Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33352e302f32342d3234203d3e20313336373837.roa
File: 352e3138332e33352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: iE8IliCZDVX0JJC+XQrD4AsOvAlS9VnMKevLkA8Nokw=
Subject key identifier: 72:DB:83:78:FC:FC:ED:45:A8:40:51:62:F0:F2:A5:3E:E1:DB:08:2A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6F9BD4C1C552CDEDD758DCB1E2AD7D84CDF0B717
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:23 +0000
ROA not before: Fri 23 Oct 2026 16:25:23 +0000
ROA not after: Fri 22 Oct 2027 16:30:23 +0000
asID: 136787
IP address blocks: 5.183.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:9b:d4:c1:c5:52:cd:ed:d7:58:dc:b1:e2:ad:7d:84:cd:f0:b7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:23 2026 GMT
Not After : Oct 22 16:30:23 2027 GMT
Subject: CN=72DB8378FCFCED45A8405162F0F2A53EE1DB082A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:04:72:88:95:ba:52:8b:8d:6a:39:c1:7d:
23:fe:92:6b:7a:99:e4:d3:bf:e1:f9:c8:c6:52:74:
2a:a4:1f:5b:ff:e2:58:95:5b:c8:83:fa:6a:77:76:
c7:91:75:8c:c0:e4:49:d9:bd:ea:09:fe:54:7d:56:
48:48:ea:af:15:ea:55:bb:34:11:c8:c4:a5:11:a5:
9c:f1:84:e1:1a:d4:67:ff:05:44:50:2a:43:65:c9:
7a:8b:a8:4e:f8:f5:9d:0a:e8:f8:0b:39:f2:ce:33:
dd:88:f8:3e:79:de:70:3a:cd:a3:61:77:34:d3:66:
b3:f6:e6:fb:28:ca:bf:2e:4a:e3:bb:18:d8:51:6b:
b2:84:be:8d:0b:a0:82:45:84:6d:ce:b4:2b:c1:14:
d5:61:39:ed:fc:1a:83:29:0f:dc:2b:61:1b:82:7e:
00:81:b4:51:1f:47:4a:c2:90:68:56:21:22:c9:13:
16:3d:92:8e:6a:5a:af:32:51:a7:0e:61:bb:b1:30:
27:8e:81:83:c6:15:27:fa:78:87:99:31:2a:7a:43:
d8:77:16:d7:96:0f:52:51:9a:93:05:e9:b9:b0:22:
6f:89:fb:2e:a0:ae:7a:fc:b9:ce:80:10:09:16:12:
c1:68:89:9b:d7:6c:b1:e5:1c:76:ed:e2:e0:c5:33:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DB:83:78:FC:FC:ED:45:A8:40:51:62:F0:F2:A5:3E:E1:DB:08:2A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ae:95:67:32:b9:84:f3:82:5a:ef:05:cb:68:5f:1f:cc:5e:
b8:11:16:8c:6f:ae:a4:0d:f8:50:5e:cb:d9:e6:ba:a6:95:ef:
53:06:ce:80:52:3c:7c:69:9f:98:0d:52:c4:12:45:bd:d0:ad:
d9:31:f2:96:77:aa:58:f9:6c:81:06:7a:93:85:37:1d:29:6e:
df:7f:d6:49:0d:36:54:0b:42:c7:67:08:d3:2e:40:79:f8:31:
66:74:20:68:33:d2:6d:f4:bc:70:ec:05:df:54:42:78:d5:74:
a1:f6:ed:70:95:25:c7:3f:1d:23:be:c1:ae:ae:99:cb:41:2c:
82:b5:05:ee:9a:94:59:74:cc:c5:66:bf:4a:b1:95:3c:68:22:
e2:ae:81:88:0b:7e:ec:43:14:58:73:23:41:bd:af:1f:45:de:
1b:2c:7b:87:6f:c5:40:0c:a9:88:94:b2:05:86:5b:97:1f:d4:
30:57:52:35:22:3c:e3:84:3d:a8:e1:73:67:f5:78:93:44:f7:
5f:d1:db:d5:6b:51:1a:3c:84:6a:b0:95:20:ee:ac:6f:0f:0b:
0b:d7:de:24:65:60:50:8b:2c:a9:37:8b:3f:16:c7:05:cd:e2:
59:12:20:10:73:e0:ed:bb:df:56:e4:6b:32:9a:4d:fa:6d:af:
23:19:68:a7
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUb5vUwcVSze3XWNyx4q19hM3wtxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MjNaFw0yNzEwMjIxNjMwMjNaMDMxMTAvBgNV
BAMTKDcyREI4Mzc4RkNGQ0VENDVBODQwNTE2MkYwRjJBNTNFRTFEQjA4MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnAgRyiJW6UouNajnBfSP+kmt6
meTTv+H5yMZSdCqkH1v/4liVW8iD+mp3dseRdYzA5EnZveoJ/lR9VkhI6q8V6lW7
NBHIxKURpZzxhOEa1Gf/BURQKkNlyXqLqE749Z0K6PgLOfLOM92I+D553nA6zaNh
dzTTZrP25vsoyr8uSuO7GNhRa7KEvo0LoIJFhG3OtCvBFNVhOe38GoMpD9wrYRuC
fgCBtFEfR0rCkGhWISLJExY9ko5qWq8yUacOYbuxMCeOgYPGFSf6eIeZMSp6Q9h3
FteWD1JRmpMF6bmwIm+J+y6grnr8uc6AEAkWEsFoiZvXbLHlHHbt4uDFM/J/AgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUctuDePz87UWoQFFi8PKlPuHbCCowHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMzMmUz
MzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQABbcjMA0GCSqGSIb3DQEBCwUAA4IBAQBdrpVnMrmE84Ja7wXLaF8fzF64ERaM
b66kDfhQXsvZ5rqmle9TBs6AUjx8aZ+YDVLEEkW90K3ZMfKWd6pY+WyBBnqThTcd
KW7ff9ZJDTZUC0LHZwjTLkB5+DFmdCBoM9Jt9Lxw7AXfVEJ41XSh9u1wlSXHPx0j
vsGurpnLQSyCtQXumpRZdMzFZr9KsZU8aCLiroGIC37sQxRYcyNBva8fRd4bLHuH
b8VADKmIlLIFhluXH9QwV1I1IjzjhD2o4XNn9XiTRPdf0dvVa1EaPIRqsJUg7qxv
DwsL194kZWBQiyypN4s/FscFzeJZEiAQc+Dtu99W5Gsymk36ba8jGWin
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:37:45 2026 by rpki-client