Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33322e302f32342d3234203d3e20313336373837.roa
File: 352e3138332e33322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: vIFoQ8/baEFs1trEqd7U4kqR7sKflUrDnGJS6UbSYSE=
Subject key identifier: 26:A2:7D:E2:50:9C:9D:BA:DB:86:51:B1:E8:44:00:AA:ED:D7:71:C1
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 47CD67DF1ABFE52C24F1448D7E11C84EB335E550
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:17 +0000
ROA not before: Fri 23 Oct 2026 16:25:17 +0000
ROA not after: Fri 22 Oct 2027 16:30:17 +0000
asID: 136787
IP address blocks: 5.183.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 07:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:cd:67:df:1a:bf:e5:2c:24:f1:44:8d:7e:11:c8:4e:b3:35:e5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:17 2026 GMT
Not After : Oct 22 16:30:17 2027 GMT
Subject: CN=26A27DE2509C9DBADB8651B1E84400AAEDD771C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:e3:cf:47:bb:01:7d:dc:ef:8b:90:45:b7:
09:1f:10:a8:15:a8:4d:5d:23:84:15:05:4f:24:3a:
02:26:bd:3b:6a:5f:6f:45:bc:95:5e:a1:df:82:07:
79:4f:e2:ca:56:51:5b:65:03:e8:ce:9c:56:44:9b:
9d:00:52:a6:78:a1:89:c2:a5:6f:fb:9e:81:9c:d8:
d9:5b:5b:2a:3f:ce:38:7b:e3:c4:e6:44:2c:6b:01:
a0:49:ba:c0:87:d5:43:79:03:6c:58:d8:9e:99:1f:
d9:8c:19:6c:5d:f3:3a:d4:ea:55:f5:3a:dc:f1:a2:
cc:19:3f:71:d1:0b:f6:d6:89:da:63:c3:c0:b5:ee:
96:16:53:a5:88:03:a9:3a:0b:d2:17:ee:26:e5:c2:
83:86:ff:4d:93:cd:b3:2f:51:68:d3:2c:0f:86:da:
65:0f:90:c4:99:89:28:df:dc:6f:70:92:5d:87:f6:
31:5c:30:b2:eb:04:14:c0:f9:81:81:1a:e9:27:cf:
a8:f6:77:89:67:07:8b:75:42:5e:f1:47:a7:9e:b6:
9d:6a:4d:d4:dd:d5:6d:98:c2:71:79:33:60:52:c2:
10:da:9d:61:f4:62:8b:3a:7a:dd:46:8d:bd:cb:2e:
ea:51:df:3f:54:a5:63:ed:49:8f:ed:08:82:51:4d:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A2:7D:E2:50:9C:9D:BA:DB:86:51:B1:E8:44:00:AA:ED:D7:71:C1
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:db:a5:f7:27:e2:8c:28:96:06:7f:16:dc:08:be:be:ba:d1:
12:2f:da:22:be:ce:91:19:c8:c4:60:a3:65:df:43:6c:fa:fe:
8f:c5:9b:72:c3:da:df:98:bb:82:e0:51:2a:3a:f2:36:b6:4f:
6a:7f:69:51:0c:15:25:f5:4c:8f:76:16:e5:72:d5:35:86:18:
c3:cd:55:31:52:e8:94:fa:16:e5:6d:61:a6:77:4c:4c:a9:9a:
32:d3:94:f4:1f:9f:d0:1b:61:cd:47:80:85:97:57:82:65:54:
af:54:59:ea:a0:1e:0b:6e:f8:bc:7d:05:4e:e7:3e:92:ea:5a:
d0:1e:66:e4:55:1a:9b:12:5d:8d:15:f4:75:70:3b:8c:54:69:
52:26:ab:75:20:e0:ac:0c:60:99:5f:d0:92:34:49:1c:8a:23:
74:cf:32:fb:0d:33:bf:ca:00:d1:3a:10:e3:c5:5b:60:a9:5e:
e0:70:c1:82:da:da:0b:86:60:8f:27:66:e6:4f:95:c9:66:ef:
cd:7d:a5:17:a9:63:36:08:94:26:d5:2b:f4:a5:24:3b:c2:6d:
43:8e:95:e1:80:1d:fd:69:06:b7:26:43:fc:ef:13:eb:ef:db:
fe:20:bd:98:72:1b:c4:ad:8c:62:6b:f6:79:e9:47:d1:14:17:
7b:95:04:22
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUR81n3xq/5Swk8USNfhHITrM15VAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MTdaFw0yNzEwMjIxNjMwMTdaMDMxMTAvBgNV
BAMTKDI2QTI3REUyNTA5QzlEQkFEQjg2NTFCMUU4NDQwMEFBRURENzcxQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmh+PPR7sBfdzvi5BFtwkfEKgV
qE1dI4QVBU8kOgImvTtqX29FvJVeod+CB3lP4spWUVtlA+jOnFZEm50AUqZ4oYnC
pW/7noGc2NlbWyo/zjh748TmRCxrAaBJusCH1UN5A2xY2J6ZH9mMGWxd8zrU6lX1
OtzxoswZP3HRC/bWidpjw8C17pYWU6WIA6k6C9IX7iblwoOG/02TzbMvUWjTLA+G
2mUPkMSZiSjf3G9wkl2H9jFcMLLrBBTA+YGBGuknz6j2d4lnB4t1Ql7xR6eetp1q
TdTd1W2YwnF5M2BSwhDanWH0Yos6et1Gjb3LLupR3z9UpWPtSY/tCIJRTdyzAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUJqJ94lCcnbrbhlGx6EQAqu3XccEwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMzMmUz
MzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQABbcgMA0GCSqGSIb3DQEBCwUAA4IBAQBv26X3J+KMKJYGfxbcCL6+utESL9oi
vs6RGcjEYKNl30Ns+v6PxZtyw9rfmLuC4FEqOvI2tk9qf2lRDBUl9UyPdhblctU1
hhjDzVUxUuiU+hblbWGmd0xMqZoy05T0H5/QG2HNR4CFl1eCZVSvVFnqoB4Lbvi8
fQVO5z6S6lrQHmbkVRqbEl2NFfR1cDuMVGlSJqt1IOCsDGCZX9CSNEkciiN0zzL7
DTO/ygDROhDjxVtgqV7gcMGC2toLhmCPJ2bmT5XJZu/NfaUXqWM2CJQm1Sv0pSQ7
wm1DjpXhgB39aQa3JkP87xPr79v+IL2YchvErYxia/Z56UfRFBd7lQQi
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:07:35 2026 by rpki-client