Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e342e302f32332d3233203d3e203531313637.roa
File: 34352e38312e342e302f32332d3233203d3e203531313637.roa (raw, json)
Hash identifier: FWP080NsssFMWoXVCP968qIK5CNrCfVumK9JvuSe0gM=
Subject key identifier: F4:00:DE:53:00:A1:25:3E:16:BD:C1:A3:53:3D:A8:F3:7A:42:B2:D6
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5C677A9A4BDA5A0FE640193DA94D245CDAB9CB06
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e342e302f32332d3233203d3e203531313637.roa
Signing time: Tue 03 Nov 2026 23:31:44 +0000
ROA not before: Tue 03 Nov 2026 23:26:44 +0000
ROA not after: Tue 02 Nov 2027 23:31:44 +0000
asID: 51167
IP address blocks: 45.81.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:67:7a:9a:4b:da:5a:0f:e6:40:19:3d:a9:4d:24:5c:da:b9:cb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 3 23:26:44 2026 GMT
Not After : Nov 2 23:31:44 2027 GMT
Subject: CN=F400DE5300A1253E16BDC1A3533DA8F37A42B2D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:d7:4e:2f:f2:4c:18:53:72:a0:db:81:07:
f8:70:90:28:0c:56:4f:60:60:75:ab:fc:10:99:49:
fa:e0:f3:e5:ec:ce:fb:be:0d:21:00:9f:2d:c3:f6:
28:48:c0:4c:f6:c0:0c:ad:07:ff:2a:b7:64:83:67:
7f:72:12:e5:ed:43:3f:df:81:f8:a3:5c:0c:d0:dd:
48:d4:58:1f:2e:d2:4d:03:85:5f:e0:1e:bf:fc:43:
33:eb:8b:c6:20:a2:8b:c7:27:80:2f:0c:12:ca:60:
91:d5:69:1e:0a:56:94:09:cf:b2:e7:60:8f:b0:f3:
ca:09:86:00:eb:fe:a8:44:10:a1:4d:b1:f9:42:d0:
84:52:71:01:bc:43:f9:5e:32:d8:97:62:13:3a:a8:
21:de:9d:d6:39:3a:bf:0f:d4:1a:6c:54:ad:a3:90:
ee:97:31:bf:91:bc:65:a9:29:4a:f3:d7:15:f8:4e:
62:79:14:d9:82:4a:f0:ce:fa:fe:0f:bd:f3:e1:0e:
e6:04:45:cf:89:ee:01:7e:2a:79:ac:62:78:da:71:
d5:27:8a:55:6c:c5:7d:7d:87:1e:9c:a3:66:2a:67:
8f:2e:87:72:4c:f8:c1:32:22:03:90:df:d3:c5:5f:
f6:68:30:ef:10:9e:bb:30:69:7d:d9:a9:bb:47:15:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:00:DE:53:00:A1:25:3E:16:BD:C1:A3:53:3D:A8:F3:7A:42:B2:D6
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e342e302f32332d3233203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.4.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:c8:9a:52:a9:01:40:a1:2b:a5:07:c8:c8:d1:ad:e0:4e:8d:
05:aa:b8:a3:22:85:71:ab:73:5e:59:92:1b:bf:5c:2d:ef:65:
80:07:cd:9f:73:76:1e:24:04:04:c5:1b:cd:80:be:a2:ca:93:
fe:36:16:b3:99:7c:3b:96:2b:6d:21:3b:7b:b6:ac:58:77:13:
a6:51:7b:dc:62:83:4f:61:ac:3e:b3:da:f9:b9:8b:de:a8:84:
b7:5d:2e:87:20:4f:bc:dd:1e:71:38:d0:f3:f1:a9:fa:d5:5f:
a1:88:9a:cf:d7:bc:82:f6:19:02:38:61:d5:fa:bd:55:09:af:
85:2c:90:28:4f:e0:85:b6:ab:ee:5f:e9:20:76:33:fc:81:8c:
7d:42:07:70:7b:b7:5e:44:62:46:aa:5a:a5:81:e9:28:15:40:
09:df:15:8c:a8:d8:76:db:d0:ec:f4:73:f2:4d:70:d7:3b:2d:
61:31:1e:fe:ff:8e:14:9f:77:da:4a:6b:ad:28:7b:3f:b9:31:
bb:e5:25:31:b1:56:cd:6a:05:12:c7:d9:27:35:95:5d:89:ab:
a6:e2:ae:d3:b2:0e:fb:2c:2e:48:07:d8:eb:b7:63:16:e4:4c:
04:fd:72:ef:70:80:2a:7e:e3:ec:25:f1:1c:6b:7e:09:25:76:
e0:10:37:ac
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXGd6mkvaWg/mQBk9qU0kXNq5ywYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjExMDMyMzI2NDRaFw0yNzExMDIyMzMxNDRaMDMxMTAvBgNV
BAMTKEY0MDBERTUzMDBBMTI1M0UxNkJEQzFBMzUzM0RBOEYzN0E0MkIyRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gddOL/JMGFNyoNuBB/hwkCgM
Vk9gYHWr/BCZSfrg8+Xszvu+DSEAny3D9ihIwEz2wAytB/8qt2SDZ39yEuXtQz/f
gfijXAzQ3UjUWB8u0k0DhV/gHr/8QzPri8YgoovHJ4AvDBLKYJHVaR4KVpQJz7Ln
YI+w88oJhgDr/qhEEKFNsflC0IRScQG8Q/leMtiXYhM6qCHendY5Or8P1BpsVK2j
kO6XMb+RvGWpKUrz1xX4TmJ5FNmCSvDO+v4PvfPhDuYERc+J7gF+KnmsYnjacdUn
ilVsxX19hx6co2YqZ48uh3JM+MEyIgOQ39PFX/ZoMO8QnrswaX3ZqbtHFSi1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9ADeUwChJT4WvcGjUz2o83pCstYwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODMxMmUz
NDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEt
UQQwDQYJKoZIhvcNAQELBQADggEBAG7ImlKpAUChK6UHyMjRreBOjQWquKMihXGr
c15Zkhu/XC3vZYAHzZ9zdh4kBATFG82AvqLKk/42FrOZfDuWK20hO3u2rFh3E6ZR
e9xig09hrD6z2vm5i96ohLddLocgT7zdHnE40PPxqfrVX6GIms/XvIL2GQI4YdX6
vVUJr4UskChP4IW2q+5f6SB2M/yBjH1CB3B7t15EYkaqWqWB6SgVQAnfFYyo2Hbb
0Oz0c/JNcNc7LWExHv7/jhSfd9pKa60oez+5MbvlJTGxVs1qBRLH2Sc1lV2Jq6bi
rtOyDvssLkgH2Ou3YxbkTAT9cu9wgCp+4+wl8RxrfgklduAQN6w=
-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:13 2026 by rpki-client