Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35362e302f32332d3234203d3e20323034313730.roa
File: 34352e31332e35362e302f32332d3234203d3e20323034313730.roa (raw, json)
Hash identifier: FyvWt+XKXu0ssn8wqJg8tYgRUnynKKBW2s62h66lQT0=
Subject key identifier: C5:61:E5:8B:F2:99:C9:F0:14:6E:4D:49:5D:8A:50:12:C7:74:F1:AD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3ADA4DBA7C310E789DDAC681B9A846A6244F25B4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35362e302f32332d3234203d3e20323034313730.roa
Signing time: Fri 30 Oct 2026 12:31:02 +0000
ROA not before: Fri 30 Oct 2026 12:26:02 +0000
ROA not after: Fri 29 Oct 2027 12:31:02 +0000
asID: 204170
IP address blocks: 45.13.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:da:4d:ba:7c:31:0e:78:9d:da:c6:81:b9:a8:46:a6:24:4f:25:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:02 2026 GMT
Not After : Oct 29 12:31:02 2027 GMT
Subject: CN=C561E58BF299C9F0146E4D495D8A5012C774F1AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:ce:e6:01:b1:ec:94:37:b2:55:d1:71:c3:
ae:52:b1:9d:34:01:bf:de:fa:39:0b:7d:4e:2d:d3:
b2:8e:98:41:b6:a5:5c:32:b1:f8:34:0e:a7:ec:76:
74:5c:7b:a9:d2:72:b8:b9:5b:dd:cd:16:c1:cf:d4:
b1:f5:bb:a6:0b:d0:bd:87:53:9e:b9:67:a7:b8:24:
60:67:89:07:ce:6f:0f:58:f2:43:bf:f2:07:af:05:
a0:96:9f:88:bf:06:57:86:3b:d9:6b:0a:91:4a:eb:
02:6e:ab:ab:0b:2f:63:1a:08:2b:b7:9b:e9:9e:9a:
61:8a:a8:a8:6a:a1:d3:d5:3a:fd:92:40:0a:0a:c2:
16:24:1d:0d:9f:de:d8:5d:77:dd:46:8a:63:bf:6f:
4b:2e:89:4d:db:f9:ed:c4:a7:8a:ac:72:af:2b:93:
6b:1a:43:f7:97:64:c4:36:e3:bc:9c:b6:bd:7e:c0:
86:3f:d0:e9:fd:9c:96:83:ae:a2:86:ef:97:6b:9d:
b8:18:0c:f4:c5:32:45:bd:4f:97:75:7a:46:cc:99:
89:d2:9c:5f:cf:27:e4:f1:49:a8:21:45:2b:a5:c6:
e0:0b:c6:a1:7a:56:61:66:9e:e1:fd:e7:7a:2c:a2:
0a:8f:6f:27:dd:a3:b5:6d:c3:80:2c:49:0b:9f:65:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:61:E5:8B:F2:99:C9:F0:14:6E:4D:49:5D:8A:50:12:C7:74:F1:AD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35362e302f32332d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.56.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:d6:a9:0d:d1:2a:27:2a:b5:08:ad:b4:4e:e6:6d:5c:8b:3a:
96:f6:ef:0b:6f:98:83:33:bf:1a:af:6a:95:eb:aa:1e:2c:6a:
ce:41:5e:43:c8:77:c5:77:09:0a:eb:05:34:26:94:75:83:92:
bd:b3:7f:f7:40:0e:4a:40:ad:66:ab:fd:ce:34:2a:1d:c3:6a:
ba:19:b6:2c:4b:25:fa:67:0c:4f:9d:64:86:5e:81:e4:f6:83:
7f:30:f9:04:2e:fc:ff:4e:a9:9c:a0:7b:7e:1b:af:ac:7b:5f:
e0:74:2a:c9:ad:ce:0d:5b:f4:b0:6c:a1:69:dd:04:01:d3:41:
c1:7c:c1:59:ee:ff:66:b4:ec:86:52:17:31:ab:e7:c7:ae:86:
4d:cb:c8:ba:07:5c:28:52:fd:70:53:24:8a:3f:ff:57:fb:18:
f0:a4:f4:08:24:bc:36:cf:68:75:bc:97:24:a2:55:07:5c:83:
2a:fc:1d:4b:c0:b8:bc:fe:4f:20:5a:df:c1:78:cb:d4:ca:fa:
b6:25:0a:06:56:b7:14:75:b1:6d:5b:a9:67:b7:db:f9:71:cc:
01:2f:45:9f:c9:0e:44:8b:e9:f5:7e:78:ec:3c:83:e4:9d:13:
89:f7:59:f7:c0:d8:c9:39:ee:9a:44:d4:0e:e6:93:38:fc:58:
3d:3e:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:45:20 2026 by rpki-client