Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e38382e302f32342d3234203d3e20323136323533.roa
File: 3135322e38392e38382e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: g8L12A0qUguJXuKWKT7FR+yV6HayNNX/Jz8qb3bK/4o=
Subject key identifier: EE:4B:1C:5C:93:9C:26:B3:BB:C5:CF:5F:2E:8C:0D:92:A0:91:2A:70
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 62C2FC53287CEF62C242F7FAFE4FD7929B6AB20D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e38382e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:13 +0000
ROA not before: Fri 16 Oct 2026 18:44:13 +0000
ROA not after: Fri 15 Oct 2027 18:49:13 +0000
asID: 216253
IP address blocks: 152.89.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c2:fc:53:28:7c:ef:62:c2:42:f7:fa:fe:4f:d7:92:9b:6a:b2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:13 2026 GMT
Not After : Oct 15 18:49:13 2027 GMT
Subject: CN=EE4B1C5C939C26B3BBC5CF5F2E8C0D92A0912A70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a8:7e:4a:8a:65:2a:6a:7d:47:22:38:b5:09:
64:9f:6e:d3:21:38:a9:03:29:c6:57:5d:bd:c8:fa:
fa:bb:61:3a:ac:40:d0:2e:39:5d:5d:32:6b:44:fd:
0b:19:43:5c:44:74:92:e2:a0:00:bb:d1:9d:89:bf:
cb:fe:a2:d2:92:2b:00:07:7e:d3:af:20:2b:22:88:
1f:2f:f0:f7:c7:ab:3f:8d:7a:41:23:4a:95:86:55:
6d:4f:84:e4:53:97:48:d2:b6:20:a0:3b:39:a1:77:
2c:fd:f1:1d:16:9c:a8:9f:51:12:fa:f1:2b:22:c2:
ce:c5:f0:56:2e:15:8d:e5:ac:7f:33:35:4b:0b:9a:
a7:32:29:2a:0c:d1:aa:84:5f:c5:48:c2:9c:6f:38:
41:a7:d2:2b:6a:97:fd:aa:fc:62:6a:77:d2:9b:bb:
b4:ec:8e:88:4a:aa:46:3f:62:c4:ea:98:5b:47:87:
15:8c:f5:64:39:25:e5:cb:4a:b6:4d:01:dc:7c:8f:
12:6b:78:81:a6:da:8b:96:62:87:6b:8f:25:95:32:
51:3e:42:52:ae:94:7e:15:26:01:9c:d6:83:b6:74:
40:65:ee:10:54:fd:9a:73:43:78:df:ee:84:f1:f1:
4c:46:fa:df:d0:a0:1d:cb:d7:9a:dc:27:f4:7f:e3:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4B:1C:5C:93:9C:26:B3:BB:C5:CF:5F:2E:8C:0D:92:A0:91:2A:70
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e38382e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.88.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:83:0b:60:4f:4d:1f:33:15:72:30:56:98:8c:f0:bf:53:7c:
f9:6a:df:b7:c3:f8:6d:b2:f8:57:54:bb:04:31:41:74:eb:2a:
b8:d4:d9:5b:13:60:32:8b:22:b9:bb:08:2d:e4:f8:2f:3d:df:
72:1b:23:db:0f:b8:c8:8f:49:4c:d0:99:30:70:5e:b0:02:05:
e5:ea:6a:8d:82:04:9a:e5:74:e5:b1:bb:09:e3:f4:86:90:8a:
a4:5e:b5:d8:b4:66:0d:26:b7:c3:3a:0a:a3:ad:c4:44:37:d4:
95:27:c2:ca:dc:f9:d9:4d:90:ed:d4:0a:c9:0c:f6:c1:bc:db:
94:c4:c2:33:4a:e6:29:e9:d7:b3:8f:c5:02:f2:ab:5d:78:77:
ea:7f:00:89:f4:b8:ad:81:6b:9b:4f:a8:19:b6:ca:53:97:2a:
95:10:58:e6:54:bc:5c:d5:1d:be:b3:0f:d3:fd:6f:b1:1a:33:
8e:fd:3d:2a:4f:07:7a:46:b3:b1:19:46:ae:b9:55:25:ae:20:
bd:7a:dd:62:fb:7f:6e:02:db:3a:ea:1e:ca:6d:06:03:6a:fa:
60:5c:a1:db:d2:60:10:aa:7d:ef:c3:0b:9d:54:33:78:d4:f2:
32:b1:b3:8b:e7:d2:31:64:4e:cc:3d:3f:db:91:63:9c:51:e5:
53:04:f0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:38 2026 by rpki-client