Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e2039333034.roa
File: 34352e3134302e3138372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: kdqOEXVGk8fDkGktQ0j6iIKCatvTLD03QX0WOoXEQbA=
Subject key identifier: 96:53:B1:C3:C6:A0:C1:93:6D:EB:F5:2F:0C:51:B6:2B:76:11:98:55
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0544DD436EB06A7CB5FA3B9B0F776BE2D3F7B3F4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e2039333034.roa
Signing time: Wed 09 Sep 2026 18:19:29 +0000
ROA not before: Wed 09 Sep 2026 18:14:29 +0000
ROA not after: Wed 08 Sep 2027 18:19:29 +0000
asID: 9304
IP address blocks: 45.140.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:44:dd:43:6e:b0:6a:7c:b5:fa:3b:9b:0f:77:6b:e2:d3:f7:b3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 9 18:14:29 2026 GMT
Not After : Sep 8 18:19:29 2027 GMT
Subject: CN=9653B1C3C6A0C1936DEBF52F0C51B62B76119855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:0a:89:fe:66:d1:f0:57:49:d6:08:42:a6:
ce:78:4b:e0:f5:81:07:5d:f1:fb:f1:b6:ba:34:d0:
1d:69:c1:2f:2f:e7:b3:fc:bb:82:82:de:52:c3:6a:
54:42:de:04:07:3a:d8:35:e1:02:6a:41:36:3a:db:
9c:69:80:fe:1c:c9:08:a5:21:e4:11:54:69:b9:62:
ea:6f:06:3b:a4:3a:0a:1d:50:cc:bf:9f:b2:f2:0d:
41:c1:78:2a:0d:c2:fa:58:5c:48:05:c3:fc:01:50:
32:53:80:6b:1a:9c:ce:f9:c1:b7:75:bd:a3:e8:04:
f4:42:e7:42:26:42:f2:28:39:4a:34:92:20:ea:1d:
f4:d7:17:67:1e:59:ec:56:cc:b8:98:03:b9:ee:74:
53:e3:1c:01:14:ae:49:f8:d4:45:e9:8b:88:f3:51:
70:a9:b4:72:29:f9:41:9b:a2:0e:b8:94:96:67:2b:
c2:49:9f:1c:c4:07:1e:a3:b8:d7:6c:93:d2:73:d7:
57:62:06:fe:96:dc:6a:5d:ac:07:a3:a9:35:0f:55:
73:58:1b:36:56:bd:db:60:43:f4:e4:f6:73:56:44:
8a:b2:25:37:c9:8a:67:df:ac:d7:9a:68:70:f0:69:
cb:fd:e4:c6:1b:08:aa:1e:ef:b9:42:85:a1:30:8c:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:B1:C3:C6:A0:C1:93:6D:EB:F5:2F:0C:51:B6:2B:76:11:98:55
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:fa:3b:29:02:05:68:04:b4:20:d2:1e:63:5f:4c:66:08:e0:
17:43:23:37:37:49:e0:2a:b7:fe:d7:f9:68:b8:66:9a:df:bf:
b6:c4:3a:14:8b:e0:3a:e5:bf:32:71:00:a0:74:0b:67:3d:c7:
bc:04:b0:03:27:e4:50:1b:b4:6d:f8:3c:1a:d6:89:ef:d3:5b:
45:b8:e6:a6:7a:7e:2d:4a:0d:63:f7:65:9a:c7:fd:95:09:f8:
4e:54:f0:73:9b:7f:1a:74:83:27:7e:3d:b3:c9:30:85:91:86:
7b:22:68:be:f4:6f:e0:0c:cb:5f:3d:18:f3:b1:89:d5:13:da:
0a:ec:fc:e2:bf:12:f0:b3:95:b9:79:9a:cb:55:82:a9:e8:fc:
eb:7c:e0:cb:a0:79:b3:9c:66:78:93:5e:53:20:43:11:ac:6c:
65:57:7d:0d:d1:66:f9:3f:97:0c:08:30:d6:95:94:a8:73:95:
89:53:6f:9e:bd:0c:2d:7a:f9:e1:0d:9b:9b:23:dd:e6:56:9f:
91:62:c8:fd:fb:7b:af:c0:c2:7b:c9:87:9b:78:b5:3c:17:2f:
ac:2f:db:b5:7c:e7:34:27:31:e4:80:c8:aa:90:12:70:3f:51:
71:46:b5:fc:53:e9:2a:0c:3b:9d:9c:fb:6e:01:42:fe:65:87:
92:d0:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:29:24 2026 by rpki-client