Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233342e302f32332d3233203d3e203531313637.roa
File: 352e3235332e3233342e302f32332d3233203d3e203531313637.roa (raw, json)
Hash identifier: QdpQ8PpaU/IdMawS9iFmQwsUosygfhKQ1iTbcvUlYJE=
Subject key identifier: 93:4A:A4:D8:88:9A:C2:19:B0:BB:92:5F:BE:61:A3:04:E2:F4:EF:E3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7579B3904C4182AA758EE744CAABA3FE171D3A9E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233342e302f32332d3233203d3e203531313637.roa
Signing time: Tue 03 Nov 2026 23:31:40 +0000
ROA not before: Tue 03 Nov 2026 23:26:40 +0000
ROA not after: Tue 02 Nov 2027 23:31:40 +0000
asID: 51167
IP address blocks: 5.253.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:79:b3:90:4c:41:82:aa:75:8e:e7:44:ca:ab:a3:fe:17:1d:3a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 3 23:26:40 2026 GMT
Not After : Nov 2 23:31:40 2027 GMT
Subject: CN=934AA4D8889AC219B0BB925FBE61A304E2F4EFE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:0b:66:0d:f0:03:e1:66:45:8c:f5:95:26:
2b:9f:8b:cd:c3:6f:b8:d5:44:ec:70:76:76:32:88:
03:20:bd:99:56:49:eb:45:ea:96:5a:dc:36:99:6b:
f0:ca:c5:92:4c:43:42:df:31:95:1c:2d:f6:29:73:
70:4e:6b:3f:18:62:9f:80:6c:5d:3a:88:29:c6:ca:
f1:17:fb:3c:a4:44:68:2a:b4:87:ea:8f:eb:8b:55:
e3:a0:1e:92:77:a0:14:57:5e:9f:b7:a3:4b:39:e6:
6c:17:e1:40:bd:d8:fb:cd:19:01:d9:46:f7:92:87:
ca:e9:71:b5:1b:18:cb:34:31:f9:13:c7:89:95:af:
15:74:03:27:f1:3e:ae:82:04:bb:5c:d2:e0:1d:66:
a7:88:b8:a2:57:36:f5:da:a1:84:37:96:89:61:b8:
c0:e7:63:ed:64:71:e3:17:43:18:cc:eb:2f:16:bc:
3e:49:d5:c1:5f:fb:b2:91:20:64:b5:65:fb:ff:e1:
e4:26:8a:82:46:32:b7:d8:9a:ac:09:d8:44:86:b1:
b7:8d:01:9d:82:aa:68:2c:22:fd:03:84:3d:a1:35:
4a:30:49:da:56:02:e0:38:7a:ad:fd:c8:f4:8e:99:
62:d1:2c:f8:1c:01:a9:d4:44:ab:f4:8d:ea:4a:55:
01:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4A:A4:D8:88:9A:C2:19:B0:BB:92:5F:BE:61:A3:04:E2:F4:EF:E3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233342e302f32332d3233203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.234.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:4d:d5:1e:f1:73:4d:24:2d:56:7e:14:e0:83:35:f4:e1:ed:
6a:de:a3:3e:c5:7d:c5:fc:ef:d0:03:23:86:ae:a4:7d:08:7c:
e4:10:5e:2c:3c:7b:88:3a:b9:9c:d0:6e:77:1a:78:bd:93:7f:
6e:a3:aa:9d:bd:d3:77:46:b6:3f:e5:20:c3:90:7a:43:b9:34:
d3:cf:8a:35:39:19:00:a9:6d:ba:be:bc:b8:21:17:17:48:b1:
43:ec:7c:a7:e8:0e:21:62:81:f4:28:39:ec:ab:7f:1c:33:6e:
98:c3:80:a8:67:0c:ab:db:6e:12:5d:a7:f2:22:a2:4e:1b:82:
34:ee:91:23:0e:68:96:52:d1:d6:58:46:21:2a:04:bc:ca:4b:
97:f3:63:0c:07:08:d7:b7:d9:71:ee:a9:58:4e:21:8e:e5:11:
13:74:fa:20:03:0a:a0:42:d1:75:bf:b8:3b:e1:a1:37:e0:5c:
42:03:12:9b:a7:c5:6a:2b:86:4d:64:41:f9:3e:bb:91:56:38:
29:8d:66:5b:63:b5:8a:a4:ef:f1:5e:fd:d0:1a:67:fb:0c:45:
0e:f6:f1:47:ca:87:53:e7:2c:91:3c:d2:94:fe:7e:4a:0b:08:
9d:d9:f5:e1:9c:0e:95:b8:c1:f2:aa:b8:5f:92:56:9b:92:24:
34:34:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:52:21 2026 by rpki-client