Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139332e302f32342d3234203d3e203539353530.roa
File: 34352e3133372e3139332e302f32342d3234203d3e203539353530.roa (raw, json)
Hash identifier: 95brDgFOy7Ks8kLD4ihpPvxN3eQyPG4cNjkI9Ivc/HE=
Subject key identifier: C1:78:D2:3A:57:4D:AE:5C:4C:7B:BC:7B:13:0E:49:2C:03:53:C2:FB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7FB9957726AB8242EB882CBD6DE49B1EB3CCD230
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139332e302f32342d3234203d3e203539353530.roa
Signing time: Mon 07 Sep 2026 18:47:27 +0000
ROA not before: Mon 07 Sep 2026 18:42:27 +0000
ROA not after: Mon 06 Sep 2027 18:47:27 +0000
asID: 59550
IP address blocks: 45.137.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b9:95:77:26:ab:82:42:eb:88:2c:bd:6d:e4:9b:1e:b3:cc:d2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 7 18:42:27 2026 GMT
Not After : Sep 6 18:47:27 2027 GMT
Subject: CN=C178D23A574DAE5C4C7BBC7B130E492C0353C2FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:3f:ac:e8:21:bf:b9:4c:bf:41:ef:65:6d:
19:2f:ea:08:a3:00:23:bc:85:c6:21:c4:f4:86:5a:
9b:7c:c5:02:3c:e7:2f:4f:db:74:6a:de:8e:7b:ee:
a6:15:84:94:e7:90:07:59:e2:f9:d5:14:8b:e0:7c:
8e:53:40:34:c7:cc:ac:1e:b4:6f:c6:b2:81:48:b7:
53:83:b6:d0:a6:2b:72:0f:52:fa:4e:78:1e:a8:5a:
8e:ce:3b:11:bc:5d:e7:da:4a:46:20:0c:65:c8:4a:
3b:78:38:c1:d2:c7:66:77:9a:c1:14:87:24:e5:d5:
f7:95:a8:03:e9:76:b5:00:c9:ff:f8:4c:ee:cc:f6:
d6:92:e0:82:f4:eb:81:a2:5d:cf:6b:fd:61:c7:dc:
90:fe:e0:93:c9:ca:74:a9:3f:fa:c4:ee:73:0c:4a:
19:a3:17:c5:41:34:9a:28:c8:79:2f:eb:cb:9b:69:
a7:7a:b3:15:b4:e9:3c:dd:58:eb:37:12:73:a8:88:
96:1c:c3:85:19:68:24:ff:61:0b:99:29:dd:52:8c:
bb:61:8e:8d:ed:61:44:dd:ce:4a:fb:d5:a6:b7:d8:
d6:13:d7:f2:e7:35:d6:e6:e9:d5:35:dd:be:3f:4b:
e7:81:70:62:54:51:bc:7a:27:c0:36:b9:9e:bc:5f:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:78:D2:3A:57:4D:AE:5C:4C:7B:BC:7B:13:0E:49:2C:03:53:C2:FB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139332e302f32342d3234203d3e203539353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.193.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:c4:ab:17:2c:a9:70:ab:b7:51:35:db:3a:c1:d8:43:ca:30:
69:43:1c:38:01:d2:8f:1b:33:6c:13:21:54:9d:58:a5:47:78:
5f:9b:29:1a:29:48:77:77:2a:d5:57:f7:54:58:23:86:54:03:
0d:48:a1:aa:97:bb:7f:bc:5f:79:e9:80:92:60:ac:b3:3f:97:
4a:ab:69:2a:20:0d:4a:3e:bc:16:d8:8a:c5:35:c0:8e:d5:e1:
2d:e6:96:00:25:e9:57:24:46:28:6b:75:0f:87:92:97:5c:39:
16:a3:f3:c5:ea:62:df:67:b5:f2:c0:54:94:cd:57:b1:7d:6f:
91:39:29:9c:cf:37:68:7e:55:5d:5e:7f:f5:87:a5:18:fc:7d:
d8:6a:b4:84:9e:b1:ac:15:e7:e5:1f:71:e7:93:b3:48:fe:06:
23:a8:64:a9:f6:d4:0e:ec:4c:27:26:dd:22:8b:23:bb:4b:a2:
c3:60:18:dd:27:51:9f:c7:62:e8:db:61:bd:d2:52:82:30:54:
62:5d:c0:17:47:c6:7b:5b:96:6c:ed:62:46:63:b2:48:52:a6:
5d:37:6c:49:88:6d:eb:49:7e:d3:5e:7b:bf:51:9b:c4:1c:64:
fd:11:00:55:02:cb:ac:19:96:09:36:57:b1:de:85:c4:33:77:
13:19:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:02:16 2026 by rpki-client