94:3a:0d:ee:31:e7:36:bf:10:76:39:47:d7:2c:ac:10:
0f:45:74:bd:f9:c4:2d:5b:09:1f:12:e3:29:41:c7:d9:ff:34:
81:f1:76:94:5c:bd:e3:1e:d4:d1:b9:e7:9e:90:4d:ba:4d:e2:
cf:ee:4e:b1:6f:1b:e3:ec:4e:fb:19:b6:43:d3:36:1a:e8:d7:
db:6b:88:07:cb:4f:cf:a8:57:e1:ee:fd:e6:c0:73:84:ee:81:
3a:39:6c:c4:6f:69:89:f9:8a:08:36:c0:c3:9d:fc:b7:45:29:
00:1c:ae:14:6b:d0:c4:cf:9c:6d:06:ab:90:c0:c5:89:3d:c9:
af:cb:ed:b8:8b:3a:1c:9a:86:5a:91:11:de:8c:5f:24:8b:12:
f9:3b:0c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:12:41 2026 by rpki-client