Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138342e302f32342d3234203d3e20323132323338.roa
File: 34352e3134302e3138342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: romt/rFaggwdSaMHSViMwRvfwI9f+5VJJrz9TKuWZjg=
Subject key identifier: A9:69:21:31:1A:82:69:2F:C0:0E:F2:23:80:BB:D7:69:21:49:08:A4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 08B79821BB9DB03244C582FE9BE22315F351EABF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138342e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 29 May 2026 12:24:41 +0000
ROA not before: Fri 29 May 2026 12:19:41 +0000
ROA not after: Fri 28 May 2027 12:24:41 +0000
asID: 212238
IP address blocks: 45.140.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b7:98:21:bb:9d:b0:32:44:c5:82:fe:9b:e2:23:15:f3:51:ea:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 29 12:19:41 2026 GMT
Not After : May 28 12:24:41 2027 GMT
Subject: CN=A96921311A82692FC00EF22380BBD769214908A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:4d:bd:a3:60:73:56:f7:89:db:72:63:73:
ef:d1:41:58:95:06:d2:f2:69:e8:3c:7e:93:e5:0c:
2f:91:89:45:29:9c:43:be:6d:0c:e3:1f:39:db:a8:
03:d7:c6:06:56:7a:c9:31:48:fb:62:08:ac:b1:bc:
93:65:4d:c3:74:e1:c9:d5:fe:16:12:e0:0d:dd:79:
de:2b:6f:ab:eb:14:7c:ec:bf:f2:86:6f:c3:f0:95:
44:f1:ba:1f:1d:1c:29:7b:1e:f4:6d:d7:a0:d8:0e:
0e:b0:35:0d:75:f1:3b:bc:8c:b6:c9:d6:09:dd:b6:
4f:6e:b7:3e:c8:aa:66:63:d3:7c:a8:02:7c:1b:9e:
5c:cb:fb:d0:6d:65:2e:e8:bc:eb:4b:68:36:d3:9c:
e1:f5:81:7e:65:c4:97:a1:f9:8c:9e:4f:42:cf:5f:
91:36:91:b5:7d:93:47:46:24:63:a2:d3:ad:9a:de:
4d:14:41:e6:5b:45:5c:09:9a:4a:ba:66:ac:1f:24:
27:24:23:8a:a1:4d:50:47:a3:73:e2:ca:d5:15:fd:
54:1a:18:6e:03:2b:68:62:c7:33:aa:01:12:a2:5d:
a9:0e:5f:a1:c3:9a:fd:db:a9:ad:2c:df:69:bc:96:
ea:2c:d3:00:b0:35:4b:98:7d:d5:4c:12:a2:68:e3:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:69:21:31:1A:82:69:2F:C0:0E:F2:23:80:BB:D7:69:21:49:08:A4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.184.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:3e:77:44:fe:9b:cd:a1:67:34:db:bb:ba:c6:bf:88:d4:08:
6e:09:95:66:b8:34:fe:19:20:7b:3d:29:35:63:d1:cf:19:af:
11:e4:42:f0:be:2a:97:4e:4b:ea:87:98:7d:8f:fc:8a:fe:60:
f5:b0:a8:ea:e2:04:86:1e:7f:2d:3b:b2:94:6e:86:12:c0:60:
15:54:ee:44:56:a5:b2:3d:80:1e:10:26:f2:8b:8f:ad:1a:58:
7a:25:17:5c:23:08:2a:a9:3c:a6:93:35:57:60:df:4c:ec:8e:
7d:8f:b0:34:03:69:fc:fd:a1:81:82:e5:8c:ba:d5:08:aa:09:
21:d2:6c:d8:f3:13:4b:a2:2a:2f:f3:af:c9:f0:4d:81:51:1c:
4d:4f:57:84:bf:1b:2e:23:c4:22:23:77:2f:9e:62:da:47:8a:
64:3f:18:7c:e3:95:ba:d5:a8:9e:d9:9d:4c:77:77:5a:39:35:
75:10:c9:9c:d3:d6:07:df:38:2b:5d:9c:0d:b7:d3:c4:1a:f0:
8a:c2:98:74:ac:d0:e5:1a:80:d3:c2:79:54:4f:71:33:09:10:
6c:f4:eb:d7:99:55:5c:3a:05:9e:4d:6b:0c:58:fe:d0:b2:84:
12:f1:bb:6d:f5:15:32:5a:21:0b:47:c8:9c:7a:19:67:56:18:
9d:63:74:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:48:42 2026 by rpki-client