Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232342e302f32342d3234203d3e20313437303439.roa
File: 34352e3133342e3232342e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: 3/ia+J0TguQlDRY9V0CAJPhKpZ1VCiU5mDBx+w26CNM=
Subject key identifier: 58:80:28:03:66:D5:0F:0C:26:12:CD:58:C0:1B:A4:F2:15:67:6B:71
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1E1F21CCBC324FE7D4F1CD75770FE80B26D1505D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232342e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 30 Oct 2026 12:32:12 +0000
ROA not before: Fri 30 Oct 2026 12:27:12 +0000
ROA not after: Fri 29 Oct 2027 12:32:12 +0000
asID: 147049
IP address blocks: 45.134.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:1f:21:cc:bc:32:4f:e7:d4:f1:cd:75:77:0f:e8:0b:26:d1:50:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:27:12 2026 GMT
Not After : Oct 29 12:32:12 2027 GMT
Subject: CN=5880280366D50F0C2612CD58C01BA4F215676B71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:b0:7d:c1:f6:52:72:35:34:34:24:06:95:
66:e8:80:92:0a:ee:a5:68:8d:5f:1d:5e:6f:f4:e9:
49:a9:64:f9:42:ff:29:fd:8e:37:79:e2:c4:45:93:
e2:a8:25:13:c4:3d:a5:7a:85:16:fa:ce:e3:4f:01:
6b:e4:5d:bc:e9:28:32:4b:47:51:7d:38:8d:b8:18:
8f:f2:18:f2:b2:3f:fe:0e:17:41:df:5a:ef:f9:d3:
5b:13:99:9d:38:be:5d:f4:90:45:c6:17:c2:2e:0a:
76:8e:fe:46:04:58:3e:b8:93:7c:e1:09:40:2d:b3:
16:4c:6f:80:25:a2:88:36:90:84:c5:f6:67:16:3f:
f5:6f:0f:0c:87:94:f8:e9:e0:83:58:a0:cf:32:50:
a4:66:dd:83:a2:fb:e5:a4:e5:52:98:52:61:d5:b9:
97:f2:c8:47:a0:27:42:06:bb:1d:a4:45:d8:cf:6b:
e6:35:41:a7:e3:23:c7:c9:ba:ae:8f:f9:6e:62:6e:
48:fd:31:3f:33:2e:62:fa:11:86:36:54:f3:bb:e4:
f4:bb:5e:12:41:56:1f:a4:01:5d:c8:1f:cc:32:80:
d7:0c:8f:b7:6e:7e:0f:1f:35:2e:7b:0a:a1:2a:09:
ce:f9:41:77:3e:06:59:74:78:b0:aa:b3:ef:85:dd:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:80:28:03:66:D5:0F:0C:26:12:CD:58:C0:1B:A4:F2:15:67:6B:71
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232342e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.224.0/24
Signature Algorithm: sha256WithRSAEncryption
89:d5:af:6b:db:c1:fa:dd:e1:dc:7a:e9:22:cb:f7:62:c2:90:
5c:a2:99:6d:f1:93:52:a7:d5:30:d0:9d:be:9c:d3:21:d8:b5:
6c:63:06:16:e8:ba:f7:4c:be:a7:15:b7:2b:ae:50:3f:37:c2:
f3:27:5a:b6:d1:60:bb:e7:66:60:0b:e6:df:26:03:51:d8:4d:
2a:01:c7:92:04:ce:fe:49:c1:d1:a6:47:99:39:ec:4a:e4:89:
6a:ea:1c:8c:6e:7c:4e:63:ec:c2:24:30:22:8f:a4:e0:1b:0b:
92:1d:ff:e4:ba:72:b5:f5:88:7e:ab:3b:57:53:a3:7e:5f:9a:
11:58:e1:c8:c9:b9:7b:de:8d:93:fd:37:cc:dd:a9:64:bb:e7:
46:48:d3:7c:3d:e5:9e:6e:4b:ae:a0:50:45:7e:48:ed:fb:fc:
23:63:47:8f:67:7a:84:c8:26:90:3a:d6:d4:c9:84:2c:5e:f2:
7f:0e:2a:26:bf:77:26:c1:7c:00:8c:df:8e:11:d7:86:32:98:
1c:96:fc:62:f9:0f:2f:56:1e:7b:7a:f0:09:1a:67:d7:bc:88:
4d:47:7a:e5:27:dc:0a:ae:86:0b:01:37:81:cd:ca:d9:00:f1:
7b:a9:a8:fa:73:8c:ab:1b:0b:22:19:01:51:3e:8a:b0:a6:78:
bc:2c:08:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:55:50 2026 by rpki-client