Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31362e302f32342d3234203d3e20323132323338.roa
File: 352e3138322e31362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: MMaK2Zhsfjw/6odcWCv3WwhvjWZKT/nUqOR7Lw3Muwc=
Subject key identifier: 82:A2:CF:F9:70:90:6B:B0:7D:22:99:48:AD:56:E4:44:32:B7:32:56
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 37185FEF2F737EBC81ECC9E3F869C5080E80E708
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31362e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 21 Oct 2025 13:22:43 +0000
ROA not before: Tue 21 Oct 2025 13:17:43 +0000
ROA not after: Tue 20 Oct 2026 13:22:43 +0000
asID: 212238
IP address blocks: 5.182.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:18:5f:ef:2f:73:7e:bc:81:ec:c9:e3:f8:69:c5:08:0e:80:e7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 21 13:17:43 2025 GMT
Not After : Oct 20 13:22:43 2026 GMT
Subject: CN=82A2CFF970906BB07D229948AD56E44432B73256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:de:b8:ea:50:bf:e8:ee:5f:b1:50:48:dd:
c6:03:de:61:d1:93:e8:06:0a:85:88:0f:fc:86:bc:
a8:8d:3f:43:bb:e3:4c:54:6c:ba:2c:52:dc:d0:88:
11:14:23:00:5d:33:81:a5:c6:3c:f4:51:55:ba:bf:
93:44:90:e1:5b:91:64:d0:2e:09:f3:47:c3:27:e1:
82:68:88:e7:65:30:5b:3f:0d:3a:17:b2:d6:74:c0:
b8:3b:c6:d9:16:9e:7e:e5:1d:2f:5a:4b:51:f7:d3:
f0:9e:ac:b2:76:bf:78:12:5a:f8:30:2d:74:52:95:
9f:3d:84:9c:1c:02:27:65:03:9e:94:da:53:27:36:
8a:b6:6d:3e:78:69:ff:90:2d:f2:82:ec:2b:77:9a:
17:96:ee:b3:99:4e:f6:62:2c:f7:07:c7:64:83:33:
59:72:9d:57:cc:72:55:0d:e0:79:7b:a5:5e:9e:f8:
df:cc:7f:77:84:7e:d9:07:23:07:6d:fa:c9:58:36:
b2:c7:8d:57:60:47:a0:da:29:80:a3:32:bd:19:91:
df:4b:07:86:54:51:dd:3f:e3:9a:9d:ce:3a:6c:59:
8d:1e:40:43:34:9f:8b:96:b8:33:04:e7:71:0b:ef:
42:18:1f:7b:91:0d:83:73:d4:a3:ac:7f:15:2d:25:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:CF:F9:70:90:6B:B0:7D:22:99:48:AD:56:E4:44:32:B7:32:56
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.16.0/24
Signature Algorithm: sha256WithRSAEncryption
03:23:7b:7d:70:71:a8:f0:c8:b9:a1:8c:24:ce:65:97:04:27:
e1:36:ae:78:ae:be:7c:3f:4b:ec:9a:22:26:21:60:09:2b:fd:
71:64:ab:34:84:98:86:9e:27:9d:fe:19:a2:0b:46:a6:c5:19:
18:d0:c7:5f:5b:bc:cf:a5:59:f2:6c:12:b8:92:d9:e1:d6:70:
7a:82:c9:4f:19:a9:98:44:6c:f7:7d:77:be:dd:b8:40:6b:64:
d4:44:32:4b:bd:f3:ab:13:c5:7d:d5:64:06:b6:61:b6:c2:10:
14:bb:f9:29:41:37:ed:56:77:69:d0:d7:e9:dd:a6:6e:e9:7a:
94:20:64:c5:b2:3d:0f:85:58:62:be:b2:5e:e6:f6:63:75:6e:
c8:08:9b:5f:f0:d5:10:1f:64:56:08:7e:e4:b8:e6:73:6e:93:
96:3e:19:25:62:f8:79:67:e4:a5:02:96:17:cf:13:d8:e0:20:
ee:5f:1a:8b:d1:f0:14:ae:a7:b0:4f:94:a4:a0:c8:ce:32:db:
45:91:80:34:b1:47:95:9d:f4:3b:0f:bb:24:71:98:ce:ff:d2:
b1:d4:b7:de:2b:14:61:9c:d9:1c:38:84:53:f3:e1:e7:91:2b:
e2:03:c0:18:57:f2:10:a2:42:68:e4:fc:7c:bf:0e:22:48:9c:
41:10:3a:5c
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUNxhf7y9zfryB7Mnj+GnFCA6A5wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNTEwMjExMzE3NDNaFw0yNjEwMjAxMzIyNDNaMDMxMTAvBgNV
BAMTKDgyQTJDRkY5NzA5MDZCQjA3RDIyOTk0OEFENTZFNDQ0MzJCNzMyNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQN646lC/6O5fsVBI3cYD3mHR
k+gGCoWID/yGvKiNP0O740xUbLosUtzQiBEUIwBdM4Glxjz0UVW6v5NEkOFbkWTQ
LgnzR8Mn4YJoiOdlMFs/DToXstZ0wLg7xtkWnn7lHS9aS1H30/CerLJ2v3gSWvgw
LXRSlZ89hJwcAidlA56U2lMnNoq2bT54af+QLfKC7Ct3mheW7rOZTvZiLPcHx2SD
M1lynVfMclUN4Hl7pV6e+N/Mf3eEftkHIwdt+slYNrLHjVdgR6DaKYCjMr0Zkd9L
B4ZUUd0/45qdzjpsWY0eQEM0n4uWuDME53EL70IYH3uRDYNz1KOsfxUtJXSfAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUgqLP+XCQa7B9IplIrVbkRDK3MlYwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMyMmUz
MTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQABbYQMA0GCSqGSIb3DQEBCwUAA4IBAQADI3t9cHGo8Mi5oYwkzmWXBCfhNq54
rr58P0vsmiImIWAJK/1xZKs0hJiGnied/hmiC0amxRkY0MdfW7zPpVnybBK4ktnh
1nB6gslPGamYRGz3fXe+3bhAa2TURDJLvfOrE8V91WQGtmG2whAUu/kpQTftVndp
0Nfp3aZu6XqUIGTFsj0PhVhivrJe5vZjdW7ICJtf8NUQH2RWCH7kuOZzbpOWPhkl
Yvh5Z+SlApYXzxPY4CDuXxqL0fAUrqewT5SkoMjOMttFkYA0sUeVnfQ7D7skcZjO
/9Kx1LfeKxRhnNkcOIRT8+HnkSviA8AYV/IQokJo5Px8vw4iSJxBEDpc
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:39:53 2025 by rpki-client