Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232382e302f32322d3234203d3e203437353833.roa
File: 34352e39302e3232382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: U4PylyDsandg3gx5PNIgCANYEfBYhyjjGpFxQ1esnMU=
Subject key identifier: 0E:87:A8:16:24:F4:2A:64:70:AE:25:DC:FF:26:DE:73:C3:4E:A5:8B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 470E8F3BF26B2EAD3D2B91532551C6638558B4D4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232382e302f32322d3234203d3e203437353833.roa
Signing time: Fri 23 Oct 2026 16:30:26 +0000
ROA not before: Fri 23 Oct 2026 16:25:26 +0000
ROA not after: Fri 22 Oct 2027 16:30:26 +0000
asID: 47583
IP address blocks: 45.90.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:0e:8f:3b:f2:6b:2e:ad:3d:2b:91:53:25:51:c6:63:85:58:b4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:26 2026 GMT
Not After : Oct 22 16:30:26 2027 GMT
Subject: CN=0E87A81624F42A6470AE25DCFF26DE73C34EA58B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:bf:7f:a0:a2:37:4c:fc:6e:6e:86:e1:cb:
17:88:5a:da:ff:38:9c:9b:64:ab:b2:32:cd:84:79:
4c:84:39:45:dd:d7:e6:4c:37:68:52:f1:7e:75:63:
dd:1c:a1:48:58:f5:44:df:75:54:06:cd:99:47:e6:
29:7f:2f:ef:2b:68:03:c3:9d:f6:fc:f0:7e:da:8b:
20:38:4d:43:ee:56:5c:c1:07:28:f8:9e:f4:d8:14:
d1:0e:ea:8c:36:ae:09:7d:c6:6d:ed:43:79:0b:68:
ec:a0:d0:e4:29:01:db:f7:35:e7:a5:c0:3f:85:44:
10:8c:32:0e:88:ad:99:1c:ef:95:41:ed:a7:5c:28:
81:c9:b0:d4:c8:65:ee:bf:d8:1d:88:33:49:14:23:
1e:e1:55:bd:4f:43:71:20:b9:29:cf:af:69:87:27:
70:6e:45:37:71:a3:86:93:96:0f:7c:90:6c:5a:75:
39:e8:82:ef:30:9f:d5:db:cf:e4:e5:d7:65:85:ab:
36:f9:6d:67:09:27:a0:88:46:be:31:ac:94:5e:7e:
b4:6c:50:3e:b2:a2:63:83:06:89:a7:4d:fa:e8:e0:
9c:f2:e4:67:eb:4a:81:e0:86:f6:a4:38:9b:ea:7e:
1b:70:68:3b:0e:14:7c:ac:4b:29:05:8e:ad:5c:f8:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:87:A8:16:24:F4:2A:64:70:AE:25:DC:FF:26:DE:73:C3:4E:A5:8B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.228.0/22
Signature Algorithm: sha256WithRSAEncryption
af:ec:72:cb:ab:67:a2:73:32:d5:13:f8:a0:33:64:c0:9b:d5:
26:48:b5:6c:eb:a7:e2:b1:a1:c5:b0:33:34:52:b8:b0:ab:0b:
16:9c:2f:68:01:45:8f:1c:01:d2:89:53:f9:37:48:a7:e4:a1:
c4:17:c0:33:50:87:a2:36:69:40:45:9f:55:07:40:f6:4b:aa:
cd:ec:0e:03:1e:b4:7a:cb:fe:00:a6:57:eb:3c:e5:b4:f9:74:
73:cf:2d:45:ce:a9:34:b8:83:b2:b9:c0:07:5d:4d:f7:d9:52:
14:25:42:dd:e9:86:cc:23:2b:e0:a0:e9:01:f1:63:06:fd:01:
82:ce:b9:a8:62:bd:aa:68:50:bc:85:69:52:22:e1:35:56:10:
db:f1:fa:65:da:c4:e3:7c:3d:65:86:3d:a4:ae:66:cb:f4:a0:
9b:8b:6c:40:7e:41:ba:f1:3a:d2:05:8d:60:92:93:64:31:53:
d5:6e:39:38:c3:ef:87:d6:d4:79:c9:c0:3c:eb:20:cd:c1:3f:
0d:94:e4:e0:3d:ad:10:f0:9c:ee:5b:ac:35:41:4a:39:3e:bc:
9e:d4:54:0f:9a:3d:19:03:82:89:fa:e6:8b:0b:2d:1f:09:48:
3d:28:f5:ab:e8:3b:12:e1:3d:aa:0f:e1:f4:05:c7:f9:e2:90:
9d:74:2f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 06:03:16 2026 by rpki-client