Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134362e31392e362e302f32342d3234203d3e20383334.roa
File: 3134362e31392e362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PBJswvCHBWsJjAlb5o77zZC4+0DKsTzrlrSmqQFf3lA=
Subject key identifier: DC:52:D8:14:4F:6A:20:60:24:EC:05:4D:BA:06:09:78:1D:B6:72:00
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 54A88FE63E8883F9569B269F1DD1036A78981328
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134362e31392e362e302f32342d3234203d3e20383334.roa
Signing time: Sun 08 Nov 2026 18:50:48 +0000
ROA not before: Sun 08 Nov 2026 18:45:48 +0000
ROA not after: Sun 07 Nov 2027 18:50:48 +0000
asID: 834
IP address blocks: 146.19.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a8:8f:e6:3e:88:83:f9:56:9b:26:9f:1d:d1:03:6a:78:98:13:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 8 18:45:48 2026 GMT
Not After : Nov 7 18:50:48 2027 GMT
Subject: CN=DC52D8144F6A206024EC054DBA0609781DB67200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:2f:1d:f6:d3:b4:c7:25:66:62:98:8e:e2:
7c:d1:7b:aa:fe:89:28:3d:e3:04:f9:6c:eb:82:65:
0e:6f:37:82:66:e6:cc:8c:6f:25:53:1c:e0:00:03:
58:65:1a:37:48:a9:e4:75:6c:82:94:72:0e:2e:13:
60:d8:43:f9:94:42:a0:a8:28:d6:b3:73:db:f3:d2:
5d:3c:3e:09:21:ed:12:18:4e:36:71:39:ee:3b:1d:
4d:b9:cb:49:c0:51:8b:34:22:24:b2:7d:fc:af:22:
ae:66:0a:1d:da:b0:30:4f:26:a5:bc:2c:82:4b:75:
35:42:38:05:58:29:49:21:1e:d5:0a:b8:97:17:df:
5f:4d:2b:ee:82:ca:12:83:63:7d:ee:5c:2c:78:44:
48:7d:c7:43:50:25:4a:68:b8:0c:fd:98:da:5d:17:
5b:21:94:77:83:10:8d:96:4d:71:37:f6:28:e8:a4:
ea:1d:91:a6:e1:d0:1e:5a:f3:f9:63:fe:93:a5:67:
9c:81:4e:76:6d:8d:03:41:94:7d:49:b5:4f:67:25:
d6:f5:7c:57:07:f9:02:70:00:7f:94:8c:40:e1:f2:
e8:78:f7:61:96:19:99:81:f9:b2:fd:0a:db:bb:71:
8b:dc:9b:30:52:ce:de:66:e7:31:e7:c6:28:b8:cf:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:52:D8:14:4F:6A:20:60:24:EC:05:4D:BA:06:09:78:1D:B6:72:00
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134362e31392e362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.6.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f8:94:4f:70:29:12:34:fe:ec:59:fe:68:cd:d3:0f:0b:6c:
c8:1d:98:e8:a3:96:77:00:f2:fc:c6:cd:5a:00:a9:35:92:df:
70:16:e1:82:b9:69:ed:70:aa:cd:0e:21:0f:f4:60:6a:a8:d1:
11:a0:3e:e1:17:c0:58:2c:a8:f6:32:7e:33:f9:a1:65:3a:ef:
4a:e7:34:1f:2f:35:f9:00:da:5e:77:cc:05:40:01:8b:73:f3:
85:fd:2a:9a:81:30:6d:45:eb:70:ae:41:cf:aa:ec:73:28:42:
1f:1c:48:7c:ca:89:06:71:8d:60:76:92:35:19:41:ce:04:6a:
3d:b4:b9:15:4b:96:f6:55:8e:77:43:39:2c:f7:8a:61:70:45:
75:c7:0e:62:5c:78:04:5f:9c:d0:07:ce:ee:36:0b:b0:7b:93:
ec:e9:93:a3:6e:17:f1:9b:9b:61:a7:47:fa:94:7d:e5:57:3b:
3b:af:fa:f0:cf:c6:8a:71:9b:dd:f9:c2:7e:4e:44:95:cf:70:
31:24:57:5d:ed:32:08:cd:5b:a7:89:99:65:b5:33:89:71:85:
67:7a:45:91:31:23:9c:71:22:18:a9:a6:7a:f1:f8:c6:03:95:
51:b1:f7:b8:79:d3:c3:bd:d2:92:49:e0:28:d0:a3:ce:0a:a4:
28:e2:41:42
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUVKiP5j6Ig/lWmyafHdEDaniYEygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjExMDgxODQ1NDhaFw0yNzExMDcxODUwNDhaMDMxMTAvBgNV
BAMTKERDNTJEODE0NEY2QTIwNjAyNEVDMDU0REJBMDYwOTc4MURCNjcyMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUUS8d9tO0xyVmYpiO4nzRe6r+
iSg94wT5bOuCZQ5vN4Jm5syMbyVTHOAAA1hlGjdIqeR1bIKUcg4uE2DYQ/mUQqCo
KNazc9vz0l08Pgkh7RIYTjZxOe47HU25y0nAUYs0IiSyffyvIq5mCh3asDBPJqW8
LIJLdTVCOAVYKUkhHtUKuJcX319NK+6CyhKDY33uXCx4REh9x0NQJUpouAz9mNpd
F1shlHeDEI2WTXE39ijopOodkabh0B5a8/lj/pOlZ5yBTnZtjQNBlH1JtU9nJdb1
fFcH+QJwAH+UjEDh8uh492GWGZmB+bL9Ctu7cYvcmzBSzt5m5zHnxii4z8iPAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQU3FLYFE9qIGAk7AVNugYJeB22cgAwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM0MzYyZTMxMzky
ZTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMG
MA0GCSqGSIb3DQEBCwUAA4IBAQCq+JRPcCkSNP7sWf5ozdMPC2zIHZjoo5Z3APL8
xs1aAKk1kt9wFuGCuWntcKrNDiEP9GBqqNERoD7hF8BYLKj2Mn4z+aFlOu9K5zQf
LzX5ANped8wFQAGLc/OF/SqagTBtRetwrkHPquxzKEIfHEh8yokGcY1gdpI1GUHO
BGo9tLkVS5b2VY53Qzks94phcEV1xw5iXHgEX5zQB87uNguwe5Ps6ZOjbhfxm5th
p0f6lH3lVzs7r/rwz8aKcZvd+cJ+TkSVz3AxJFdd7TIIzVuniZlltTOJcYVnekWR
MSOccSIYqaZ68fjGA5VRsfe4edPDvdKSSeAo0KPOCqQo4kFC
-----END CERTIFICATE-----
Generated at Sun Nov 15 04:25:46 2026 by rpki-client