Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134312e39382e3135322e302f32322d3332203d3e203531313637.roa
File: 3134312e39382e3135322e302f32322d3332203d3e203531313637.roa (raw, json)
Hash identifier: EMEVSC1tJk808dP54rEjB9j/5n7avrZ5jg3H/unN9nU=
Subject key identifier: A3:79:87:F2:34:A7:16:40:F3:5D:D0:0D:02:66:E1:05:0B:8E:4D:43
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 37211AC95CAD82AEFB78793D2E3785AF614D10C8
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134312e39382e3135322e302f32322d3332203d3e203531313637.roa
Signing time: Fri 23 Oct 2026 16:30:16 +0000
ROA not before: Fri 23 Oct 2026 16:25:16 +0000
ROA not after: Fri 22 Oct 2027 16:30:16 +0000
asID: 51167
IP address blocks: 141.98.152.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:21:1a:c9:5c:ad:82:ae:fb:78:79:3d:2e:37:85:af:61:4d:10:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:16 2026 GMT
Not After : Oct 22 16:30:16 2027 GMT
Subject: CN=A37987F234A71640F35DD00D0266E1050B8E4D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:4e:eb:c8:18:46:ea:04:f5:39:75:2e:a6:
11:c7:c6:90:66:2a:02:b5:77:0f:76:f5:0b:ab:83:
1c:d9:23:91:09:c2:9d:8f:b8:54:97:20:b6:50:fb:
a2:d9:f5:2b:d9:07:f6:b6:33:ad:19:59:e8:e9:c8:
c3:38:47:a8:ac:50:df:34:6d:8d:68:0d:78:ea:00:
83:42:3d:04:bb:8f:0b:19:df:7a:6d:0d:0c:57:fb:
69:f2:42:c7:6e:b2:1a:c2:77:e3:fc:be:ad:2b:35:
66:86:72:c9:b7:ee:0e:f4:be:2d:8e:8e:1f:fd:e5:
25:a2:5c:03:2a:fd:b5:af:15:c0:72:41:9d:07:24:
34:42:03:2d:a1:f9:42:bb:5a:f9:bf:5b:a4:3e:37:
93:da:1f:5e:d4:cb:73:bb:50:32:88:e5:43:7f:11:
77:4b:e4:86:e9:6a:01:14:3a:76:5d:b4:6c:09:b5:
4b:0b:00:ce:af:65:59:db:71:5e:ef:ec:57:91:23:
b1:21:e0:75:4e:18:8e:8d:9d:f8:eb:a2:3c:03:4c:
2d:61:4e:43:72:cc:89:eb:32:b2:7b:8e:c8:af:21:
21:70:99:54:64:f9:4e:8d:4e:a3:5c:25:58:5c:8c:
b1:89:82:40:1e:42:9d:36:ae:de:de:75:a3:11:3f:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:79:87:F2:34:A7:16:40:F3:5D:D0:0D:02:66:E1:05:0B:8E:4D:43
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134312e39382e3135322e302f32322d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.152.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:00:c3:ae:22:d1:cd:9a:1e:1c:17:a9:34:0d:19:65:b0:35:
e8:f9:d0:65:8e:7d:c4:16:21:45:ad:8e:df:1a:7f:83:d2:01:
be:49:15:ab:a3:a2:22:dc:62:6f:7c:d0:d8:2e:7b:0a:67:72:
e4:0d:11:65:40:7c:60:e9:8d:00:2e:a5:6a:61:d9:01:6a:b9:
5d:fb:de:92:76:55:ba:81:ce:57:a7:de:3f:33:2f:2c:7c:6d:
63:ee:d0:c8:f5:32:bc:c7:af:61:c1:cd:71:1c:80:2f:b5:2c:
52:b5:a2:45:44:0d:a9:44:b4:71:9d:5e:58:dd:7c:89:59:0b:
77:78:a1:af:6a:9d:95:10:c5:b6:51:c1:4e:9c:5e:1f:3d:da:
b9:fd:01:e9:1e:05:90:1b:e9:20:cf:e4:1b:b7:c6:91:65:01:
4b:b6:38:3c:24:cb:a5:87:c5:1d:03:e9:3b:55:a0:2e:86:34:
9b:17:cb:93:b4:7d:52:32:a1:bf:a5:ce:39:9d:07:1c:9c:7f:
71:a9:9f:e9:dc:73:c0:87:54:4c:94:04:3a:95:2d:1b:c5:76:
1a:dc:2b:63:4c:b0:d6:8e:0c:5f:c6:c1:31:30:fe:33:9f:c6:
f2:3a:ee:89:4e:de:61:fa:85:c6:9e:74:a1:e3:8d:cd:ed:5e:
17:86:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:21:01 2026 by rpki-client