Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138312e33322e302f32322d3234203d3e20323031333431.roa
File: 352e3138312e33322e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: wf5h0IGwADXA/vY5ooMjzB685lkJJ0lMI9SateS7r6g=
Subject key identifier: 47:57:07:D8:C5:39:C6:FF:82:34:B6:25:40:F3:EA:E7:6B:15:B6:5E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3E6A2A81D289835CB0E0E392830CB794164F4A89
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138312e33322e302f32322d3234203d3e20323031333431.roa
Signing time: Fri 23 Oct 2026 16:30:18 +0000
ROA not before: Fri 23 Oct 2026 16:25:18 +0000
ROA not after: Fri 22 Oct 2027 16:30:18 +0000
asID: 201341
IP address blocks: 5.181.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6a:2a:81:d2:89:83:5c:b0:e0:e3:92:83:0c:b7:94:16:4f:4a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:18 2026 GMT
Not After : Oct 22 16:30:18 2027 GMT
Subject: CN=475707D8C539C6FF8234B62540F3EAE76B15B65E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:1e:03:47:73:aa:7d:13:51:4c:67:02:fa:
83:5e:7a:d2:4c:73:69:a2:ae:07:9b:66:19:39:e4:
01:fc:ad:d8:84:7a:33:c2:31:47:cf:04:76:39:36:
e3:07:93:3d:3e:78:45:37:f6:8f:be:da:69:00:bc:
d0:71:96:4e:fa:e7:0f:f9:1b:5e:b8:8a:c5:de:b1:
88:25:42:a3:ce:ee:db:16:24:41:cf:55:2c:7e:1e:
d2:93:7b:cc:cd:8b:f6:87:e0:e9:2a:92:b1:ea:7a:
c7:5f:1f:0c:26:bf:4e:52:e0:49:fd:8a:4f:86:b4:
3b:4e:ef:26:39:c1:98:3e:a8:f0:87:42:be:58:69:
e1:87:df:0a:b5:c8:fe:90:79:a7:a3:4f:00:56:53:
11:53:52:9b:1a:11:2e:a5:ab:52:92:d7:ea:3f:01:
4b:d5:c8:17:9b:d9:18:ad:70:f7:ee:f9:ec:d7:87:
95:f5:99:cc:79:b7:e2:ba:82:0e:96:63:0f:69:86:
31:c5:c5:be:e2:76:b5:33:d6:a2:33:85:ed:c4:b2:
51:19:04:37:c4:cf:73:84:52:e4:85:9b:89:69:ac:
41:ed:1d:7a:6c:35:12:a1:e4:23:cf:56:35:aa:b5:
bc:1a:80:6a:60:a9:2e:55:54:5f:2c:e0:34:da:d1:
e5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:57:07:D8:C5:39:C6:FF:82:34:B6:25:40:F3:EA:E7:6B:15:B6:5E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138312e33322e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.32.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:88:2f:44:a4:d5:be:59:98:fd:1f:c7:d6:28:50:02:05:36:
a7:7a:50:58:66:54:d6:e7:db:55:dd:c6:9a:a3:01:3a:69:ba:
85:a2:a9:6c:b0:c4:9c:ea:15:1e:36:f1:dc:64:4a:8d:32:5d:
6c:74:b0:f2:ab:f1:d8:f7:04:8c:28:0b:ab:96:a4:03:bb:81:
01:fc:36:a2:b1:2c:29:46:07:cf:40:89:17:ac:1c:54:4a:66:
14:21:97:d7:ce:6e:4d:cc:15:94:00:83:77:c6:dc:33:99:3f:
f1:0f:c2:62:e7:93:e4:b6:98:63:61:bc:f1:d3:aa:0d:8b:7f:
93:34:3e:5f:13:55:d4:be:4b:3c:cb:82:53:09:0b:16:8f:41:
21:bd:60:80:a9:54:f3:d6:8f:bf:18:66:cc:c2:15:93:ed:58:
ce:30:83:c8:3d:ef:c0:5f:75:24:86:2e:39:c6:b5:07:b7:0f:
bc:f4:6a:57:43:92:6b:f9:0f:b2:26:27:8f:c4:36:3c:39:7a:
b4:8f:e6:d0:6d:42:ba:26:b6:5e:f8:11:80:48:63:9a:35:5b:
d7:22:98:0c:d0:a0:5f:e1:5a:df:f0:ee:c7:5f:7f:49:df:7e:
dd:66:06:fd:01:80:42:80:57:92:a3:ee:5e:30:c3:f1:ae:c4:
e2:96:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:15:36 2026 by rpki-client