Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138362e302f32342d3234203d3e203633313939.roa
File: 34352e3134302e3138362e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: 1nyPS5373CfyYjaAXuZkoNkkXaRdTcx1kfCl9Eo9NUw=
Subject key identifier: 05:D0:1A:2D:39:56:A3:1B:6C:F4:A0:EB:3F:65:0D:B6:FB:EB:5E:29
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2D146EB12671336FD4547DB366B3AFC1179134AF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138362e302f32342d3234203d3e203633313939.roa
Signing time: Fri 27 Feb 2026 09:33:51 +0000
ROA not before: Fri 27 Feb 2026 09:28:51 +0000
ROA not after: Fri 26 Feb 2027 09:33:51 +0000
asID: 63199
IP address blocks: 45.140.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:14:6e:b1:26:71:33:6f:d4:54:7d:b3:66:b3:af:c1:17:91:34:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Feb 27 09:28:51 2026 GMT
Not After : Feb 26 09:33:51 2027 GMT
Subject: CN=05D01A2D3956A31B6CF4A0EB3F650DB6FBEB5E29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:c6:eb:d1:85:4b:4f:a0:68:4f:40:c0:b4:
10:a2:d8:72:50:d3:fe:02:e5:22:55:53:ec:71:8c:
2f:b9:3d:2f:68:e5:e0:cb:f1:1e:f9:fc:fa:b3:cf:
8e:de:13:ec:e0:2a:48:9a:6f:19:e9:88:5a:20:9e:
5f:c7:d0:d5:76:2e:c8:c0:16:f5:e8:7f:74:70:b8:
71:2a:e0:42:c8:86:40:41:20:03:ee:aa:e7:9e:26:
8d:14:b3:ce:d3:ce:4e:f2:c8:aa:84:c4:e9:0b:9b:
eb:60:ee:f4:c3:7f:33:aa:af:24:e0:a3:76:a6:46:
da:68:0c:f3:f9:a2:47:27:39:a3:df:69:27:ed:c2:
85:a8:7c:c2:0a:b3:91:7d:4c:c5:06:af:2b:af:01:
ca:6d:58:5f:12:b2:c8:62:1e:5f:0b:93:80:5c:d4:
37:ec:a5:fe:d0:5f:51:4f:e8:c0:03:83:59:d8:9e:
5c:bc:9d:08:7b:39:da:e0:d9:30:c2:a0:f6:ef:d0:
14:35:74:38:f3:73:e1:82:5f:c0:ba:d4:6e:cc:3b:
3f:a0:3e:bc:ac:8a:9d:41:5f:26:cb:61:ea:17:33:
f1:92:72:8b:3b:cb:96:e2:f4:87:72:0e:c7:f9:66:
40:fc:51:f8:74:71:cb:f6:5c:54:1f:9e:14:c7:fc:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D0:1A:2D:39:56:A3:1B:6C:F4:A0:EB:3F:65:0D:B6:FB:EB:5E:29
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138362e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.186.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4b:ce:ba:41:2c:f2:e0:50:b3:07:8c:4e:0d:80:b8:a4:f2:
f4:6a:92:bf:18:a4:ba:a7:b3:6c:97:0e:5a:53:82:aa:8b:b4:
72:be:38:40:6b:6e:6c:4f:da:a2:1a:92:5e:20:49:c7:2c:90:
48:bb:51:77:a7:3c:49:13:6e:26:ec:56:fd:16:44:23:2b:04:
85:54:d8:40:1c:01:8e:06:5d:8d:40:f0:3a:8d:a0:63:18:4b:
81:e2:1c:83:c2:77:fc:e7:05:8a:d2:4a:39:39:63:d7:62:ee:
aa:0c:4c:1d:97:54:ff:8f:aa:73:c4:77:06:3f:f9:8d:15:5c:
7e:31:52:80:45:48:68:8c:35:7f:60:e3:11:7b:72:cf:77:a5:
cb:35:fa:da:0b:cb:9e:87:66:f3:41:23:a6:f0:65:3d:01:bd:
24:1f:42:d9:66:d7:d3:ec:a7:da:5a:6b:07:6e:cc:c5:d0:aa:
02:10:19:aa:30:99:b7:5f:60:f5:99:de:7d:72:df:ec:a6:c5:
07:b3:28:99:05:27:5b:ca:4f:8c:94:ad:34:a1:d2:75:fa:01:
66:d8:d1:e8:5d:02:19:1b:05:6e:f1:ea:01:69:eb:8a:56:cc:
3f:62:d0:23:9c:24:71:ce:df:8a:3f:e0:31:02:22:50:f5:c5:
4a:a5:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:01 2026 by rpki-client