Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137322e302f32332d3234203d3e203437353833.roa
File: 34362e31372e3137322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: /YxHTWTdNPe/Wt+j3OgCL/z0mhDnt2U7HAWiTJTUUHk=
Subject key identifier: 7B:D0:25:7B:30:B9:E8:C2:90:5C:9B:EB:F5:0B:80:50:0A:28:43:AC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2B2301C4565A05DD17661182DF6B219E0B20C023
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137322e302f32332d3234203d3e203437353833.roa
Signing time: Fri 23 Oct 2026 16:30:41 +0000
ROA not before: Fri 23 Oct 2026 16:25:41 +0000
ROA not after: Fri 22 Oct 2027 16:30:41 +0000
asID: 47583
IP address blocks: 46.17.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:23:01:c4:56:5a:05:dd:17:66:11:82:df:6b:21:9e:0b:20:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:41 2026 GMT
Not After : Oct 22 16:30:41 2027 GMT
Subject: CN=7BD0257B30B9E8C2905C9BEBF50B80500A2843AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:fb:2a:a0:b7:a6:31:17:60:27:92:6e:3d:
3d:a7:6d:db:b9:0e:54:98:8a:68:34:e9:d8:a7:3c:
c7:2e:4b:b8:52:73:5c:0d:04:72:8d:34:3c:78:bd:
9e:ff:78:24:c5:91:b2:9c:8b:b4:ff:74:6c:ad:4b:
59:43:4b:f2:a0:76:71:ee:0e:d5:0d:7e:d8:d7:be:
69:20:39:2e:09:82:9d:65:6c:a5:3f:fa:5e:f5:16:
cf:73:59:99:d6:bc:5f:93:e6:c1:fb:98:ea:07:58:
95:d8:8c:b7:93:9c:b1:a4:e0:62:eb:6f:7f:7b:86:
04:d4:3f:80:29:cb:07:39:ff:22:c8:5b:55:87:46:
b1:2e:7f:e1:bb:2f:c3:a4:b1:e1:6c:c9:d3:64:01:
4d:e0:3d:7b:12:e6:6b:2f:bf:e0:8c:6a:97:d6:b4:
8c:79:31:74:c4:63:fc:7b:57:bc:db:20:74:a4:d0:
53:6e:ee:bf:b1:72:24:54:d6:80:02:ed:f6:b6:c4:
97:76:4b:11:b8:89:70:19:c6:7f:41:a6:2a:a1:67:
c4:31:c6:7c:e9:4b:4c:65:91:6e:e1:25:52:1f:22:
da:82:13:7f:3c:35:93:ac:98:ff:a2:aa:c7:33:5d:
87:7d:28:a9:7a:3d:64:88:10:a7:c8:05:3d:cc:89:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D0:25:7B:30:B9:E8:C2:90:5C:9B:EB:F5:0B:80:50:0A:28:43:AC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.172.0/23
Signature Algorithm: sha256WithRSAEncryption
04:d1:b3:f8:c0:3f:24:b3:20:48:d2:50:27:34:13:c7:d9:51:
77:ac:7d:13:4b:7a:8c:76:43:89:f0:d4:9f:e0:35:32:23:0b:
f6:2a:9b:b7:75:d1:4a:dc:07:ef:a6:33:05:69:69:f4:92:2d:
c1:33:b5:73:7c:f8:a1:95:67:16:fc:b2:d8:d0:de:b3:d1:d4:
3e:86:8f:1c:d3:23:c4:a5:a5:9b:78:9b:03:a9:21:04:2a:90:
43:a0:25:ab:65:4f:b7:b6:4a:47:7c:b8:4a:17:12:84:82:4d:
a3:d5:0e:c0:7d:d4:1c:2b:79:bd:7b:59:3e:d6:f3:a2:d1:77:
fd:be:cf:e0:61:f2:a6:aa:39:57:0a:f9:9a:40:28:c1:70:04:
a9:25:49:95:8c:92:e2:cc:a3:78:f5:20:f0:95:b5:d2:3e:9b:
d0:f3:ae:0f:d7:1c:30:db:ee:d4:de:8c:d5:a3:79:a5:a7:00:
9f:03:6e:5e:ad:64:a9:41:b7:51:c2:0b:4f:6a:8a:32:c4:1b:
27:0d:8a:7d:51:a8:7f:c6:47:ee:0d:cf:ff:90:e8:7d:32:b0:
05:2d:69:53:dd:57:d3:89:db:14:9e:4a:84:dc:42:1d:20:ad:
f4:f8:bd:cb:67:8c:c2:00:ca:37:8a:88:c9:2b:38:5b:59:75:
00:fd:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:19:53 2026 by rpki-client