Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135372e302f32342d3234203d3e203437353833.roa
File: 34352e3133322e3135372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: NnWxHo9uDjxT62LvqqTlZ0RgEGD0n/sHtXSScoPr2uQ=
Subject key identifier: A9:0E:22:A4:F7:87:84:A9:7F:B5:18:C7:9E:1A:BD:FD:DC:B7:43:84
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7E05EA0AEC303290406D097C6358AC50D6203E8C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135372e302f32342d3234203d3e203437353833.roa
Signing time: Fri 30 Oct 2026 12:32:13 +0000
ROA not before: Fri 30 Oct 2026 12:27:13 +0000
ROA not after: Fri 29 Oct 2027 12:32:13 +0000
asID: 47583
IP address blocks: 45.132.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:05:ea:0a:ec:30:32:90:40:6d:09:7c:63:58:ac:50:d6:20:3e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:27:13 2026 GMT
Not After : Oct 29 12:32:13 2027 GMT
Subject: CN=A90E22A4F78784A97FB518C79E1ABDFDDCB74384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ed:43:aa:ac:4d:3d:08:39:38:3e:be:38:fb:
cf:03:98:58:b0:c5:6a:03:99:4a:f2:0c:e1:1d:d5:
6b:30:88:25:ab:52:a3:58:95:ff:bb:f9:23:9c:98:
84:60:51:58:15:fc:13:ac:81:82:cb:72:cb:05:cd:
55:82:f4:2f:9b:09:9e:c2:b2:c9:2a:2c:f1:90:21:
87:99:b5:91:a6:04:0b:d6:ca:c9:f0:3a:3d:4d:81:
93:22:59:ab:f5:f7:4f:13:3b:c7:ea:8f:ef:d8:b4:
dd:f8:00:90:ea:a5:04:6f:22:fb:23:10:77:d1:c9:
24:e2:41:05:6e:aa:e8:5f:ef:3e:d8:50:8c:96:df:
cc:ff:a4:8e:88:3f:a3:18:4f:c0:ba:89:08:6e:f9:
f4:20:f4:99:8d:23:27:97:47:3c:0c:c5:36:06:8e:
5e:31:b6:40:f3:a1:0e:da:b5:b6:a0:68:41:66:ce:
4c:b1:91:62:18:35:40:72:83:2e:c4:c9:b9:a0:ed:
f6:ac:c4:0b:0f:fc:78:4c:36:12:60:20:1f:21:cb:
26:24:11:b0:20:53:a1:b4:dd:ee:e6:86:e7:cb:47:
9a:00:3c:3a:6a:53:68:c6:b0:d8:2a:b1:8c:0e:73:
bb:6f:03:e0:18:fa:29:f0:49:27:06:ba:39:89:0f:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0E:22:A4:F7:87:84:A9:7F:B5:18:C7:9E:1A:BD:FD:DC:B7:43:84
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135372e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b2:4a:c9:b2:ce:8b:a2:2c:3a:32:72:58:31:97:e3:c1:fd:
da:30:44:86:09:e7:ee:55:c8:88:eb:88:3a:d3:55:24:5b:52:
fc:c1:65:88:93:16:47:bf:b0:66:45:85:82:5c:27:75:25:81:
f0:1a:c7:66:67:64:c6:2b:28:d9:ea:89:cd:21:5e:61:7a:e9:
b9:10:94:21:ad:f6:2c:15:bc:e7:7a:35:77:30:08:67:ff:d1:
43:8a:d2:bf:85:3e:f6:84:44:79:f9:bd:b6:8e:92:cb:7c:93:
52:fc:e8:77:b6:3e:4a:33:f7:9a:e2:72:8a:04:e1:11:e0:35:
4b:ea:78:bd:5f:57:ae:5c:76:0a:e0:bd:4b:bf:24:0d:66:c1:
43:39:94:d3:7e:0a:4e:53:87:73:34:13:15:18:d1:13:30:12:
d6:03:0e:c2:29:39:0f:66:29:fb:af:86:88:e0:ab:67:d5:98:
f9:9e:cc:3c:d0:c6:b6:6a:5d:7f:e0:7a:74:88:85:90:4e:64:
20:94:18:8c:9b:d5:8a:f0:ae:b7:13:e9:03:45:bd:4c:e9:8a:
ce:6e:b9:33:54:e5:97:48:fa:82:81:56:ea:3e:2b:96:07:10:
e0:dc:39:4e:60:34:36:c0:a6:df:03:52:96:46:fb:62:e0:e5:
5b:81:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 06:04:49 2026 by rpki-client