Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232302e302f32342d3234203d3e203437353833.roa
File: 34352e39302e3232302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: eN8q5RBEMt2OAfAXba6B+3E+sY9y2IrP99dYNaAiPp8=
Subject key identifier: 21:48:76:5A:01:09:9B:40:C2:5E:64:C4:42:CD:11:3A:C7:F6:4A:D2
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 45521EB4203F1CB9B846761E6090F31BD7F97BFC
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232302e302f32342d3234203d3e203437353833.roa
Signing time: Fri 30 Oct 2026 12:32:25 +0000
ROA not before: Fri 30 Oct 2026 12:27:25 +0000
ROA not after: Fri 29 Oct 2027 12:32:25 +0000
asID: 47583
IP address blocks: 45.90.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:52:1e:b4:20:3f:1c:b9:b8:46:76:1e:60:90:f3:1b:d7:f9:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:27:25 2026 GMT
Not After : Oct 29 12:32:25 2027 GMT
Subject: CN=2148765A01099B40C25E64C442CD113AC7F64AD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:84:09:4b:b3:5d:b0:c3:14:5a:9d:3f:20:f8:
c3:9f:3e:16:f2:2d:83:7b:68:0d:29:15:60:14:28:
b5:c8:2c:af:78:d0:69:ce:f5:f5:06:ef:88:cf:40:
f4:bc:76:d0:26:c8:f9:94:98:73:51:8e:12:ff:9b:
ea:69:bf:63:2f:34:85:5b:aa:fb:7c:1b:6e:dc:ad:
e0:e3:dc:c2:db:ad:38:56:5d:f2:42:94:d0:46:d6:
ab:bc:e4:99:96:b4:3e:5e:04:9c:54:54:fa:02:d0:
a5:84:b0:5d:72:ed:74:13:c7:f0:8a:74:09:91:73:
15:5b:58:3f:50:29:4e:fb:00:72:46:a1:ff:07:41:
9e:c4:33:12:93:79:b3:b3:46:ba:12:8f:b7:f2:15:
3c:09:16:32:65:b8:09:63:95:9a:2b:51:29:d9:57:
86:26:ce:ba:46:e0:3d:5c:89:6f:57:9a:75:aa:b5:
ca:f6:46:16:cb:ff:ef:f7:c9:09:4d:68:20:e3:24:
0c:4f:ce:6c:c0:48:6d:6a:43:48:ff:c9:bc:bd:64:
5e:14:c0:32:44:00:3d:2a:a4:0e:f9:b0:88:14:27:
72:08:3b:bf:f6:67:24:8d:3d:69:eb:56:d8:7a:13:
3e:e6:98:35:bc:14:77:84:f5:99:65:46:32:af:ec:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:48:76:5A:01:09:9B:40:C2:5E:64:C4:42:CD:11:3A:C7:F6:4A:D2
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232302e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.220.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:6f:6c:6f:2e:ae:d3:23:34:35:d7:f4:1f:46:7c:5c:96:0b:
3b:07:ed:62:1b:dd:e6:bb:86:b3:fe:99:ac:2f:91:6b:ca:14:
54:b9:92:a1:3e:93:cb:0e:ed:56:e3:c6:1e:a7:0d:6e:2c:59:
8c:6d:4d:49:93:e3:9b:92:a4:ea:9f:48:4a:ee:5a:82:42:5c:
fe:3e:af:e2:71:f0:47:e1:a5:8e:f2:72:4f:7d:76:87:57:1c:
38:a2:aa:26:e9:45:db:41:e8:e2:2f:31:61:47:a6:86:4d:72:
19:a5:66:fe:cb:9c:e1:c9:bc:8d:e2:ef:66:f3:bc:47:99:60:
0e:c7:a0:1f:3f:06:3e:dc:db:b3:6c:52:6b:71:5b:a4:d4:7f:
05:27:61:63:3b:59:76:4c:dd:01:2b:3a:38:b4:f0:b6:2d:f1:
28:22:1e:1e:25:1f:20:25:1a:57:80:57:e0:8a:f7:7b:28:38:
76:4c:b5:87:47:81:b1:6c:a8:2a:85:1e:84:82:5b:8d:f9:d9:
fc:16:80:7e:6e:72:96:43:71:f2:96:56:45:62:a2:7a:11:95:
70:a3:bb:6b:f3:fc:03:b7:1a:82:b6:58:bd:d4:cf:00:c5:48:
c6:2b:e4:2f:a5:b7:ef:1b:29:83:eb:35:9b:d5:16:8a:d3:bf:
f5:31:b5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:20:14 2026 by rpki-client