Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa
File: 34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: H60Qx1waU+s9q6PzWHn9np1YTgyo9BVevy0hZtF4YdE=
Subject key identifier: BB:FC:AD:CA:96:AF:D8:A2:C0:C5:32:03:23:B4:F5:B8:99:B6:B8:86
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5E35C4ACBD30B524C4AD6922DE8592ECE1B4C782
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa
Signing time: Thu 24 Sep 2026 17:29:20 +0000
ROA not before: Thu 24 Sep 2026 17:24:20 +0000
ROA not after: Thu 23 Sep 2027 17:29:20 +0000
asID: 201341
IP address blocks: 46.253.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:35:c4:ac:bd:30:b5:24:c4:ad:69:22:de:85:92:ec:e1:b4:c7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 24 17:24:20 2026 GMT
Not After : Sep 23 17:29:20 2027 GMT
Subject: CN=BBFCADCA96AFD8A2C0C5320323B4F5B899B6B886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:a5:58:21:c2:29:d3:ac:5e:bf:d3:d8:50:
49:db:ae:8a:9d:6e:42:33:79:27:d0:49:44:ba:ae:
2c:9e:9c:60:8c:55:6f:55:6b:f4:9d:ce:ae:96:c9:
2c:da:ba:05:1f:dc:d5:8a:b9:61:3d:7a:69:07:4e:
83:2d:37:21:fa:bc:82:cb:38:d0:1d:45:ad:9a:7e:
73:29:3f:ad:72:c5:fb:74:3d:11:ee:5b:73:8e:51:
51:34:c3:4b:8a:3b:27:ad:9b:e1:60:2c:c9:ae:62:
70:17:72:57:d0:d9:35:0c:9e:36:7c:c1:4d:fe:66:
b8:c3:08:95:cf:19:fb:c3:19:31:cb:02:1c:60:4d:
81:e1:97:77:f4:c9:81:8f:d8:49:c3:a5:11:df:0a:
d9:90:79:66:c9:29:75:fe:19:ce:c1:4d:7b:ec:fb:
17:df:55:a5:49:91:31:34:fc:87:cf:88:97:d6:51:
1c:6b:86:11:61:ae:5a:b8:6d:ad:14:b1:e4:d0:5c:
bd:78:bb:68:ef:d5:21:78:50:e6:af:9d:4e:c1:98:
74:57:e0:7b:29:58:89:05:2f:75:9d:90:39:5e:34:
08:0a:eb:93:76:4f:89:cf:a3:49:ca:20:15:88:7d:
a1:7f:09:0a:ef:66:9a:7d:79:1d:e7:48:d1:62:27:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:AD:CA:96:AF:D8:A2:C0:C5:32:03:23:B4:F5:B8:99:B6:B8:86
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.141.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e4:a7:a4:4c:57:4c:99:d5:75:79:76:f6:f3:24:1e:98:c4:
35:49:a4:a2:a0:ad:13:ab:b3:b1:b5:39:c0:ed:32:d9:62:c5:
7d:75:0a:82:a7:75:91:7e:d7:55:16:4e:af:e7:92:56:23:61:
30:2f:9b:64:0c:94:2a:24:eb:4f:36:44:d6:f4:e1:4c:ea:0c:
54:e9:a0:36:4e:3c:a7:25:85:4c:c8:e7:13:fb:0f:47:30:4e:
30:25:ab:99:6e:f7:81:be:95:7f:db:91:33:02:8e:67:c3:92:
25:ed:17:08:35:69:1a:ad:91:e4:c6:a2:e5:cf:1f:29:a3:37:
8e:c7:63:6b:81:fc:c6:25:e7:71:a0:2e:be:13:ba:84:bb:48:
c8:e9:16:75:be:69:d0:a3:ef:e5:d6:61:21:b1:2d:77:fa:3d:
02:87:01:99:02:c1:9c:7f:16:f9:b2:f5:05:cb:b4:96:a4:a8:
78:bc:4e:90:8c:8b:6b:a4:b5:99:b5:23:18:72:ba:e4:7f:eb:
4f:3a:22:6c:5e:07:1a:f7:77:1e:71:f4:95:ca:b5:d6:4f:ba:
9b:3b:3f:37:9f:ea:03:6a:6b:75:0c:4f:a6:cc:19:91:1d:c1:
7c:a9:67:e9:f1:fa:c6:e5:6f:c7:87:f1:e9:01:b8:d8:fa:9f:
32:6a:db:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 24 07:03:58 2026 by rpki-client