Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134322e302f32342d3234203d3e20313336373837.roa
File: 352e3235322e3134322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: jfztCnpKYptjQG2q6UMVSZMk9N6eygiYnR+9/DXj/zo=
Subject key identifier: BA:A3:F4:D6:FD:27:E9:FC:93:72:92:CB:E2:36:C1:C6:BD:57:07:E2
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3104FC9B332E4EDD9B0CD86659835C0451037886
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:25 +0000
ROA not before: Fri 23 Oct 2026 16:25:25 +0000
ROA not after: Fri 22 Oct 2027 16:30:25 +0000
asID: 136787
IP address blocks: 5.252.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:04:fc:9b:33:2e:4e:dd:9b:0c:d8:66:59:83:5c:04:51:03:78:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:25 2026 GMT
Not After : Oct 22 16:30:25 2027 GMT
Subject: CN=BAA3F4D6FD27E9FC937292CBE236C1C6BD5707E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4c:47:02:35:1e:11:68:68:67:c8:3e:84:4c:
cd:97:a2:68:a2:24:5f:e8:26:40:0b:1d:a7:29:fc:
e4:8d:a7:ee:4f:7e:f9:0b:63:23:f2:86:0f:1d:be:
7b:ae:b5:d6:82:e1:e4:63:5e:95:71:5d:53:c1:1e:
72:88:f6:c3:78:fd:5d:44:15:2f:5a:7e:f8:55:8f:
93:25:f8:73:d4:fb:ea:5e:97:6c:94:82:b5:f9:50:
05:35:8c:14:98:4e:bc:e4:4a:c1:43:b8:3b:5f:a3:
80:f0:f2:6e:cc:c7:17:fc:db:72:9f:34:dc:49:90:
69:1a:ca:8a:68:83:99:d3:71:b2:dc:a1:19:c8:cc:
cd:ee:f7:d4:e7:2a:95:af:57:40:d3:0c:8e:a9:c7:
74:a9:d0:9c:b3:aa:3b:35:a9:cf:98:a7:8d:24:24:
44:57:c1:9b:e8:87:bc:13:a2:81:76:6b:00:c6:1d:
9c:80:9d:de:2a:2a:5d:d7:d8:83:19:e4:a2:44:f0:
91:fe:67:a5:a6:58:c3:a3:d5:a7:82:08:a9:83:97:
00:e6:75:6f:fd:a3:76:ef:46:52:82:64:47:28:69:
6e:cc:82:c5:3f:2d:f6:00:40:cf:de:42:ca:ab:86:
65:82:0c:df:19:7b:d5:72:f9:40:25:d2:d4:79:63:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A3:F4:D6:FD:27:E9:FC:93:72:92:CB:E2:36:C1:C6:BD:57:07:E2
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ff:63:94:4b:7f:40:3c:e8:da:92:2f:77:7a:3c:93:89:24:
b7:06:62:9a:56:b3:f6:5b:59:65:c5:69:8f:a6:5c:2d:ca:0c:
99:c9:dd:21:b5:15:f8:09:c5:55:de:94:86:0c:f5:73:1b:03:
69:49:4e:a0:d1:57:28:7c:17:ad:7e:31:41:ca:12:ed:f6:14:
8f:31:c3:ae:58:12:0e:b9:1c:d9:e3:a5:83:2d:5f:45:ba:fc:
88:7b:98:47:88:f6:76:b3:b2:e2:db:3b:e1:20:2a:19:5a:51:
c9:1b:3d:fa:61:13:b6:05:c6:02:24:a1:aa:30:2f:5c:7b:b1:
23:c2:ff:f6:86:fd:5f:89:2f:f2:93:be:6c:35:7f:94:5d:da:
8c:88:59:b7:af:c9:8b:a2:c9:32:e0:6a:12:a7:c7:47:e1:0a:
e7:28:fa:9f:cc:f2:28:b1:d1:79:a3:27:cc:46:61:d5:a8:a7:
c6:73:87:9c:44:0b:92:b5:37:01:0d:b1:74:07:ca:aa:1d:1e:
ba:da:a2:a8:ba:2d:1e:bb:75:1f:ca:7b:dd:01:89:4e:5d:3e:
0a:af:e0:59:ad:74:78:f3:77:20:86:44:3f:4d:c9:59:22:a7:
d5:85:65:3c:80:05:8d:cc:07:4b:e9:10:0f:c7:c3:46:b8:48:
0b:aa:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:32:45 2026 by rpki-client