Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33332e302f32342d3234203d3e20313336373837.roa
File: 352e3138332e33332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: xcMGOpR42qAYQ54a2kYAumPlnT+ddSSlhQITG+rhG/E=
Subject key identifier: E2:B6:AA:E0:CA:31:8E:80:B6:D8:34:BE:6E:78:CE:92:CA:F1:04:90
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0B40D3318A1C6E8E97E2600BC44A0F2E56E2D413
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:14 +0000
ROA not before: Fri 23 Oct 2026 16:25:14 +0000
ROA not after: Fri 22 Oct 2027 16:30:14 +0000
asID: 136787
IP address blocks: 5.183.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:40:d3:31:8a:1c:6e:8e:97:e2:60:0b:c4:4a:0f:2e:56:e2:d4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:14 2026 GMT
Not After : Oct 22 16:30:14 2027 GMT
Subject: CN=E2B6AAE0CA318E80B6D834BE6E78CE92CAF10490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:76:98:85:fb:41:04:1d:77:46:80:81:27:
5f:2a:0e:1d:bd:ba:80:fa:68:5b:5b:23:3e:8c:a7:
e5:98:fe:f0:b1:da:0d:5a:88:5f:22:1f:af:8b:16:
fb:41:9d:eb:b4:f7:60:19:49:a2:a5:d5:fe:90:39:
2d:29:55:c8:8d:0d:ec:05:7b:ab:bd:bc:9f:3b:a9:
9c:3e:f2:42:21:6d:fb:57:a7:4e:bc:df:a3:d8:45:
6d:94:fd:08:3d:44:a6:b4:b0:59:38:ce:ed:16:c2:
8f:fc:26:b8:93:0b:9f:4d:3a:56:13:ef:56:8e:78:
e9:29:f5:37:b8:b0:76:01:28:8b:91:dc:0e:82:6e:
ad:3c:34:c7:73:e8:3f:46:5d:a2:55:25:54:ac:3c:
4c:b6:60:a3:26:75:44:03:05:18:98:f0:8a:3f:5c:
02:88:b3:6d:fb:13:a4:af:70:1d:3d:90:4f:12:bf:
6f:c6:19:cb:08:31:f9:11:30:0a:fc:36:5d:9d:19:
98:b7:31:00:ac:ad:62:b2:82:28:0a:8b:79:12:2b:
79:cc:7a:ba:dd:6d:9a:c7:3d:b3:29:b5:7d:9d:c0:
f3:68:ea:69:e2:1f:1c:7a:96:e7:d8:02:98:a6:d8:
c2:24:53:69:ec:88:45:fa:1e:77:7b:61:59:e7:39:
f1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B6:AA:E0:CA:31:8E:80:B6:D8:34:BE:6E:78:CE:92:CA:F1:04:90
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.33.0/24
Signature Algorithm: sha256WithRSAEncryption
54:fe:57:d3:35:30:e4:6a:b4:c6:79:66:3d:21:1a:d2:57:b2:
7b:31:7d:fe:b0:af:ea:e3:eb:a8:25:73:5f:50:06:21:53:06:
c6:a8:26:48:a2:3e:3e:e5:79:68:e6:bc:72:92:35:0a:67:9f:
8f:81:b9:b7:20:77:ea:4a:d3:64:79:26:6c:09:ca:e5:64:c7:
3b:29:d5:07:5c:ea:17:64:ac:ce:7f:8b:9f:0a:29:20:52:95:
81:2d:70:5e:ae:b7:ef:76:98:6d:d9:9f:f7:cd:05:a2:fc:cb:
bf:33:d0:fb:03:86:a2:b3:6d:09:c0:09:c5:cd:94:b8:b8:d7:
f4:e3:42:4a:48:ee:84:2c:24:e9:b4:98:5c:3e:bf:c2:bb:ff:
66:9f:ad:11:5b:2c:ff:08:13:b8:0c:c3:0b:94:78:78:0a:7c:
8f:05:87:ee:6a:fb:01:34:9f:ef:02:73:ab:cf:91:47:c3:de:
11:57:07:b9:08:a1:d1:67:31:58:48:43:2b:46:42:76:ab:eb:
5f:39:b5:d0:92:25:42:37:95:b7:5b:72:e4:79:47:a7:e6:df:
97:18:14:e5:7e:36:db:08:c8:a2:b6:8e:5e:46:ac:3a:57:50:
2a:de:76:69:21:9f:89:72:11:7d:66:42:bf:a6:6e:fa:18:c7:
30:a9:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:12 2026 by rpki-client