Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38392e3230342e302f32322d3234203d3e203437353833.roa
File: 34352e38392e3230342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: +cKbp16Lqe1mthtbZyjHCuljDanIVof0MJgMYKBOE7s=
Subject key identifier: D9:5D:BD:7E:F1:EF:6C:B2:9C:C6:49:E7:F1:5A:F6:CE:9A:1F:51:F4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1FD918A42C0390CCA7B1292C5966BFD2FB25B442
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38392e3230342e302f32322d3234203d3e203437353833.roa
Signing time: Fri 23 Oct 2026 16:30:22 +0000
ROA not before: Fri 23 Oct 2026 16:25:22 +0000
ROA not after: Fri 22 Oct 2027 16:30:22 +0000
asID: 47583
IP address blocks: 45.89.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 20:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d9:18:a4:2c:03:90:cc:a7:b1:29:2c:59:66:bf:d2:fb:25:b4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:22 2026 GMT
Not After : Oct 22 16:30:22 2027 GMT
Subject: CN=D95DBD7EF1EF6CB29CC649E7F15AF6CE9A1F51F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:4c:29:a1:51:b5:cc:4f:37:c1:4b:63:f0:
a1:52:ce:a7:4b:29:51:96:52:0e:d5:7e:e3:db:c7:
35:34:7d:aa:7c:20:fd:99:4c:37:c0:be:b3:5c:b4:
4a:7c:5a:9e:44:e7:0c:75:00:82:4e:a5:d4:2d:2c:
9e:b3:a3:c3:96:c2:99:fd:63:3d:fa:1f:7a:02:47:
57:ea:08:f9:42:9e:42:3a:21:a8:7d:6a:bf:ed:9a:
59:ea:21:79:45:41:4e:49:cf:14:5c:7e:e5:a1:59:
41:8b:5c:1c:3a:7a:6e:03:0b:00:57:1d:de:0f:e5:
83:91:e9:2d:c3:cb:4f:4b:ee:bc:f0:1a:e3:cf:69:
92:cd:7e:b4:24:78:ed:b6:7a:47:5e:20:bc:85:a7:
67:9c:56:18:16:2d:53:e2:44:9e:c5:cd:76:9b:d3:
fc:5d:8c:8c:92:e8:fe:39:90:f6:6d:b0:79:b6:9e:
d0:10:98:33:2e:29:80:48:44:fc:95:31:5e:87:a8:
6c:70:ae:5b:58:05:6b:3a:3b:10:69:01:f1:31:ae:
b8:fe:5c:ad:55:8a:b6:a4:b0:32:09:03:f9:d5:59:
e6:ac:9a:f8:77:51:db:0c:66:8d:7f:e1:75:19:42:
d7:d7:18:b6:c9:a8:35:32:6e:a0:97:70:9e:7d:cc:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5D:BD:7E:F1:EF:6C:B2:9C:C6:49:E7:F1:5A:F6:CE:9A:1F:51:F4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38392e3230342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.204.0/22
Signature Algorithm: sha256WithRSAEncryption
66:36:5e:e1:80:f9:6d:a0:12:1b:14:0f:a4:1d:cb:f5:cb:1b:
ab:b7:f4:31:e1:f8:ec:fe:b1:4a:f7:8f:54:a9:27:35:59:22:
a3:b5:f1:e9:9f:7f:44:9b:69:ca:a0:53:a4:5f:26:ff:29:31:
91:cd:b7:0b:8a:86:82:d9:52:6e:5b:5c:e7:89:d1:68:cf:45:
50:e3:9b:36:36:f6:12:62:61:d3:af:d2:71:6a:0b:3f:fc:9e:
47:19:ae:fb:91:00:18:19:b6:95:1f:da:ad:27:91:52:a5:73:
20:03:14:c3:9f:46:70:04:26:b3:b7:e8:14:41:8e:36:8c:1d:
bd:c2:99:8b:e9:03:1f:a1:16:23:62:fc:b4:a2:c4:56:da:56:
65:9c:1a:be:5c:d8:72:d5:cb:13:67:84:c7:f3:6f:a4:97:32:
e3:37:5b:6e:0b:51:15:58:e8:9c:86:98:67:f0:0d:9a:3c:cf:
33:09:94:7b:1f:b9:48:a6:b4:96:0f:b4:d4:85:19:fc:88:3e:
dc:77:ac:e1:3d:c1:36:9b:08:eb:33:21:7b:c8:43:fb:44:ba:
7e:a4:27:db:85:4f:61:57:e9:9b:9c:04:bd:e8:19:79:d1:7d:
1d:0d:04:45:2e:11:d9:6c:6e:ce:44:ac:f7:fe:08:7e:15:7d:
24:d2:6b:98
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUH9kYpCwDkMynsSksWWa/0vsltEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MjJaFw0yNzEwMjIxNjMwMjJaMDMxMTAvBgNV
BAMTKEQ5NURCRDdFRjFFRjZDQjI5Q0M2NDlFN0YxNUFGNkNFOUExRjUxRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCir0wpoVG1zE83wUtj8KFSzqdL
KVGWUg7VfuPbxzU0fap8IP2ZTDfAvrNctEp8Wp5E5wx1AIJOpdQtLJ6zo8OWwpn9
Yz36H3oCR1fqCPlCnkI6Iah9ar/tmlnqIXlFQU5JzxRcfuWhWUGLXBw6em4DCwBX
Hd4P5YOR6S3Dy09L7rzwGuPPaZLNfrQkeO22ekdeILyFp2ecVhgWLVPiRJ7FzXab
0/xdjIyS6P45kPZtsHm2ntAQmDMuKYBIRPyVMV6HqGxwrltYBWs6OxBpAfExrrj+
XK1ViraksDIJA/nVWeasmvh3UdsMZo1/4XUZQtfXGLbJqDUybqCXcJ59zOKvAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQU2V29fvHvbLKcxknn8Vr2zpofUfQwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODM5MmUz
MjMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCLVnMMA0GCSqGSIb3DQEBCwUAA4IBAQBmNl7hgPltoBIbFA+kHcv1yxurt/Qx
4fjs/rFK949UqSc1WSKjtfHpn39Em2nKoFOkXyb/KTGRzbcLioaC2VJuW1znidFo
z0VQ45s2NvYSYmHTr9Jxags//J5HGa77kQAYGbaVH9qtJ5FSpXMgAxTDn0ZwBCaz
t+gUQY42jB29wpmL6QMfoRYjYvy0osRW2lZlnBq+XNhy1csTZ4TH82+klzLjN1tu
C1EVWOichphn8A2aPM8zCZR7H7lIprSWD7TUhRn8iD7cd6zhPcE2mwjrMyF7yEP7
RLp+pCfbhU9hV+mbnAS96Bl50X0dDQRFLhHZbG7ORKz3/gh+FX0k0muY
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:37:28 2026 by rpki-client