Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa
File: 34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa (raw, json)
Hash identifier: rVLSdtDGT9g9uJLAcNaB0urY5moekyoZ+8uz2VXIelw=
Subject key identifier: FF:0B:BA:DB:22:71:53:F2:C0:E5:CC:82:85:59:F7:E6:C1:97:13:CE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 11079421F13BAEC0B6D22AF590C1D5B89C0663CE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa
Signing time: Fri 30 Oct 2026 12:32:26 +0000
ROA not before: Fri 30 Oct 2026 12:27:26 +0000
ROA not after: Fri 29 Oct 2027 12:32:26 +0000
asID: 208046
IP address blocks: 45.134.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:07:94:21:f1:3b:ae:c0:b6:d2:2a:f5:90:c1:d5:b8:9c:06:63:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:27:26 2026 GMT
Not After : Oct 29 12:32:26 2027 GMT
Subject: CN=FF0BBADB227153F2C0E5CC828559F7E6C19713CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:a1:db:b8:d4:36:46:37:88:3a:9f:17:b6:
89:f6:90:29:d5:54:0c:39:c5:cd:d9:ea:d6:c8:66:
ad:cc:88:1a:4f:b6:df:29:66:52:70:6a:8a:92:74:
bf:d0:b4:ac:44:b1:a6:36:2c:50:d3:98:3c:ac:bd:
84:f0:ff:e5:72:fd:2e:52:8d:2a:c0:f2:f2:aa:5b:
4e:7c:f2:7d:5a:11:33:13:5d:fa:85:39:73:69:11:
a7:a4:35:ad:ed:ef:43:df:e4:78:64:62:43:bb:cc:
05:81:b1:39:88:ed:d2:e0:02:b2:ea:14:d5:a1:92:
91:cc:39:7f:58:35:27:95:09:ec:9c:fc:58:e9:66:
d3:3f:63:35:22:c6:b1:9c:a6:7a:d0:63:fa:5a:7f:
f6:b0:e5:85:1c:63:b6:0a:b5:27:85:75:67:44:89:
c6:60:18:39:7a:7e:1e:60:9d:5a:12:d2:56:01:cd:
8f:06:02:f2:fd:44:f9:82:13:20:45:4e:1a:53:19:
31:43:2e:8e:36:1a:f5:2e:bb:63:0c:69:3d:e1:b0:
c2:58:73:24:77:56:2f:1f:d6:a9:d6:13:86:a1:56:
77:f5:0f:e1:61:12:f6:5b:69:6f:bf:32:40:a3:8a:
9c:24:19:6d:1f:26:50:d8:ef:95:78:d7:b5:c1:c3:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0B:BA:DB:22:71:53:F2:C0:E5:CC:82:85:59:F7:E6:C1:97:13:CE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.225.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ac:b3:12:bc:c9:47:35:35:65:e4:1e:b8:bd:0b:c4:81:c6:
c3:02:61:a6:76:57:f1:88:13:4c:e1:0a:8f:5e:25:34:b0:a5:
a7:2b:28:ae:6f:ec:71:48:b8:04:50:03:0c:85:7e:dc:ad:b3:
fd:eb:f5:f1:e4:10:72:b8:74:a4:2c:ee:04:9b:a2:87:62:c6:
82:2d:db:78:e5:56:26:e8:6e:9a:05:ee:a7:f4:ff:f2:32:10:
74:9f:6d:67:5d:11:1a:fc:eb:ea:d5:a2:60:88:2c:0b:d6:83:
99:74:75:dc:8d:e8:b1:75:84:e9:62:b1:a8:2e:62:ad:10:1c:
f8:94:bc:15:83:0d:8e:1b:90:12:38:d6:92:1a:5a:70:9d:40:
e4:43:d9:16:6c:57:5b:e1:5b:93:d4:70:05:1c:ac:c8:91:01:
91:0e:83:f4:7c:06:41:7e:e0:b8:aa:f6:bf:88:a2:7d:9e:fc:
81:60:45:fe:f9:4c:52:f6:d8:11:85:40:a6:aa:74:30:9f:73:
66:86:7a:7d:e9:59:82:9a:65:10:33:b1:11:7b:87:b3:f0:f8:
7f:f8:21:cc:23:df:20:19:15:9f:6f:2b:d0:92:99:f6:00:43:
cd:4b:65:61:a7:db:57:4b:55:05:01:ac:af:06:11:d2:00:8a:
d0:1c:a4:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:48:57 2026 by rpki-client