Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa
File: 34352e3132382e3136302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: c5PytIedqx72E8IBBPLt/ZPjdpbYVJt7K+3lAxW9pGY=
Subject key identifier: 05:96:51:51:6E:51:AA:BC:53:F4:88:D9:04:C1:50:95:43:27:DC:72
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1E915086A82B0827E09A9A3F2E99A1274DD641BF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa
Signing time: Fri 23 Oct 2026 16:30:10 +0000
ROA not before: Fri 23 Oct 2026 16:25:10 +0000
ROA not after: Fri 22 Oct 2027 16:30:10 +0000
asID: 47583
IP address blocks: 45.128.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:91:50:86:a8:2b:08:27:e0:9a:9a:3f:2e:99:a1:27:4d:d6:41:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:10 2026 GMT
Not After : Oct 22 16:30:10 2027 GMT
Subject: CN=059651516E51AABC53F488D904C150954327DC72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:0d:1f:7a:b7:19:28:69:b1:83:ae:52:43:
a2:b0:f3:6d:6c:9b:b2:12:9f:3d:95:d1:07:ff:a4:
c0:ff:85:85:91:e3:00:8d:64:e0:9e:e8:35:ba:e7:
6c:ab:9b:81:4f:78:0b:8b:52:94:bc:d5:d3:06:f9:
99:f7:9d:88:e2:0e:aa:b3:d3:ad:24:4a:03:fe:6a:
20:ef:c0:e7:c7:61:ea:28:5e:44:5c:ee:f5:aa:64:
88:bc:80:6b:53:69:2c:2f:e5:c8:60:4a:6d:1c:17:
5e:59:c6:9d:fc:15:ad:90:8c:ee:4c:ef:ff:35:9c:
1e:06:7e:98:6b:29:c8:31:23:75:14:d1:db:e2:2c:
7a:df:e4:3f:fd:26:ae:65:90:f1:4c:4a:50:af:98:
e1:b9:b9:50:8e:1e:22:78:9f:8e:13:93:4f:9c:a1:
51:76:a5:09:3c:a9:7b:a3:2b:17:4e:80:94:e5:34:
c6:c0:19:bd:af:23:85:28:ce:ba:4e:e2:0c:84:b4:
b5:4a:07:cb:f1:78:b4:a2:bc:6f:c3:9e:47:29:54:
0a:17:2b:c0:fe:fb:84:7a:89:88:d0:66:c5:a7:75:
fd:68:bf:80:48:e3:0d:8e:d6:4a:90:e5:32:8c:71:
e3:37:d3:59:bd:fe:6b:92:2d:c1:0c:47:77:01:51:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:96:51:51:6E:51:AA:BC:53:F4:88:D9:04:C1:50:95:43:27:DC:72
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:bf:5b:88:25:f1:13:19:56:5a:f5:4b:cc:6d:48:4f:65:be:
e5:76:e6:34:02:26:e0:f9:f0:d4:ad:9f:56:50:52:a3:94:58:
0b:d3:17:b5:4f:6d:cf:8b:6f:06:0a:42:77:7f:82:eb:d9:1c:
c3:b1:39:91:54:99:0e:92:6b:5b:ff:eb:e5:f7:54:1f:b5:b5:
80:28:65:d5:1c:ab:a0:35:93:99:ba:28:0d:3b:c3:75:7b:4c:
4c:17:0a:6c:60:da:0f:e7:43:71:8c:00:b2:61:a2:a0:3b:65:
df:66:75:38:84:e6:41:aa:6b:2c:17:44:0d:d8:dc:42:f3:7a:
cc:49:7c:1e:04:99:e7:3a:b5:ac:c0:93:66:7d:37:50:ce:45:
d2:fb:7a:37:74:90:4d:53:a2:5e:6d:da:4f:cc:3a:b8:9b:9e:
98:69:ee:4b:91:c5:1d:4d:dd:7f:6a:9b:ba:a9:85:ef:b4:12:
aa:b4:ee:41:3a:af:d9:55:40:13:b0:7b:3b:e9:a2:a2:ae:28:
e4:9e:14:fe:3b:fc:e2:35:bc:d9:79:2d:40:e0:8e:06:67:79:
45:0d:cc:83:44:b0:73:27:a8:74:3a:1c:8e:07:32:d8:74:7c:
3d:35:73:5f:a3:5a:3c:44:af:c9:9e:75:c9:ec:5b:a2:4d:88:
24:b4:96:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:11:37 2026 by rpki-client