Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e362e302f32332d3233203d3e203531313637.roa
File: 34352e38312e362e302f32332d3233203d3e203531313637.roa (raw, json)
Hash identifier: hbSJC1SxVFU9wqpPaDbXbyCsI1DRsbSH4JUhsb5tR7s=
Subject key identifier: 12:A2:DC:2F:20:CE:FC:FD:99:46:E7:27:2A:55:DA:C6:55:98:88:79
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 36C6388ECDCC55B5A09A1F41A322388517C6B68C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e362e302f32332d3233203d3e203531313637.roa
Signing time: Tue 03 Nov 2026 23:31:46 +0000
ROA not before: Tue 03 Nov 2026 23:26:46 +0000
ROA not after: Tue 02 Nov 2027 23:31:46 +0000
asID: 51167
IP address blocks: 45.81.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c6:38:8e:cd:cc:55:b5:a0:9a:1f:41:a3:22:38:85:17:c6:b6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 3 23:26:46 2026 GMT
Not After : Nov 2 23:31:46 2027 GMT
Subject: CN=12A2DC2F20CEFCFD9946E7272A55DAC655988879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:a3:60:5d:89:8c:64:dd:11:8d:65:9e:aa:
91:88:72:f6:75:ea:c5:54:23:73:20:e2:8d:c6:87:
e0:a4:42:db:99:e7:d4:3b:a9:a8:e9:4b:a3:b4:05:
10:28:b7:a5:88:b8:b5:3b:3f:0b:d7:c8:63:2c:88:
5a:69:d0:52:1e:d0:9f:1e:7a:30:9b:b7:35:0f:ba:
c9:9c:64:14:db:aa:02:bf:d5:1c:ed:76:53:54:9e:
64:da:de:f5:7c:12:57:b8:bd:1c:d5:84:1b:4d:c2:
dc:9b:41:df:ed:8f:ab:b1:27:ad:93:6e:fa:f5:03:
36:9a:4d:ab:73:4e:cc:12:a1:55:16:45:30:36:36:
c4:0c:ec:a5:a2:b7:0d:9d:3e:bf:75:1c:d4:7d:d6:
d2:d8:4f:5e:cf:c9:0f:32:58:ac:f4:9e:54:ef:6b:
f8:17:ff:c2:f9:ab:97:f4:25:cf:3c:06:12:2a:82:
45:37:de:08:c3:cb:a7:21:68:2a:56:cc:a2:af:55:
56:84:00:5e:74:87:8a:4f:e6:12:3c:43:88:a5:4b:
ad:b5:39:65:9f:f3:78:42:06:13:85:97:bf:c0:f4:
1b:0c:6a:7a:cc:b6:16:cd:75:9a:4d:ef:af:84:9a:
ce:d5:89:ca:57:dc:84:b9:29:69:3b:1c:f9:4a:83:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A2:DC:2F:20:CE:FC:FD:99:46:E7:27:2A:55:DA:C6:55:98:88:79
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e362e302f32332d3233203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.6.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:3c:07:1f:cd:21:1c:a1:d8:cf:6d:0a:3e:9e:81:b7:74:e2:
a2:51:0d:6a:ce:d7:3a:06:db:13:cd:0e:2a:d6:d6:c5:15:ac:
f4:57:3a:f8:41:22:35:0d:85:60:46:d6:61:e6:e8:3c:a2:b2:
01:3d:a8:79:41:b9:58:a3:71:0c:58:ea:41:e2:48:7d:78:dd:
ea:2f:96:aa:71:2d:2b:5c:bd:89:2c:41:b4:4d:8d:a8:7f:c1:
5e:87:67:9d:02:a2:4e:38:dc:32:94:76:e1:cc:da:9d:86:13:
e6:ae:0d:80:63:cb:94:8b:86:58:5d:a8:4b:d3:e2:5e:81:9b:
bd:d2:70:d8:54:38:ba:af:2b:bd:9e:2d:5c:79:73:f7:3f:b0:
59:37:d5:84:54:80:2a:f5:b6:60:79:af:76:72:01:02:5a:5d:
4f:53:88:c5:39:9f:14:d8:05:92:77:cd:64:45:5b:3b:35:07:
ee:43:2e:ab:d1:df:cd:92:e6:92:54:e3:4d:ec:70:a1:89:a8:
40:95:15:06:3c:45:9d:97:f6:9f:2c:e5:ac:31:48:b6:22:04:
39:93:9a:ed:60:d4:7d:7c:5d:a7:4d:96:c7:98:8a:f8:9b:d6:
36:b5:31:2f:be:0f:7f:86:93:28:20:b1:70:f8:f8:db:aa:4a:
50:0e:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:28:25 2026 by rpki-client