Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233322e302f32332d3233203d3e203531313637.roa
File: 352e3235332e3233322e302f32332d3233203d3e203531313637.roa (raw, json)
Hash identifier: 2kUsB/jtTqNu7RU+wWkdzLCozJuNjqE+O7Yt1qP5Guw=
Subject key identifier: DA:05:CE:FE:11:E6:40:F5:98:61:59:06:63:DB:11:BC:44:88:9E:D5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5EBAADE87897E0E9EFAD268A55E38B50ABF8D7E3
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233322e302f32332d3233203d3e203531313637.roa
Signing time: Tue 03 Nov 2026 23:31:39 +0000
ROA not before: Tue 03 Nov 2026 23:26:39 +0000
ROA not after: Tue 02 Nov 2027 23:31:39 +0000
asID: 51167
IP address blocks: 5.253.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ba:ad:e8:78:97:e0:e9:ef:ad:26:8a:55:e3:8b:50:ab:f8:d7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 3 23:26:39 2026 GMT
Not After : Nov 2 23:31:39 2027 GMT
Subject: CN=DA05CEFE11E640F59861590663DB11BC44889ED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:f5:e1:45:dc:89:fb:54:fe:2e:13:69:e3:
4b:fd:4d:f2:cd:c8:73:16:0f:c8:3c:6d:b3:99:5f:
8c:72:c8:2f:51:9c:ab:ea:d8:f9:af:18:49:dd:6e:
38:ee:0a:2a:8c:63:5e:6c:79:51:7b:cb:ac:c9:d2:
56:86:44:f4:00:84:73:0b:26:f2:8f:06:6c:ec:e7:
04:6f:fa:f2:30:b8:68:59:0c:f2:9f:6e:65:50:ca:
6b:b0:c6:d0:60:d6:5f:b7:19:96:2f:e1:e6:e6:59:
67:c3:ef:88:60:0f:dc:29:94:b1:8a:d9:0e:8f:6c:
0c:82:19:d7:2c:80:71:1d:36:a5:ee:82:c5:b9:0b:
3e:13:c5:93:c9:e1:28:c2:f1:b3:9f:6d:1b:51:ef:
94:38:00:e6:4a:2d:1b:08:dd:99:2a:30:a6:86:34:
83:da:c5:29:99:0d:2c:62:43:ab:8a:6d:fc:89:84:
31:5a:01:43:e5:6f:f0:0e:8b:c9:e6:4b:46:c2:f8:
aa:3c:5e:97:ab:62:67:fc:93:2f:ac:91:e5:b2:0a:
40:68:73:02:85:a1:e1:3f:15:2f:d1:20:fb:44:ca:
2c:41:d6:c2:d3:03:96:91:f3:86:a0:8d:67:94:87:
35:77:12:32:f2:47:72:9e:d1:c0:4b:0f:3b:bd:a4:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:05:CE:FE:11:E6:40:F5:98:61:59:06:63:DB:11:BC:44:88:9E:D5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233322e302f32332d3233203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.232.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:b9:02:79:5b:04:e5:78:28:09:a8:6a:e8:0f:6c:74:40:a2:
e9:fa:46:99:22:43:8e:21:71:1c:6c:aa:68:52:c0:14:53:f9:
b0:ba:2f:5c:37:a0:bd:95:11:7f:b5:8e:ee:c7:0d:94:f3:ae:
67:b9:c3:05:5b:1e:01:d4:b7:43:64:f7:46:46:89:8a:c9:dd:
c7:ca:34:9e:cf:c4:21:93:d6:ec:20:31:90:e3:7a:52:bf:79:
d3:f2:db:08:32:ee:b4:55:58:13:a7:b2:fa:01:c0:3f:35:dc:
33:c9:60:ed:e3:f0:74:74:cd:8c:e4:5e:bf:94:31:d0:c4:e8:
9d:93:f1:53:c8:33:b1:c9:f5:c9:47:9b:54:2b:45:5e:92:95:
4d:8b:07:92:cb:a4:ee:5f:50:62:36:76:48:79:3d:89:dd:94:
59:5c:47:50:1a:14:d3:8d:0a:6c:bd:b8:f3:a5:8f:4d:cd:0b:
eb:05:6d:c0:18:ba:5e:a3:0c:9e:1a:f5:e2:b5:05:70:95:98:
61:75:e3:61:7a:a0:2c:1f:1e:18:78:fa:8f:34:84:85:e8:30:
db:85:66:dd:c2:3f:38:60:01:2f:9b:d1:9a:25:eb:b0:8b:35:
f9:00:f6:a5:9c:d4:1e:e0:58:34:8a:21:5f:69:ea:f8:38:90:
2b:c2:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:57:56 2026 by rpki-client