Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134362e31392e362e302f32342d3234203d3e20313532373236.roa
File: 3134362e31392e362e302f32342d3234203d3e20313532373236.roa (raw, json)
Hash identifier: 0535aL5OdLDMd/iQUPwa3kx9o6+3YM55CKnNt2/13Ho=
Subject key identifier: 52:03:CD:A9:BD:B4:01:3F:21:92:04:4C:3E:64:BE:20:58:A1:0B:1C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 387841A3144A7555627A724931885ADCD005541F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134362e31392e362e302f32342d3234203d3e20313532373236.roa
Signing time: Sat 10 Oct 2026 19:45:47 +0000
ROA not before: Sat 10 Oct 2026 19:40:47 +0000
ROA not after: Sat 09 Oct 2027 19:45:47 +0000
asID: 152726
IP address blocks: 146.19.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:78:41:a3:14:4a:75:55:62:7a:72:49:31:88:5a:dc:d0:05:54:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 10 19:40:47 2026 GMT
Not After : Oct 9 19:45:47 2027 GMT
Subject: CN=5203CDA9BDB4013F2192044C3E64BE2058A10B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:67:db:06:7e:18:39:48:f2:b5:b6:43:21:
9b:a4:dd:8a:b6:19:61:4f:c5:70:26:62:97:c2:54:
bc:b3:84:af:53:2a:9f:45:37:c0:67:49:d0:13:90:
c6:d4:f8:15:9c:a1:1b:00:72:8f:fa:13:b1:0d:61:
59:56:85:f6:e5:2d:af:94:84:dc:25:a1:d9:d6:77:
ea:76:52:39:86:ef:43:26:64:56:95:00:88:fb:8d:
66:50:14:15:c4:5f:6f:ee:ac:10:08:b1:30:45:2b:
c5:1f:8a:99:03:03:e0:14:0d:d4:f4:3b:8f:e3:b3:
5a:6b:a1:10:2e:d3:76:75:a4:02:84:47:47:67:55:
ec:c1:56:12:3b:56:1b:d9:82:47:ed:e8:12:ee:32:
38:e8:87:cb:43:c9:9e:af:0e:ed:60:37:cd:ad:e5:
20:d8:07:8b:f6:12:1a:ff:e2:e0:3c:6f:17:5c:be:
fa:1d:2d:f6:6c:0e:1f:c0:23:c7:5f:0b:d2:fe:37:
3b:c5:9b:09:3e:54:22:73:92:fc:1a:59:d1:c5:51:
e5:1a:32:a0:ee:eb:ec:3f:76:55:8e:be:4d:06:5d:
61:d6:10:31:f7:e2:20:43:62:38:aa:1b:0a:f2:86:
50:08:ba:19:e8:0c:f2:c7:d5:5a:ec:4e:27:ad:54:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:03:CD:A9:BD:B4:01:3F:21:92:04:4C:3E:64:BE:20:58:A1:0B:1C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134362e31392e362e302f32342d3234203d3e20313532373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bd:6b:45:e7:93:72:91:59:2d:76:6f:bd:60:c2:6f:e3:c7:
5c:f8:2f:2c:51:d4:95:06:c6:77:d2:a5:22:e4:80:05:a6:77:
16:56:76:00:ed:1b:26:30:8c:a6:c3:f0:ca:74:5c:44:7c:00:
5e:60:10:af:cf:71:07:cf:3a:69:04:50:8b:45:d7:36:ef:b1:
9c:a2:5e:48:07:33:5f:9e:94:a5:e8:8a:4b:3f:6b:f4:4b:90:
5d:6b:ca:23:f7:d4:5d:27:a9:ed:c7:c6:0d:b1:2f:3a:85:df:
db:08:c7:9b:d2:44:59:99:2a:49:c0:22:d3:dc:fb:f2:67:75:
49:97:e8:a5:88:6b:73:c8:4f:ec:fb:2a:6e:8a:d3:34:16:c3:
27:2f:66:0c:71:71:a1:13:07:63:c2:8f:15:6f:97:26:ea:a8:
3c:ec:d3:a0:6f:80:e8:e2:ce:74:6a:ef:b5:0c:8e:9b:c1:fa:
d2:c5:fa:10:33:be:96:0a:fa:5c:ce:f5:77:bb:50:2e:75:2a:
d6:98:46:80:b3:89:94:8f:04:f0:15:be:66:9d:d8:87:95:82:
11:67:9b:c7:00:b1:f6:58:7c:88:a6:32:8e:60:a8:b9:05:8e:
2b:f5:49:cb:30:ff:46:9f:b0:e6:18:64:f4:2e:40:7e:f2:6f:
70:4d:35:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:34 2026 by rpki-client