Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33342e302f32342d3234203d3e20313336373837.roa
File: 352e3138332e33342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: yTP7Z4Rfh9JCtOjkciML2WImE3XMQLd0DcQV0BRniRU=
Subject key identifier: 5D:85:CC:60:15:B8:A9:21:58:3D:DA:E6:AB:C3:9C:B8:47:85:3A:61
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 43C00B29745D0D3FBD605B67159B620205CB4CFE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:11 +0000
ROA not before: Fri 23 Oct 2026 16:25:11 +0000
ROA not after: Fri 22 Oct 2027 16:30:11 +0000
asID: 136787
IP address blocks: 5.183.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c0:0b:29:74:5d:0d:3f:bd:60:5b:67:15:9b:62:02:05:cb:4c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:11 2026 GMT
Not After : Oct 22 16:30:11 2027 GMT
Subject: CN=5D85CC6015B8A921583DDAE6ABC39CB847853A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:b8:46:8d:15:12:f8:0e:28:59:f3:07:6b:
71:c5:9d:ce:3f:b0:73:e1:57:30:83:80:b1:fe:ee:
2f:e6:5d:f3:ad:b4:08:c9:23:f2:f7:3c:73:33:f2:
f6:9a:a0:a2:30:a6:2c:b8:c2:67:c2:ee:79:ba:43:
5f:1d:e2:bc:cf:78:12:9c:db:b0:69:35:35:aa:6b:
a0:f4:aa:91:8f:6f:88:44:06:51:7e:67:02:4d:83:
a1:98:2b:13:9e:31:8b:dd:d3:17:e5:fa:c4:60:ac:
e0:16:23:d7:19:21:b9:28:00:e4:25:82:f0:4c:be:
44:fb:a6:3a:eb:05:27:01:00:d2:7c:50:d7:9d:31:
eb:a1:55:63:72:da:68:40:32:d4:92:da:ea:fd:b4:
d3:46:d4:f7:37:9c:04:51:22:e1:56:86:17:b4:ec:
ca:84:bb:ba:2f:1f:64:23:90:30:86:e5:c6:74:df:
9f:b4:ca:0a:fb:b0:ed:c9:f8:6b:09:a2:24:a7:60:
0c:0c:f7:48:b7:b6:44:21:96:ab:3f:e7:3e:47:45:
7c:c2:80:4a:27:73:ce:80:17:5a:f3:39:a2:ac:cb:
5c:65:69:9e:b4:26:19:78:49:ca:c8:89:4d:be:ea:
43:0e:5b:00:e0:39:55:1d:e6:5c:15:85:87:07:30:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:85:CC:60:15:B8:A9:21:58:3D:DA:E6:AB:C3:9C:B8:47:85:3A:61
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.34.0/24
Signature Algorithm: sha256WithRSAEncryption
da:74:43:c6:0d:14:d1:17:c2:f2:65:34:a8:58:00:8c:d9:7b:
85:f2:9e:f6:fd:79:d4:26:84:d6:37:b9:5d:61:81:30:31:9d:
4c:85:4a:c7:4b:a8:1b:aa:ec:85:71:81:de:6a:95:a7:fd:73:
a6:f8:1a:35:d1:42:18:b5:c5:8c:d8:91:fc:14:05:64:ea:86:
fa:7b:99:35:3f:c1:32:32:30:48:06:08:32:0f:d0:85:57:07:
32:02:4d:bb:b2:f6:2e:b5:93:bc:e8:2f:47:07:67:d8:44:75:
77:f2:86:cb:7e:48:f4:51:8b:69:e6:32:3b:97:5a:46:9b:31:
b5:3e:3a:b1:62:40:09:5d:32:86:29:b8:3b:bf:e8:7b:e7:bd:
7b:d6:57:69:f7:93:7e:65:48:4e:3b:64:47:e9:1c:97:9b:60:
d8:c7:33:76:14:f8:99:35:aa:23:d9:28:5e:f6:8f:73:80:05:
71:38:ae:08:63:dd:d6:7f:8c:8c:a2:05:1d:a3:6f:02:c9:9a:
8f:35:84:8a:10:06:00:fa:82:72:19:04:86:03:1d:80:b3:c8:
c3:d8:da:1a:bb:80:55:d2:56:4b:e1:f5:df:d7:dd:ca:cf:a6:
f3:bf:b0:de:5a:9d:93:fb:4f:9e:ba:c2:96:01:f5:de:38:5e:
3a:ae:06:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:42:12 2026 by rpki-client