Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323036383034.roa
File: 34352e3132392e33332e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: gAWXtrtTBX9SZBarfjvElQgZjEVhsoxHVna+f+bTbqY=
Subject key identifier: 5F:2A:9E:45:4D:E3:18:0C:F7:F6:C7:35:13:12:70:06:5C:61:66:B3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 46FC28F17CCEABC470412246A4D1DBFB851E0868
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323036383034.roa
Signing time: Fri 30 Oct 2026 12:32:09 +0000
ROA not before: Fri 30 Oct 2026 12:27:09 +0000
ROA not after: Fri 29 Oct 2027 12:32:09 +0000
asID: 206804
IP address blocks: 45.129.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:fc:28:f1:7c:ce:ab:c4:70:41:22:46:a4:d1:db:fb:85:1e:08:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:27:09 2026 GMT
Not After : Oct 29 12:32:09 2027 GMT
Subject: CN=5F2A9E454DE3180CF7F6C735131270065C6166B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:31:9e:28:27:e6:0c:da:e8:05:b3:1b:49:
0c:23:aa:2c:99:3b:ed:92:fe:c5:40:ae:a7:1e:25:
4e:f2:ae:b1:44:c2:ba:6c:08:d8:0f:ba:96:88:b3:
7d:1a:12:a9:1f:ef:65:a2:8a:d3:b0:54:45:91:9d:
8d:07:2f:e7:2f:2e:a6:80:09:05:dc:63:41:8b:d5:
5c:ee:d2:86:29:9d:77:c5:be:1f:ea:be:b3:4c:7a:
e4:c2:79:6a:fb:c5:86:bf:aa:61:91:cf:5d:bd:87:
ff:ae:16:cf:2a:aa:82:ca:5d:be:4f:a0:43:29:d5:
86:f6:fb:84:e3:36:b3:f2:06:5c:72:3c:d5:bd:ce:
81:7f:72:17:6b:26:33:d1:19:fd:3a:55:fa:61:0f:
ea:a2:d0:35:e0:cd:ba:41:9f:2f:8e:56:92:3a:0f:
06:47:25:7c:ee:e0:e3:9d:ca:e1:44:4a:ba:39:57:
b7:3f:53:f0:28:ef:12:c6:92:cf:ce:9f:1b:29:ae:
a2:3f:a7:46:57:07:f0:f4:ee:14:b5:88:c8:5a:53:
f6:3d:96:6b:27:44:91:46:c3:33:2a:28:67:8c:1b:
bc:56:34:14:54:3a:06:eb:59:dc:2b:07:7e:d5:16:
15:cb:c7:75:ac:fa:89:21:0b:36:fe:d1:dd:58:6b:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2A:9E:45:4D:E3:18:0C:F7:F6:C7:35:13:12:70:06:5C:61:66:B3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.33.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:22:dd:29:57:d4:60:df:2c:18:04:f6:bd:20:f0:f4:80:de:
15:da:e5:84:6d:ad:a1:28:16:e7:4e:8b:a4:6e:0b:2d:46:56:
62:72:22:99:fe:a7:f4:2d:f1:f3:d9:5d:fb:89:bf:af:50:1b:
56:dd:07:82:ea:5b:da:e2:42:f2:f2:74:59:ae:bc:6c:a7:09:
12:1d:4b:0e:c0:36:da:89:79:3c:28:bd:be:75:aa:7e:7a:b9:
6e:74:60:36:f2:7f:60:19:11:7c:9a:fd:ba:2d:19:06:3b:15:
02:a0:af:27:cc:76:f7:59:bb:c0:df:ca:af:71:50:7d:6b:8d:
24:ba:06:2d:ce:41:4c:c1:32:ab:28:97:08:70:4f:55:47:3e:
a3:2f:77:0a:02:ce:67:bc:2a:1b:f0:c1:8a:92:e7:a3:5b:0e:
10:37:85:ed:d9:cc:60:49:df:51:bc:a7:34:ee:ea:b5:52:c2:
f7:ff:0a:17:c7:40:e9:59:1d:64:68:fc:1e:fb:c5:db:3b:cc:
39:38:a3:33:94:99:7d:76:46:cb:74:a6:7b:4f:b0:27:ad:fe:
1d:d6:fb:86:19:54:4e:5a:d7:80:13:56:fc:76:8c:92:06:43:
1f:d4:f0:20:f7:93:13:fc:3f:8e:db:1e:3f:53:c3:a3:02:28:
7f:67:83:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:16:32 2026 by rpki-client