Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31352e32342e302f32322d3234203d3e203437353833.roa
File: 34352e31352e32342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: nw7Z2vMGkH3B2vvGOIYdWNlDSkAod7jUWuNsm2gJyaA=
Subject key identifier: 2B:78:69:F6:FF:5B:F0:3E:BC:21:14:46:37:19:A2:2A:BE:7E:6B:CC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 51378593B79583AE05E4B5C72169CA5191918EFF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31352e32342e302f32322d3234203d3e203437353833.roa
Signing time: Fri 30 Oct 2026 12:31:02 +0000
ROA not before: Fri 30 Oct 2026 12:26:02 +0000
ROA not after: Fri 29 Oct 2027 12:31:02 +0000
asID: 47583
IP address blocks: 45.15.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:37:85:93:b7:95:83:ae:05:e4:b5:c7:21:69:ca:51:91:91:8e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:02 2026 GMT
Not After : Oct 29 12:31:02 2027 GMT
Subject: CN=2B7869F6FF5BF03EBC2114463719A22ABE7E6BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:4f:56:c0:62:04:fd:28:23:b2:af:14:7d:
a7:dc:cb:7a:06:09:2b:0a:47:68:52:b4:53:b2:7e:
69:71:d5:74:31:80:a2:6f:da:08:6f:5d:58:d8:88:
26:1d:e8:09:82:62:d5:b9:17:99:39:73:27:92:b9:
5e:c8:f7:1a:f5:5e:80:55:6d:19:2f:40:46:1d:a2:
21:49:dd:be:c6:b6:2c:99:37:ad:89:d8:23:de:9c:
7f:25:d4:1a:03:96:6d:5f:12:dd:3c:67:62:ff:c9:
16:93:77:56:0b:dc:22:6f:4f:f9:29:4f:3c:54:a5:
39:e0:2a:85:52:6c:ab:47:0c:5c:de:45:a3:48:d7:
44:a1:b5:74:16:b1:8e:f6:5d:99:a1:5a:8c:95:bd:
b2:c6:64:3e:ab:88:3e:63:44:43:98:fe:b3:55:bd:
b1:d9:90:77:cf:74:00:8d:63:68:b8:3f:8d:53:93:
1d:71:4c:10:25:d7:2d:a8:5a:c8:b3:c8:e1:d1:bc:
5d:31:ea:cc:44:26:86:58:6f:4d:43:aa:4d:d7:31:
70:a7:bc:0c:e6:65:09:dd:28:00:f3:d8:c8:3b:a3:
fa:3f:fc:28:cd:08:b1:4a:76:2b:37:11:ec:01:db:
72:60:b9:2e:56:93:32:fa:8c:4d:bf:a5:8e:51:43:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:78:69:F6:FF:5B:F0:3E:BC:21:14:46:37:19:A2:2A:BE:7E:6B:CC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31352e32342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.24.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:fb:77:03:fb:33:3f:78:1b:e7:c1:3f:9b:05:51:cd:98:71:
a8:c9:c4:54:ea:4c:47:d4:0e:07:5a:1b:bd:53:7a:2e:d6:5c:
e9:7c:81:cf:28:02:39:76:0e:4d:95:07:8e:17:5d:1f:cc:d0:
84:e0:b9:06:cd:ae:84:15:76:08:b6:40:45:a2:77:56:0b:a0:
76:50:d1:08:dd:74:6d:5f:e0:e7:d7:fb:ea:a0:aa:6e:d8:2a:
f8:39:49:e6:9e:ff:8a:c5:0f:fc:9f:29:1e:2c:0b:47:99:60:
34:90:bc:86:e3:2b:82:db:ea:2c:24:18:78:77:d8:8c:87:86:
bb:f7:01:56:2a:bc:a7:f0:de:0c:bc:7d:f1:c5:e5:d4:d9:6b:
d5:b4:96:66:9c:d2:59:57:34:c4:cc:ca:c0:6c:df:ac:e8:e1:
c0:93:db:93:a0:30:16:e0:f0:70:54:18:71:1b:c8:d4:7b:31:
68:b9:49:08:d3:ba:89:94:6c:dd:94:7d:29:1b:be:c9:b9:4d:
ec:ad:25:a2:2d:c8:3f:d2:8c:e5:b1:83:c8:e9:1c:f2:c1:f2:
b5:5b:b0:96:a5:25:a6:4b:fa:fd:7b:64:e8:22:39:98:97:90:
3c:38:48:b4:f0:0d:fe:eb:a1:35:b9:3d:e1:06:9b:b1:56:4a:
40:c2:bc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:42:58 2026 by rpki-client