Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132302e302f32332d3234203d3e203437353833.roa
File: 34352e3135312e3132302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: X2VDEHavKgPey0aRwjCEUPVfrOuA+Vo8XOpbjj067sA=
Subject key identifier: 67:BF:FF:6C:66:63:35:A3:EA:D8:F7:B8:D0:E8:A4:CC:BF:3D:94:76
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 59E7E8F045781760BA8CBEBAECAF76BDB90D830D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132302e302f32332d3234203d3e203437353833.roa
Signing time: Fri 30 Oct 2026 12:31:08 +0000
ROA not before: Fri 30 Oct 2026 12:26:08 +0000
ROA not after: Fri 29 Oct 2027 12:31:08 +0000
asID: 47583
IP address blocks: 45.151.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e7:e8:f0:45:78:17:60:ba:8c:be:ba:ec:af:76:bd:b9:0d:83:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:08 2026 GMT
Not After : Oct 29 12:31:08 2027 GMT
Subject: CN=67BFFF6C666335A3EAD8F7B8D0E8A4CCBF3D9476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:24:a6:7d:2b:3c:1f:ed:94:ac:3b:73:55:
02:2e:15:76:51:1b:9b:58:46:78:86:fc:f6:63:1e:
d5:50:2b:04:16:45:80:7a:7f:28:a4:b8:05:65:45:
8e:8f:f2:52:69:ab:19:ad:f4:45:8e:bc:7f:71:9b:
3b:e2:ad:e8:66:41:54:ca:4b:1b:cb:a5:6c:d9:c0:
cb:68:1e:a0:f6:9f:34:33:40:97:b8:3d:cc:f9:27:
34:fb:5f:96:fb:b0:39:47:3b:df:cc:62:28:86:85:
18:cc:2f:d9:e0:29:54:84:c6:84:cf:6d:bc:3c:8e:
8b:4c:1b:b1:1d:f4:d3:46:4d:ca:d9:e8:c0:67:3d:
3c:41:64:13:7c:0c:fc:ab:2b:ac:0f:39:85:27:a5:
fd:7e:8b:7b:aa:64:62:3d:a4:e7:9a:83:26:a1:16:
84:82:5f:d3:5a:64:cc:73:cf:11:00:d6:d9:2b:80:
e4:0a:11:5d:82:60:a6:e0:c4:a2:5a:15:4f:f1:69:
01:ca:53:a4:57:d6:8d:d2:4e:b5:af:bc:ed:0f:a3:
f8:49:e4:6e:39:10:75:1e:45:4b:5b:c2:07:e3:d1:
6b:01:22:bf:28:44:34:81:0c:b8:92:12:7e:c9:a4:
50:28:28:ad:f8:43:24:5b:d0:7e:01:2a:0e:37:8e:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:FF:6C:66:63:35:A3:EA:D8:F7:B8:D0:E8:A4:CC:BF:3D:94:76
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.120.0/23
Signature Algorithm: sha256WithRSAEncryption
00:1c:4c:c4:20:e2:3e:0c:fa:07:fb:32:54:c0:b4:c3:55:d3:
a2:c5:f1:80:78:04:0a:80:84:be:c5:31:26:e1:bd:9d:f5:10:
64:81:e6:cf:00:fa:ba:e6:2d:2f:4c:7e:dd:75:98:46:d6:91:
95:00:4e:09:d2:46:5b:8b:cc:c3:d1:5c:95:54:59:c2:c4:22:
86:e1:54:26:13:5e:d9:6a:08:fd:60:8c:41:88:ba:b0:7e:1b:
4f:fb:7c:2d:a0:15:e2:02:fc:66:f8:51:ed:d1:8b:7c:7f:84:
b2:0f:13:10:a3:b4:74:af:79:17:d4:38:5d:bf:8f:6b:e1:3d:
12:0b:e0:29:bd:e0:13:be:96:20:8d:62:64:d3:c6:d7:c0:ee:
1c:96:42:63:87:13:28:c2:24:5f:84:6f:00:8c:c7:20:7b:21:
f1:68:06:4f:eb:26:49:3e:31:05:da:64:e3:9d:b9:72:01:d9:
bd:3c:e3:6b:28:fe:41:8a:74:c3:61:e7:da:8e:0b:a8:e3:38:
a5:32:3d:61:6f:ac:af:6c:75:de:95:c9:e0:17:3e:f0:51:b4:
57:c4:d4:5a:3c:fd:55:26:9b:6f:3f:4d:89:50:a1:f0:de:2b:
ab:99:cb:70:07:61:c1:fa:9e:0c:4a:43:6f:76:bc:f1:49:b1:
ac:cb:e0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:47:27 2026 by rpki-client