Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134302e302f32342d3234203d3e20313336373837.roa
File: 352e3235322e3134302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: jjlNp6BOlI9X2gEsVJmpQVNGxyvphy80DyHFSie2vLg=
Subject key identifier: C9:32:73:A8:74:75:B4:34:C8:96:46:B2:A4:D1:E6:20:4E:EC:E5:D6
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7E1FD1187025A7F7D9CE150BE9017C08612BA584
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:43 +0000
ROA not before: Fri 23 Oct 2026 16:25:43 +0000
ROA not after: Fri 22 Oct 2027 16:30:43 +0000
asID: 136787
IP address blocks: 5.252.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:1f:d1:18:70:25:a7:f7:d9:ce:15:0b:e9:01:7c:08:61:2b:a5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:43 2026 GMT
Not After : Oct 22 16:30:43 2027 GMT
Subject: CN=C93273A87475B434C89646B2A4D1E6204EECE5D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:8d:c5:28:e7:4a:bf:01:c6:64:f6:75:b5:
4b:d9:47:2f:63:c8:c4:03:a4:4a:4d:3c:d6:82:52:
ca:72:14:14:f4:ab:7d:cc:86:a1:81:fc:e8:17:2f:
df:e6:cc:8f:bf:bf:7b:ba:0d:a9:60:f4:f7:f2:45:
06:4d:d5:bd:e8:be:38:f3:50:d9:63:11:73:c8:91:
65:84:ac:50:0f:68:36:f3:47:0d:e8:05:71:28:77:
7f:54:be:94:72:13:4b:82:07:3a:3c:79:f2:98:a2:
0b:d1:b6:50:5a:6d:e0:49:25:4a:02:dd:ff:43:92:
40:d8:5e:c4:c9:15:33:d0:54:5c:72:98:cb:c1:56:
4e:b1:86:b3:51:e7:e7:75:e3:5b:4f:24:1e:da:11:
0b:98:08:ab:cc:98:40:56:04:bb:8e:c0:03:1a:34:
29:ee:93:37:31:9e:e2:04:5e:20:38:c7:c1:d7:da:
51:5d:a5:39:43:28:55:ca:be:51:d8:c4:5a:8f:bb:
54:8c:14:cd:15:5d:61:3a:c9:27:87:9b:1c:ae:58:
55:88:88:b2:46:0d:d7:43:5a:00:3a:64:eb:07:a1:
06:de:23:4a:1c:e6:4e:6f:24:01:82:f7:95:62:da:
d4:75:26:c9:bc:54:d7:39:15:bf:49:e0:90:a7:2a:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:32:73:A8:74:75:B4:34:C8:96:46:B2:A4:D1:E6:20:4E:EC:E5:D6
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.140.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:16:d1:bf:74:d3:cf:33:51:70:3e:b3:89:92:04:f1:66:3c:
03:37:52:c2:5a:2b:28:0c:fa:bb:49:13:89:ae:2e:93:02:5c:
d1:a1:0d:52:df:7f:ff:45:23:3c:c8:d9:f0:cb:5d:d8:9f:e0:
51:04:68:be:56:22:33:fd:e8:bf:38:b4:6e:c7:c0:50:4f:c4:
ac:3d:f4:14:21:9a:c4:ca:a1:fb:7e:1f:52:11:8b:d0:fb:13:
72:02:a2:43:61:4e:9c:e9:59:55:a0:3f:e0:8b:30:2a:55:69:
db:14:95:50:fa:9f:b8:3c:b6:cc:57:6f:71:9c:6e:43:0b:7c:
c8:32:5b:61:d8:0b:6a:65:03:bc:35:be:df:ab:b3:c1:ad:79:
a2:69:72:9b:8a:a7:d7:3d:f8:4c:9d:70:2e:e0:50:b1:0b:dc:
f4:40:6b:43:6c:a1:8d:6b:e9:ce:2c:59:aa:cd:9b:59:03:43:
72:15:d8:77:c2:8b:b0:b1:c0:04:81:2e:88:ac:5d:ed:49:3c:
19:28:02:db:11:2a:41:3c:d7:72:ad:db:2e:72:89:a0:40:2d:
f4:f9:8f:20:63:c4:77:1f:ca:d8:6a:68:54:68:6f:17:b6:72:
3f:f0:75:a9:d6:1f:4b:42:6d:3b:d2:3c:1a:8f:83:33:3a:e5:
e0:dc:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:45:59 2026 by rpki-client