Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134332e302f32342d3234203d3e20313336373837.roa
File: 352e3235322e3134332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: EtOfKKx+U3sVRIwTFXH6mxDBZZJqOtIyhOM0nQhdWO4=
Subject key identifier: 9D:D3:79:1F:08:1C:99:11:A3:70:D6:2C:2C:5D:8B:90:FA:98:2B:14
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5343B05C7BD63CC8C6B0A2342650196FF90180BC
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:26 +0000
ROA not before: Fri 23 Oct 2026 16:25:26 +0000
ROA not after: Fri 22 Oct 2027 16:30:26 +0000
asID: 136787
IP address blocks: 5.252.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:43:b0:5c:7b:d6:3c:c8:c6:b0:a2:34:26:50:19:6f:f9:01:80:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:26 2026 GMT
Not After : Oct 22 16:30:26 2027 GMT
Subject: CN=9DD3791F081C9911A370D62C2C5D8B90FA982B14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:a5:d3:d3:f9:fa:74:ad:b2:d2:a0:32:77:
58:43:32:eb:55:21:37:24:39:29:c5:1e:4d:6d:93:
2e:9c:d3:cb:87:cf:f0:a3:db:bf:59:37:ac:21:3d:
81:16:12:ed:a3:b8:42:83:3f:2a:84:2e:89:e1:c1:
fa:69:c0:9a:b6:ee:62:d3:f1:ad:e9:3c:83:88:3a:
0b:b4:59:97:d1:5e:dd:14:4d:18:d7:06:d3:98:1b:
2e:1f:28:8e:7d:56:9b:c0:a6:68:fb:9b:bc:c8:1b:
ba:a5:42:34:77:7f:d7:c4:02:12:7c:dc:a0:90:26:
08:95:58:26:22:36:61:de:fd:90:3d:c9:23:67:72:
3e:21:fa:f8:b7:72:78:55:01:09:3f:66:c6:87:23:
f0:58:c7:4d:15:3d:e8:01:b9:4c:a2:2c:f1:9c:1a:
7c:a1:a1:6e:a1:ae:90:56:82:1f:23:5f:1d:43:59:
f8:48:54:98:ed:7e:c2:9b:e9:d5:35:ea:76:4e:4c:
af:b9:db:98:0d:4e:9c:33:fd:4a:29:f5:cb:d1:1b:
61:45:ef:9e:ec:d1:75:d5:ec:8e:f4:f1:5a:9d:72:
3a:7e:ab:11:26:4b:3c:ef:c2:4a:a1:4c:f8:79:60:
b1:c4:30:d2:da:2e:81:c1:f7:40:1c:6b:bc:2e:74:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D3:79:1F:08:1C:99:11:A3:70:D6:2C:2C:5D:8B:90:FA:98:2B:14
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.143.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:22:fa:9f:38:83:93:d1:b9:b6:1f:78:75:f3:65:75:22:4b:
8f:9f:36:ed:2e:22:6f:3d:38:da:a9:9d:26:b4:02:6b:23:68:
d7:fb:05:38:9b:58:fd:cb:68:7c:5e:54:14:5b:9f:d4:08:73:
16:4b:83:d0:32:63:ab:98:17:c6:f9:eb:3c:5a:57:8a:c2:75:
07:05:31:34:08:0b:6a:71:d5:a9:bc:33:90:12:9a:0e:63:3e:
89:35:a4:0c:ca:cd:91:e3:71:52:67:c7:7d:22:66:11:04:18:
84:91:20:95:bd:f9:9e:4d:f7:b1:98:3d:ad:40:ff:8a:36:89:
23:cc:76:d1:9b:c6:3e:fa:10:9f:68:cd:e8:e5:86:77:86:0b:
90:78:69:a2:b8:12:c2:95:31:6b:32:a1:75:17:6e:a9:5c:67:
4e:27:d3:82:a2:c6:a8:74:d6:fd:c8:55:e7:46:e3:20:68:c2:
00:5d:57:d9:04:64:3f:26:24:06:d9:90:ca:a6:46:01:58:39:
fd:25:69:1c:28:d1:a6:2b:b2:f3:15:8f:84:81:fb:e9:8c:2a:
d4:61:6a:60:79:5a:be:b8:34:d9:d7:3d:74:76:10:92:ae:2f:
d4:fb:92:63:85:ee:a5:5f:3c:58:a5:ff:fe:2e:2c:92:50:60:
03:3c:c3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:22:03 2026 by rpki-client