Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138362e302f32342d3234203d3e203235313938.roa
File: 34352e3134302e3138362e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: Td0zaeSW6B1//qiz7gsTTryKP87tgkrjvPFYMpwkVfM=
Subject key identifier: A9:10:85:46:2F:63:0D:7D:E2:0A:39:FC:6F:69:FC:96:B1:A0:35:88
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 26C0F828C32A05498EE34E3EBAF51C38EBD6137C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138362e302f32342d3234203d3e203235313938.roa
Signing time: Thu 10 Sep 2026 11:26:19 +0000
ROA not before: Thu 10 Sep 2026 11:21:19 +0000
ROA not after: Thu 09 Sep 2027 11:26:19 +0000
asID: 25198
IP address blocks: 45.140.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:c0:f8:28:c3:2a:05:49:8e:e3:4e:3e:ba:f5:1c:38:eb:d6:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 10 11:21:19 2026 GMT
Not After : Sep 9 11:26:19 2027 GMT
Subject: CN=A91085462F630D7DE20A39FC6F69FC96B1A03588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:bb:0d:5a:3c:a8:70:e2:41:93:10:b3:55:
c2:ec:4a:ec:5a:11:3e:01:b5:3e:86:eb:25:da:7f:
aa:1c:38:1d:f0:c3:58:e6:6c:0d:d4:ed:31:8a:13:
73:29:3f:14:4a:f5:33:b5:55:b3:4c:d5:f6:3f:cb:
09:8d:f5:85:8e:5a:25:31:0a:a4:25:f1:19:e4:ed:
b6:59:e7:4e:be:65:9c:37:d1:5d:ec:f0:6e:8f:36:
2f:13:0b:b0:4f:1f:04:ba:05:18:84:ec:33:ce:6c:
12:1d:42:82:03:0c:18:d7:96:e7:c5:57:b2:d8:27:
1e:50:e5:82:42:39:3e:03:a6:88:5a:55:93:f0:22:
63:ef:8e:11:90:19:4f:92:34:5a:88:c0:4d:88:c8:
2b:69:13:61:2b:73:22:20:06:c6:28:ec:01:13:c1:
ec:d0:d3:19:5f:ea:68:02:d4:ce:02:95:ad:de:87:
73:e1:80:c1:0d:5b:e7:4b:55:c2:7c:07:65:67:14:
a5:f2:54:d7:a6:8a:a9:ea:40:87:b6:f8:77:a4:b1:
2b:3d:fb:97:46:2f:bd:af:35:1a:51:77:e9:0e:ee:
0d:99:42:36:06:04:e5:1e:a3:72:c7:e6:cf:54:c5:
02:d7:51:e3:d0:5e:95:4d:20:b0:2b:82:75:fb:67:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:10:85:46:2F:63:0D:7D:E2:0A:39:FC:6F:69:FC:96:B1:A0:35:88
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138362e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.186.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5e:4a:3e:1d:de:d9:dc:2f:5c:e7:69:9c:35:5f:04:f0:a4:
7f:75:31:f8:3f:74:21:9d:da:1a:d1:0d:9d:4d:8e:6c:b7:dc:
df:6b:0b:7c:35:e5:73:f6:89:d9:35:e2:04:c7:33:de:05:4a:
65:dd:7a:a8:4b:4e:10:77:04:69:9d:f5:e0:df:b1:db:42:7c:
12:e7:a4:2b:2b:97:c5:67:44:90:29:58:f2:40:bc:3a:d9:3c:
78:e2:15:16:ce:8a:ce:0f:d8:ff:2a:81:d6:43:75:4d:7d:fe:
b7:4c:3d:d1:45:09:8c:ed:03:23:13:22:23:ce:c2:b8:14:0c:
3d:fe:64:76:ac:1b:1e:44:ec:50:2d:f8:d9:21:9f:95:75:13:
a4:41:da:42:7b:5d:77:f9:78:63:7b:be:6d:bc:51:c5:be:80:
3a:94:f1:d6:2a:48:88:df:ad:8a:25:e6:f6:31:76:49:21:ac:
dd:5a:26:cc:41:c3:b3:16:e7:4e:bf:07:b1:bc:d5:77:11:c0:
93:d0:5e:0e:cf:1c:2f:ce:f3:83:91:2f:30:9e:69:7d:08:d2:
91:51:b5:0e:b9:cb:f8:00:27:e9:7b:35:8a:63:db:fa:4b:ab:
a2:27:1d:88:28:a8:9e:b7:ed:86:d2:b6:93:00:f7:61:bb:09:
f3:34:aa:f1
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUJsD4KMMqBUmO404+uvUcOOvWE3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjA5MTAxMTIxMTlaFw0yNzA5MDkxMTI2MTlaMDMxMTAvBgNV
BAMTKEE5MTA4NTQ2MkY2MzBEN0RFMjBBMzlGQzZGNjlGQzk2QjFBMDM1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtFbsNWjyocOJBkxCzVcLsSuxa
ET4BtT6G6yXaf6ocOB3ww1jmbA3U7TGKE3MpPxRK9TO1VbNM1fY/ywmN9YWOWiUx
CqQl8Rnk7bZZ506+ZZw30V3s8G6PNi8TC7BPHwS6BRiE7DPObBIdQoIDDBjXlufF
V7LYJx5Q5YJCOT4DpohaVZPwImPvjhGQGU+SNFqIwE2IyCtpE2ErcyIgBsYo7AET
wezQ0xlf6mgC1M4Cla3eh3PhgMENW+dLVcJ8B2VnFKXyVNemiqnqQIe2+HeksSs9
+5dGL72vNRpRd+kO7g2ZQjYGBOUeo3LH5s9UxQLXUePQXpVNILArgnX7Z3KDAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUqRCFRi9jDX3iCjn8b2n8lrGgNYgwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0MzAy
ZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAtjLowDQYJKoZIhvcNAQELBQADggEBAAdeSj4d3tncL1znaZw1XwTwpH91
Mfg/dCGd2hrRDZ1Njmy33N9rC3w15XP2idk14gTHM94FSmXdeqhLThB3BGmd9eDf
sdtCfBLnpCsrl8VnRJApWPJAvDrZPHjiFRbOis4P2P8qgdZDdU19/rdMPdFFCYzt
AyMTIiPOwrgUDD3+ZHasGx5E7FAt+Nkhn5V1E6RB2kJ7XXf5eGN7vm28UcW+gDqU
8dYqSIjfrYol5vYxdkkhrN1aJsxBw7MW506/B7G81XcRwJPQXg7PHC/O84ORLzCe
aX0I0pFRtQ65y/gAJ+l7NYpj2/pLq6InHYgoqJ637YbStpMA92G7CfM0qvE=
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:50:02 2026 by rpki-client