Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36322e302f32342d3234203d3e20313336373837.roa
File: 3130392e3233362e36322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Y3XF00YqmHWrVjRV5sbr07cv2yQw5OevQ+wyU/VEIBU=
Subject key identifier: 60:0B:41:27:92:EA:56:D5:01:5A:F9:46:44:8D:71:77:CC:68:C9:91
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6AEF8255037E1B8EB4E9CC7578AC18C3F532AE80
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:43 +0000
ROA not before: Fri 23 Oct 2026 16:25:43 +0000
ROA not after: Fri 22 Oct 2027 16:30:43 +0000
asID: 136787
IP address blocks: 109.236.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:ef:82:55:03:7e:1b:8e:b4:e9:cc:75:78:ac:18:c3:f5:32:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:43 2026 GMT
Not After : Oct 22 16:30:43 2027 GMT
Subject: CN=600B412792EA56D5015AF946448D7177CC68C991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e4:84:0b:24:ee:cf:00:02:33:df:55:22:7d:
6e:9d:de:2a:ff:2b:0e:a5:bb:93:e3:c1:e0:0d:62:
ef:0c:06:03:55:bb:64:8d:72:c1:67:26:b8:98:2f:
8f:03:86:7f:12:11:c6:b8:0b:a5:92:e7:28:22:af:
ad:35:e6:25:12:5d:0d:28:e4:9c:ef:1f:4f:90:ed:
38:f6:d6:58:c7:a8:5a:02:6f:0e:68:88:b6:8d:c2:
fd:b3:93:03:1b:28:fb:49:e5:0a:54:35:9a:d9:56:
70:bc:1d:f2:2d:bf:75:99:09:cf:4f:05:b5:30:47:
f6:dc:a3:bb:b4:fe:b4:93:35:75:25:fc:6a:1a:2c:
9e:22:bb:91:b4:f7:17:38:d4:2a:cb:cd:89:cb:8f:
c5:1d:29:25:40:cb:13:85:7e:6a:77:7a:c5:e1:4d:
27:25:9d:4b:ad:49:d2:e2:aa:35:82:04:5a:1d:db:
bc:f3:30:52:de:a3:fc:01:aa:f2:1d:22:56:40:36:
d9:82:08:36:04:cb:06:61:79:01:1c:99:e7:34:b4:
e8:3f:0f:ff:ef:31:05:d7:db:b4:bf:01:ca:64:62:
7c:57:63:71:9b:fd:8d:52:ed:f8:af:72:1c:28:0c:
36:7d:4d:0a:5d:27:5b:ed:e5:53:60:03:0b:df:6c:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:41:27:92:EA:56:D5:01:5A:F9:46:44:8D:71:77:CC:68:C9:91
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.62.0/24
Signature Algorithm: sha256WithRSAEncryption
69:03:4c:2c:f1:34:79:70:c4:82:e4:22:e5:ac:d5:de:35:d5:
de:67:0d:e1:b6:26:d1:ea:4f:a9:45:0e:d7:f6:d7:f5:9f:09:
3c:ae:03:7c:fd:e3:c4:ba:82:1d:52:ac:f5:ec:15:d4:c9:61:
f5:51:a2:e7:0a:2d:12:be:a7:6c:55:1d:8c:dd:f5:e6:fa:1d:
ff:ba:cb:71:4a:19:39:65:ca:7e:c5:21:8a:16:ed:fd:47:b1:
57:f0:66:da:0a:23:40:fa:2c:11:60:e3:e1:62:37:c3:59:8c:
6c:ac:7f:75:75:f2:b0:04:a0:4e:66:43:da:88:fe:92:07:49:
83:04:5c:0f:11:58:7a:1d:c1:f1:47:bf:f1:8c:14:3f:95:7a:
8a:d6:e9:ef:40:8c:03:7a:37:22:58:03:c8:8d:cc:c5:f2:8f:
1c:93:2a:86:da:86:bd:0b:c4:b9:07:fb:42:d4:f8:41:37:c4:
35:7e:c6:62:1e:89:15:da:96:12:66:33:8b:41:b1:44:91:8f:
51:08:93:de:bf:4d:f0:df:6a:a5:c7:08:8d:ba:70:79:26:43:
4e:61:94:28:79:2a:52:34:09:6c:3d:2a:a2:b4:3e:a7:18:55:
51:9c:44:47:d4:84:87:da:6f:f1:31:5a:ec:b5:b6:55:a6:8d:
6d:61:c0:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:51:24 2026 by rpki-client