Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37372e302f32342d3234203d3e20313336373837.roa
File: 352e3130342e37372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Zi3a55/z6xAy85dq4NxVnRTJjUoYgEhQqF3/D06coTA=
Subject key identifier: 3F:C7:99:E5:EA:78:C5:DA:06:CF:33:41:FA:25:40:92:C9:E1:C4:2B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: D9D67D5D88384EF41F1B5F7D68065ABD2D2A88
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 12:31:45 +0000
ROA not before: Fri 30 Oct 2026 12:26:45 +0000
ROA not after: Fri 29 Oct 2027 12:31:45 +0000
asID: 136787
IP address blocks: 5.104.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d9:d6:7d:5d:88:38:4e:f4:1f:1b:5f:7d:68:06:5a:bd:2d:2a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:45 2026 GMT
Not After : Oct 29 12:31:45 2027 GMT
Subject: CN=3FC799E5EA78C5DA06CF3341FA254092C9E1C42B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:b4:df:33:a2:ac:66:95:bd:c9:d8:61:96:
b8:f5:12:42:3f:2a:24:eb:9d:93:1b:05:59:bf:4c:
ce:71:3c:cc:4f:99:f9:09:67:fa:2a:64:4e:59:28:
39:57:a0:38:7f:b5:71:05:ee:ba:24:40:90:cb:35:
93:9f:25:9b:5b:54:f8:d6:e2:ad:34:db:30:db:e1:
9b:01:9b:81:ed:ab:e8:b3:ae:dc:9f:e1:10:ab:b9:
54:d6:28:a9:23:f8:99:14:03:95:47:27:e8:e1:ee:
3c:43:b7:2f:dd:a4:1e:b5:55:e1:fe:de:0d:f5:a2:
c1:63:e6:9e:17:c1:36:96:70:3a:f2:5c:f4:7e:be:
0a:82:06:5f:9d:d1:f0:dc:76:9c:76:48:26:f3:20:
43:54:ab:cb:25:aa:98:c8:dc:8a:06:fa:e5:99:d9:
a3:81:5e:35:70:7a:33:3a:2d:af:d1:d0:f0:aa:40:
c0:ca:c7:61:ff:85:4c:22:9b:59:78:b2:93:c5:74:
9e:b8:1e:51:f3:58:26:ae:1c:48:9a:63:08:76:0b:
e2:61:c6:81:65:3f:91:ba:1e:96:f0:42:3b:ed:ae:
2f:f1:5d:bc:a9:8e:29:41:50:01:33:6a:18:20:91:
d9:f1:c2:a2:a4:c7:66:ea:cc:e2:a2:2f:08:fc:d5:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C7:99:E5:EA:78:C5:DA:06:CF:33:41:FA:25:40:92:C9:E1:C4:2B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d9:9c:5d:b9:d7:ba:d1:26:6d:b3:70:d8:b0:d1:19:ba:68:
6c:43:f2:42:49:85:01:71:73:bb:7c:28:6f:40:82:10:f1:bd:
e8:e7:7f:39:d1:74:f6:1c:87:38:21:0b:cf:7f:2e:39:34:55:
ba:f7:ed:35:24:3b:2c:a0:56:4e:ad:ce:9f:29:b8:34:5a:15:
7e:ef:a4:21:1b:3d:71:95:68:70:02:73:68:68:5e:ad:39:28:
3e:2e:c4:55:2c:60:42:ef:54:7b:cd:99:b9:7f:cf:88:7b:a2:
78:2d:7d:3b:1a:6c:c2:dc:e8:0d:37:5a:bd:a2:cb:8e:3a:9b:
05:42:a3:c0:98:04:92:3a:5f:8a:57:81:38:ec:5e:a0:32:1d:
46:97:3f:9d:c1:6d:16:d6:e5:76:83:2c:f3:82:45:7c:a7:fd:
7d:39:96:42:0e:05:64:b6:9b:ed:76:bc:a4:59:e8:82:cc:e1:
36:b9:7f:44:d3:75:86:84:b4:de:7c:79:a5:12:c0:c8:04:0b:
41:f1:2d:4d:11:73:a3:b9:e5:8f:a3:27:c3:fc:1f:ac:e4:db:
aa:b5:89:16:44:bf:f8:cb:f7:3c:1b:d3:d9:8f:39:a2:3e:eb:
92:ae:62:b0:bb:26:00:b5:66:7d:21:7f:81:71:27:dd:e1:1e:
fb:7e:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:44:36 2026 by rpki-client