Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232332e302f32342d3234203d3e203437353833.roa
File: 34352e39302e3232332e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: AY+N5nAmh+WF4bgBOVS6lOi7nLlZzWUi1HahZktEzzA=
Subject key identifier: 90:4B:E3:66:BE:25:A8:65:6B:7C:43:4E:A6:C5:1F:01:55:78:10:31
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 494E1856E4DDAC6AC955A0548D64F89E70D8AE06
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232332e302f32342d3234203d3e203437353833.roa
Signing time: Fri 30 Oct 2026 12:32:16 +0000
ROA not before: Fri 30 Oct 2026 12:27:16 +0000
ROA not after: Fri 29 Oct 2027 12:32:16 +0000
asID: 47583
IP address blocks: 45.90.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4e:18:56:e4:dd:ac:6a:c9:55:a0:54:8d:64:f8:9e:70:d8:ae:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:27:16 2026 GMT
Not After : Oct 29 12:32:16 2027 GMT
Subject: CN=904BE366BE25A8656B7C434EA6C51F0155781031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:ba:3d:14:ca:f4:07:b1:78:fa:aa:e3:77:
10:97:4d:97:df:64:20:ff:65:c4:ef:d4:a4:7f:96:
44:45:b6:0e:08:61:bd:be:8f:72:8a:bb:ca:79:b3:
90:82:5d:7b:cc:00:be:d7:eb:74:71:6d:6c:9f:34:
74:f0:9e:51:0f:55:82:ff:99:65:12:db:26:25:c8:
7f:8d:e1:a7:96:46:12:ca:bd:34:00:38:23:b1:81:
03:d3:dc:c1:9e:c0:05:e7:87:86:b0:27:e2:99:81:
ab:6f:a8:37:15:c6:57:76:fa:62:14:83:1a:91:75:
cd:e4:c0:6c:9b:57:08:da:07:c4:c5:f9:44:74:97:
28:86:36:e8:39:83:92:3e:07:79:17:48:e7:18:e6:
c6:8f:5b:51:74:78:34:ea:24:d6:53:7e:67:5c:5a:
e3:8e:ef:c2:c9:81:0f:f8:2a:e0:3c:ee:ce:1e:8a:
66:24:f6:18:ee:83:b9:fe:5d:bc:8f:22:6b:4b:17:
b5:c5:33:cc:4f:36:90:6b:24:97:51:c1:d8:92:f9:
0c:82:f0:86:fb:26:ce:2f:37:7b:87:f6:3c:3f:f3:
94:37:14:1f:90:e9:5f:a5:f0:3a:f2:21:71:16:be:
e3:41:c3:13:8e:14:63:19:46:33:9d:4e:23:fd:4f:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4B:E3:66:BE:25:A8:65:6B:7C:43:4E:A6:C5:1F:01:55:78:10:31
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232332e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.223.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:cd:ab:53:a3:cd:3f:34:ab:f4:a7:8c:37:1b:26:94:89:2f:
81:3a:c5:e9:78:26:e6:98:6f:a0:a7:22:c9:2f:02:f2:79:75:
d6:e3:ac:5a:85:84:d2:d6:d0:22:6a:d7:a1:bf:56:33:dc:0e:
e9:98:92:b7:bc:0f:d5:b4:a9:59:fe:ef:89:ef:2e:97:77:c2:
3f:7a:7e:1e:99:06:ff:80:be:38:ec:2c:13:bc:fa:91:a3:ee:
73:e5:34:19:75:2e:9f:4e:3a:8e:63:e8:4e:e0:37:4c:9f:f3:
61:77:e4:9b:96:1d:f8:47:b7:db:50:db:16:06:ac:9f:3f:cf:
be:73:1a:56:b9:c1:0b:09:08:af:b5:30:90:cf:29:d2:ae:03:
0c:38:aa:f5:7b:b9:3e:b7:ad:92:22:78:bb:af:45:37:9c:2d:
92:8c:39:93:f7:58:b7:e9:d3:5d:65:5b:df:29:59:bc:f8:ee:
40:4f:0b:17:7b:a1:bc:ad:35:fc:cc:90:cd:c8:56:a3:c3:14:
c4:26:7e:93:1c:fc:b6:f0:2c:97:bd:af:4f:cd:a3:78:5d:18:
c4:88:fb:99:50:8e:6e:a9:41:3d:aa:30:d4:fc:3f:c1:3c:aa:
72:cb:df:f5:77:3f:97:31:5c:3d:e7:33:9f:de:99:cc:4f:b3:
63:1f:70:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:48:46 2026 by rpki-client