Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33362e302f32342d3234203d3e20323036373636.roa
File: 3134392e36322e33362e302f32342d3234203d3e20323036373636.roa (raw, json)
Hash identifier: wXojyoUJxWpJyrJwu8AANJ59F1RArMMkDfCk461pTqU=
Subject key identifier: 25:F0:88:DE:8F:3D:F8:42:47:96:F0:6A:B1:B7:8B:9D:18:37:7F:38
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7B2E88ECA2FCF95136C3BDA1DEA8BF7CCAF99B2C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33362e302f32342d3234203d3e20323036373636.roa
Signing time: Tue 14 Jul 2026 16:26:13 +0000
ROA not before: Tue 14 Jul 2026 16:21:13 +0000
ROA not after: Tue 13 Jul 2027 16:26:13 +0000
asID: 206766
IP address blocks: 149.62.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2e:88:ec:a2:fc:f9:51:36:c3:bd:a1:de:a8:bf:7c:ca:f9:9b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 14 16:21:13 2026 GMT
Not After : Jul 13 16:26:13 2027 GMT
Subject: CN=25F088DE8F3DF8424796F06AB1B78B9D18377F38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:f6:dd:48:3a:23:2b:11:24:c2:0b:43:98:
1e:48:01:f1:9f:fe:60:b0:37:88:3f:cc:3f:a4:50:
1f:3b:10:dd:7c:e2:4e:40:41:55:6b:bd:50:76:de:
2d:c6:b2:02:c2:db:23:e2:9d:34:b3:d8:81:b6:0d:
4b:6b:54:e2:b6:cc:73:96:5b:89:2a:0c:6b:ec:94:
2a:30:04:c2:e7:49:4d:24:ca:ca:3e:83:01:cb:14:
c2:06:16:10:5a:ab:1c:9a:5a:39:96:7e:0d:40:86:
cb:4f:75:92:84:32:e1:27:e7:ec:4f:82:80:4e:33:
36:10:90:b1:8d:32:b6:a0:cc:2b:00:04:55:08:d4:
5b:7d:84:dc:ff:73:67:5f:a7:ec:c2:92:97:6f:a6:
e8:00:4b:90:e6:b0:bb:86:ea:d0:5b:b9:25:77:be:
82:6e:a4:5c:bf:5d:ed:02:58:ae:7c:6b:7b:d5:ff:
7f:92:29:19:27:f1:e2:c8:fb:f2:e7:7f:2f:7d:c1:
7a:d6:88:cd:cc:0a:fe:1e:2b:fe:4c:5b:40:31:3c:
ca:74:fb:83:27:46:79:07:e9:5d:5b:37:ff:94:29:
75:c6:7c:a7:9c:ad:1c:77:38:4e:68:96:95:a1:43:
c8:41:39:b6:6d:89:d0:30:57:28:02:3a:4e:ec:f9:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F0:88:DE:8F:3D:F8:42:47:96:F0:6A:B1:B7:8B:9D:18:37:7F:38
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33362e302f32342d3234203d3e20323036373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:05:dc:98:40:0c:f0:7f:fe:f5:04:41:c1:48:40:6b:7e:af:
9f:bc:bb:ba:bc:0f:04:79:2f:00:0e:bb:89:11:d8:04:ab:b5:
66:d2:39:2b:87:8c:e1:b7:76:9d:e1:47:1c:cc:4f:fb:96:5c:
cc:a2:82:0a:6c:e6:0d:c1:b5:b3:ea:30:0c:29:48:06:19:fa:
40:2e:9e:c7:21:6f:44:e9:ac:f6:b3:2d:00:b9:d4:47:3e:e7:
19:25:e2:fb:fd:38:bc:9f:45:11:b6:9d:dc:e8:ae:bc:6c:18:
d5:16:a9:d2:d7:88:83:84:1b:4b:79:5d:1e:ef:6f:dd:4c:24:
d2:cc:2f:0a:ef:5c:3c:9f:87:99:8e:b9:26:b6:52:91:f9:e0:
be:38:c1:a4:98:9d:5c:60:5e:b9:b6:a4:c1:68:12:d2:1e:8d:
db:e7:ba:48:56:43:3e:f8:13:c4:a1:fc:c9:76:e1:86:00:13:
65:af:60:ac:28:ac:e1:75:af:e0:d2:fc:7d:ff:fb:5f:56:1b:
d1:02:a9:33:95:ef:41:b0:a1:47:13:6e:8a:2f:60:e1:69:65:
56:55:e5:68:53:54:6a:9a:31:8e:c3:fc:b9:36:64:f5:70:2e:
53:86:5b:c5:ed:fc:8a:38:57:dd:93:08:c8:0f:49:38:89:92:
72:bd:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:29:03 2026 by rpki-client