Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35382e302f32342d3234203d3e203430363736.roa
File: 34352e31332e35382e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: 8pXZA9xasGzzloNpe+JfDVsj6BjUVQWrIQGzm5HWLQg=
Subject key identifier: EE:A1:45:7D:0B:6B:FE:5D:F5:A5:63:55:CA:97:6E:42:0E:29:55:D0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3B7071CBEDFFC7CC818E0D1F82A22444B4C67904
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35382e302f32342d3234203d3e203430363736.roa
Signing time: Fri 30 Oct 2026 12:31:45 +0000
ROA not before: Fri 30 Oct 2026 12:26:45 +0000
ROA not after: Fri 29 Oct 2027 12:31:45 +0000
asID: 40676
IP address blocks: 45.13.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:70:71:cb:ed:ff:c7:cc:81:8e:0d:1f:82:a2:24:44:b4:c6:79:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:45 2026 GMT
Not After : Oct 29 12:31:45 2027 GMT
Subject: CN=EEA1457D0B6BFE5DF5A56355CA976E420E2955D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:37:41:1e:76:97:e0:9d:71:46:24:7a:19:
03:ba:0a:76:e0:a6:ea:2c:c1:d0:bb:30:99:95:e9:
1f:59:1b:a8:88:74:46:3f:82:c3:4a:0f:21:cf:05:
23:0b:c9:c6:4a:6c:e0:67:8b:10:fd:bb:c4:52:b2:
09:5b:c0:b9:29:81:8d:27:7e:d1:e0:a8:be:85:53:
ab:e0:d9:a2:f9:d2:6e:0d:21:ce:b7:20:37:94:ec:
f9:3b:f4:7a:8f:b5:c8:92:05:ae:88:9f:b6:e3:21:
b0:16:d4:75:38:70:18:86:e7:18:90:fb:06:86:a5:
1a:15:e7:de:98:8d:df:51:72:33:14:13:b1:bd:e6:
ef:14:76:19:62:18:0b:d1:8e:53:ba:b3:9d:95:00:
ce:a1:ef:2e:1b:95:f2:92:9b:3c:52:b6:d7:7c:08:
32:8a:f0:53:51:6b:23:48:ae:17:8b:e0:81:02:72:
ac:79:ad:01:82:6b:da:75:f0:bd:22:23:2c:db:69:
7f:12:c3:3f:51:5f:bb:41:4d:9d:1b:83:3d:b6:89:
b2:ea:a2:79:3a:ce:62:37:3c:d2:22:3c:ed:b8:5d:
e9:91:eb:af:f5:b4:5e:ab:58:cd:a6:7f:19:5d:6b:
c7:45:51:a9:64:53:cb:c1:be:80:b9:5c:bf:27:c0:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A1:45:7D:0B:6B:FE:5D:F5:A5:63:55:CA:97:6E:42:0E:29:55:D0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35382e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:4e:84:38:91:d8:0e:fd:c0:f1:91:22:33:36:82:4d:de:98:
e8:38:5d:45:7a:92:4f:d8:ce:6f:0b:a1:e9:ba:08:4c:8e:d2:
e9:d4:73:f5:3d:3b:dd:62:0f:06:e2:4c:9f:f6:e2:f6:f9:e1:
ab:58:c1:03:53:67:b9:e9:51:52:7e:80:67:8c:46:28:84:43:
34:a8:29:9b:1f:9f:94:bf:53:4d:11:63:2e:9f:21:9f:e2:bf:
c1:27:c0:5c:28:dd:73:4d:51:da:ac:20:0c:0e:83:d9:36:ae:
31:1c:d3:41:dd:a7:e3:20:04:70:0c:79:a8:e2:62:5d:b7:dc:
5d:d9:8a:36:98:05:89:c8:9c:41:03:a8:03:a9:81:2b:73:cb:
89:b8:f3:6d:ab:e8:50:27:f7:ae:7a:35:49:db:f5:35:95:77:
9f:df:f8:5a:56:31:72:79:63:72:a2:3a:51:35:68:20:24:d8:
8f:01:bc:bd:73:d4:6b:62:55:6b:ba:4a:cc:af:49:64:a3:7d:
ea:45:83:68:0f:66:da:bb:f8:0a:1a:8b:1a:73:dd:46:b0:2d:
a9:10:21:aa:e1:22:0a:8b:9b:ab:09:d0:60:50:0a:de:cc:4d:
e7:27:2b:0f:b3:ab:10:6c:56:01:a1:d0:e9:f4:6c:17:da:fb:
18:d5:8a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:58:48 2026 by rpki-client