Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35372e302f32342d3234203d3e203631333137.roa
File: 34352e31332e35372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: uVX0NKXA9w5gmt3iHG2SBion2XIececRKATOx83KptY=
Subject key identifier: FB:D0:4E:08:D0:9A:2D:70:D5:88:0F:9D:4D:C9:8E:7D:E5:50:BD:DD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 64E3C00D3DA3EDD81EB67E969BC19652548FB9F5
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35372e302f32342d3234203d3e203631333137.roa
Signing time: Fri 30 Oct 2026 12:32:07 +0000
ROA not before: Fri 30 Oct 2026 12:27:07 +0000
ROA not after: Fri 29 Oct 2027 12:32:07 +0000
asID: 61317
IP address blocks: 45.13.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e3:c0:0d:3d:a3:ed:d8:1e:b6:7e:96:9b:c1:96:52:54:8f:b9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:27:07 2026 GMT
Not After : Oct 29 12:32:07 2027 GMT
Subject: CN=FBD04E08D09A2D70D5880F9D4DC98E7DE550BDDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:78:ca:0b:2d:da:9d:c4:84:d2:fe:f8:8e:
b8:0e:1d:a9:60:f5:84:37:46:3c:36:73:de:41:54:
71:3f:b7:41:9e:12:bd:0c:a1:77:8f:8b:88:25:0f:
f3:ec:ec:a2:07:2d:01:9c:5c:66:51:fd:29:ab:54:
b6:5e:25:7c:66:a2:97:c7:a5:4f:50:ba:1f:5a:c3:
94:12:e8:d8:2b:dd:5f:4a:8f:ed:f8:e1:42:5d:bf:
04:a1:95:35:08:40:5f:87:39:1d:16:ae:72:37:53:
7b:f2:07:df:d9:3e:34:6b:9f:24:0c:ef:4e:12:87:
c5:a4:f9:57:7b:59:81:3c:77:9c:73:74:18:3a:b6:
f1:e0:96:45:83:bd:53:a8:22:24:53:1f:e6:67:65:
4d:8f:b7:04:13:c2:81:fb:05:e9:cb:ff:57:20:30:
82:7b:04:ee:6c:fc:f6:e2:86:5c:6c:c2:92:8a:50:
d3:a3:7c:47:c8:f9:f9:85:e5:6e:35:08:29:a5:75:
72:5d:d3:ff:fa:e3:e0:52:ad:6d:82:98:e7:4b:75:
fe:37:f7:cf:74:60:ad:94:95:d3:31:c1:0f:b5:1e:
49:31:82:73:8f:b0:7c:3f:74:30:08:e1:f6:6f:43:
5c:14:ef:74:f3:19:18:f3:9b:9a:6a:e6:13:f2:96:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D0:4E:08:D0:9A:2D:70:D5:88:0F:9D:4D:C9:8E:7D:E5:50:BD:DD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.57.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b0:7b:10:40:1b:27:44:3b:d9:48:a4:62:d1:51:98:98:01:
4e:17:68:ab:53:65:00:72:85:ea:cc:e3:d4:1a:00:88:ed:9c:
ee:8f:ec:8c:c3:57:b0:5e:ec:38:35:84:13:62:90:0d:5c:c5:
93:26:c9:35:a2:6c:1b:1e:e9:9a:32:40:ca:a5:4b:e0:85:12:
a1:23:98:b1:44:d8:8e:63:da:87:9a:92:80:36:8c:b3:1b:7b:
4f:30:74:94:f3:ad:73:d9:c5:a3:e3:5e:ad:93:c0:7f:8a:f3:
b8:49:a6:be:df:c9:93:47:b8:61:b6:74:f7:65:b9:1f:c3:e8:
0a:c9:24:c6:2c:8e:fc:11:26:bd:fd:67:4a:72:6b:7a:a4:f3:
bb:4d:60:f6:c4:d3:85:02:7a:a2:ba:bb:c1:ae:61:24:9c:8c:
7d:2f:f1:65:26:1e:43:30:fe:b1:a4:d8:d9:e6:86:5e:44:a2:
fe:1e:e4:5a:a5:a1:a1:21:fe:2a:08:f8:b1:6d:c3:af:e9:fd:
98:7a:e6:03:98:fb:0d:17:31:6c:7e:7a:c9:d6:38:1d:08:6d:
ff:3e:6b:e3:c0:90:a5:dc:1f:d3:46:25:13:e4:5b:28:ba:c5:
4b:f0:8b:82:25:d5:6e:2c:70:11:e9:7b:09:16:0b:ab:64:e8:
61:b8:88:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:32:37 2026 by rpki-client