Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130362e302f32342d3234203d3e203133333335.roa
File: 34352e3133302e3130362e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: hZYbUtbyvyESG4NWevGCLoLbsZTOnGFTGQMISLM8PQo=
Subject key identifier: B0:B0:5E:24:4E:69:85:EF:A5:76:48:A4:E3:2A:A0:4A:63:BC:75:B9
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 57351EA77E2031B7E1632ABDFC2DD6B2D9B593B4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130362e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:02 +0000
ROA not before: Wed 09 Sep 2026 19:31:02 +0000
ROA not after: Wed 08 Sep 2027 19:36:02 +0000
asID: 13335
IP address blocks: 45.130.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:35:1e:a7:7e:20:31:b7:e1:63:2a:bd:fc:2d:d6:b2:d9:b5:93:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 9 19:31:02 2026 GMT
Not After : Sep 8 19:36:02 2027 GMT
Subject: CN=B0B05E244E6985EFA57648A4E32AA04A63BC75B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:2e:8b:06:6a:bb:cc:48:da:5d:b6:eb:36:
4a:76:2d:58:2f:cd:c1:d6:0b:6b:f4:9b:70:cf:c4:
1d:29:a4:86:e2:25:b4:ff:5a:0b:ac:03:f5:2f:7b:
73:44:89:71:e8:b3:d0:fa:ce:9e:fa:fb:65:20:62:
fe:f8:33:e9:67:9b:dc:36:38:a4:11:54:a4:c1:6c:
8b:cf:ce:ec:60:5f:82:39:45:dd:94:29:22:50:e9:
ae:19:3e:fd:e9:90:06:70:9f:dd:1a:fd:19:62:fe:
68:61:5e:1f:cb:23:7d:3b:33:3b:a3:8a:e2:4d:64:
ef:4d:42:e0:d1:86:85:28:b7:93:55:99:94:4f:a0:
1e:0f:95:08:cc:37:a7:73:5a:93:ca:50:46:e1:70:
27:a1:f7:24:77:06:24:70:19:cb:0b:29:91:cd:ef:
9b:3f:7c:a5:9a:cc:08:d3:2c:8d:8b:a1:05:3e:bb:
03:5d:11:f5:46:4e:b2:b9:2d:32:76:6e:fa:db:da:
8b:53:38:05:c5:7f:aa:36:30:99:9a:26:a3:07:23:
29:b8:2d:33:6d:d7:98:e6:74:9a:4b:c0:2d:c9:77:
33:06:cd:f7:4f:74:11:7f:e6:b8:8e:8a:e5:4f:2c:
f8:9f:3b:b3:f4:a8:95:d0:50:54:2a:73:79:f5:92:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B0:5E:24:4E:69:85:EF:A5:76:48:A4:E3:2A:A0:4A:63:BC:75:B9
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130362e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.106.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f0:e8:7a:d6:d3:d5:89:c2:5b:12:2f:f1:0e:8a:e6:64:00:
ec:42:1a:b0:14:ca:11:5a:31:1f:ca:fc:80:cb:38:bc:7c:b2:
5a:ca:87:4a:bc:18:22:00:39:f1:c1:ef:ab:fa:1d:b4:16:0c:
ff:82:80:f4:7d:1b:d6:37:32:6a:70:f5:0f:7b:3c:ba:4e:a7:
aa:bc:7f:d4:5c:1e:91:fc:54:c1:5e:e2:f8:2a:b1:0f:64:73:
61:e9:2a:e2:d9:c1:61:b6:b3:71:7f:8d:fe:8c:e6:d5:b8:78:
7a:3c:d9:3e:37:4a:96:d2:77:40:08:77:7d:38:7b:eb:1e:e2:
37:fe:06:d7:db:af:24:c1:ed:2a:9e:55:e3:f7:5f:a1:4c:c7:
ca:be:76:b4:d0:9f:ae:81:d2:a6:5a:e4:a3:a2:5d:15:12:ff:
d6:af:07:f2:80:07:f7:b6:71:ad:63:df:ed:5a:64:cb:4c:7c:
f6:e3:29:a6:ce:8c:03:e9:3a:f9:e8:f8:0f:fb:35:89:65:e5:
33:b8:d6:03:5f:68:81:fa:f7:c1:7f:22:75:78:f9:40:8c:b7:
82:83:14:1a:fc:a2:b3:13:76:65:86:16:b8:2c:b1:47:5e:50:
9c:79:e2:b9:48:73:1b:b0:e6:ce:16:4a:c8:80:29:57:24:de:
98:1e:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:03:45 2026 by rpki-client