Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132332e302f32342d3234203d3e20323039383534.roa
File: 33312e3136392e3132332e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: 3VIsVAlCHZpxy0f/CfU0j4oGYolPUjD183WEUjYLf1k=
Subject key identifier: E8:C3:A6:DC:84:9B:9B:D2:8D:B5:D3:87:65:24:C8:B2:B3:BC:AB:21
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 61B20B75E503E8F50C1A803C0B7C9C5A6E09303C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132332e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 30 Oct 2026 12:30:55 +0000
ROA not before: Fri 30 Oct 2026 12:25:55 +0000
ROA not after: Fri 29 Oct 2027 12:30:55 +0000
asID: 209854
IP address blocks: 31.169.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b2:0b:75:e5:03:e8:f5:0c:1a:80:3c:0b:7c:9c:5a:6e:09:30:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:25:55 2026 GMT
Not After : Oct 29 12:30:55 2027 GMT
Subject: CN=E8C3A6DC849B9BD28DB5D3876524C8B2B3BCAB21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:d4:37:56:75:08:79:52:8f:13:40:0a:70:
d7:cc:35:f0:7e:eb:fb:30:55:64:e4:48:f0:1b:3d:
02:7a:23:ff:6b:07:f6:3d:d5:86:79:37:3a:69:fd:
ab:6a:31:f0:8b:2c:72:df:f3:bc:3c:b7:fc:f5:0e:
95:41:6d:d0:08:39:0f:74:07:11:d6:c0:4d:b3:f0:
dd:f2:1c:2d:9d:e4:1e:db:0a:86:81:37:dd:51:14:
ff:e3:f3:a8:0a:8e:0b:11:6f:40:25:5b:95:b2:78:
54:16:a1:e4:95:f9:70:5b:cf:2d:6d:53:c6:b8:2d:
73:61:c5:18:92:9d:f4:04:2b:69:b1:e5:b6:10:4f:
23:fe:8b:df:7a:f4:87:e6:43:6e:8b:fd:95:08:f4:
cb:52:ba:ee:f0:6b:2e:18:cd:2e:58:ac:9b:fa:65:
b0:2c:eb:68:0f:7d:46:b1:bd:55:60:22:6c:ab:f2:
38:5b:cb:bb:10:94:f7:5e:20:f7:06:3e:53:2a:9a:
19:48:db:10:22:f5:55:d1:20:0f:84:f0:33:2c:cc:
c1:63:9f:c1:8a:14:d3:39:64:09:c6:b7:8c:3d:ba:
c1:88:d1:77:3b:05:0f:77:43:ec:20:37:a1:0c:0a:
db:72:8b:a5:87:c6:ce:21:e4:fa:13:0a:ac:4d:6c:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:A6:DC:84:9B:9B:D2:8D:B5:D3:87:65:24:C8:B2:B3:BC:AB:21
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132332e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.123.0/24
Signature Algorithm: sha256WithRSAEncryption
89:18:6d:f2:4e:26:8f:ba:a8:41:7e:87:30:01:ee:5d:cd:e6:
fa:12:35:33:7a:9d:ef:2c:56:e2:b2:6d:0b:86:4c:10:8f:e3:
e3:61:df:b7:e3:37:b1:57:4f:ee:82:75:9d:62:e4:aa:49:07:
a9:f3:c1:11:3f:51:5f:8b:9b:4c:e2:73:3a:fc:6c:3a:09:9e:
cf:6a:27:7d:d0:f1:a1:de:d8:37:66:a4:32:0e:71:48:cb:15:
cc:d6:3b:9e:0d:0f:3e:b1:31:37:ea:ab:00:94:8f:b6:b2:7b:
34:ce:61:63:04:17:ef:bb:a7:a2:2c:5e:bc:9f:8b:2f:79:85:
b4:e7:54:b2:20:e5:93:52:00:50:ce:f5:2e:90:dd:aa:4b:a3:
9e:aa:14:bf:16:6c:6c:6f:b6:ec:c5:48:51:37:4d:69:d9:21:
07:ac:9c:a3:cd:06:00:0d:c2:b3:13:66:86:5a:d7:f7:41:74:
17:d8:13:8b:4b:6c:f3:9f:7b:42:de:7b:a6:36:e2:bd:f2:43:
49:e3:5c:ac:11:99:5c:de:29:89:8e:07:69:4e:38:6a:09:53:
2f:fc:3a:4f:66:0b:f8:9e:f4:4e:02:ef:22:a9:d0:93:9e:1c:
7f:9f:00:7c:f7:70:6e:1c:38:fa:e7:16:05:33:80:f9:f6:96:
a6:dd:a9:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 30 19:20:25 2026 by rpki-client