Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e38392e302f32342d3234203d3e20323136323533.roa
File: 3135322e38392e38392e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: SMmeozNOIqyRgehVRUIwLRzjoyb2+lunMnq0ZPEzGCs=
Subject key identifier: 07:B4:B0:B7:53:67:A3:C9:D5:79:94:83:09:EC:A8:88:98:EF:46:33
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5EDD8B80D6944FA07AA840D9F65CFAF5AA8BC54F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e38392e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:15 +0000
ROA not before: Fri 16 Oct 2026 18:44:15 +0000
ROA not after: Fri 15 Oct 2027 18:49:15 +0000
asID: 216253
IP address blocks: 152.89.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:dd:8b:80:d6:94:4f:a0:7a:a8:40:d9:f6:5c:fa:f5:aa:8b:c5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:15 2026 GMT
Not After : Oct 15 18:49:15 2027 GMT
Subject: CN=07B4B0B75367A3C9D579948309ECA88898EF4633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:fc:47:ee:fe:d9:46:bb:ec:41:0e:56:42:
b7:09:82:a2:90:b1:b3:81:05:f5:e7:5c:e5:a4:55:
33:64:d3:e2:93:22:4b:c6:d5:8b:3d:76:f9:a1:24:
53:1e:ae:68:21:30:6b:c4:5b:e6:67:e1:c7:f6:8b:
e9:a2:e0:46:0c:08:38:2d:ba:3b:0b:ee:26:00:f6:
dd:68:a4:2f:1b:bb:8d:71:a6:55:5f:c0:dc:38:bb:
05:5f:07:e7:ba:8d:fb:88:ef:8b:35:cd:35:57:7e:
cb:9e:c4:55:af:8c:5d:e1:f8:0e:21:d9:5f:4b:75:
34:5e:77:80:9a:cb:f5:d3:b8:4d:cb:e1:33:71:1a:
c0:dc:2a:47:88:59:19:c5:11:2e:17:af:e3:f2:e0:
78:ab:44:15:73:38:5d:d8:2d:4c:f6:27:3b:5c:ce:
f6:1e:dc:2d:e1:6c:7f:9d:52:55:d1:4d:0f:63:1b:
78:8a:f6:db:84:11:99:86:f0:aa:42:62:fb:65:91:
e6:a0:3d:89:ae:52:ae:3e:b0:78:71:b4:17:aa:29:
5f:a8:ac:39:5c:41:b8:dc:4f:39:0d:85:e4:f2:44:
7c:ee:e3:b9:8c:28:bd:bf:39:2b:c2:a7:e8:a6:b2:
67:c0:df:8d:03:86:68:2e:65:dc:74:a9:5f:e7:73:
50:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B4:B0:B7:53:67:A3:C9:D5:79:94:83:09:EC:A8:88:98:EF:46:33
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e38392e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.89.0/24
Signature Algorithm: sha256WithRSAEncryption
09:4d:df:96:94:9d:af:20:d9:d7:0a:cc:b9:06:0e:0e:eb:3b:
a6:14:e0:90:a1:a6:b4:cd:2c:e4:89:ab:6a:bf:f2:79:64:b5:
86:e9:0a:d5:7e:86:41:ad:95:02:6c:ce:95:20:bb:03:dd:43:
7f:23:5c:1a:77:76:58:9b:9f:33:1a:ef:cc:ca:1a:50:e8:ff:
8a:8c:01:d4:c9:6b:ef:ac:cc:dd:63:96:22:9e:12:31:5f:f5:
1c:a1:11:79:a4:9d:a0:16:4a:ae:d2:7a:ba:0f:e5:89:0c:8c:
d0:1d:e3:3a:e6:7c:d2:55:95:4c:e4:f0:8a:65:0c:19:18:f6:
fd:c3:42:94:5f:37:e8:c0:62:8c:a4:ca:23:7c:21:40:44:69:
7e:ba:96:dd:17:61:f1:c6:04:26:3c:da:46:dc:2a:a2:46:0e:
47:74:34:16:f4:14:b2:f7:f9:36:8c:d5:dd:8f:3f:58:f1:fc:
60:d2:ed:13:02:cf:29:3c:31:1d:5b:28:4e:d8:8e:dc:2e:2c:
eb:0f:a4:0c:97:35:51:66:5a:51:3a:6b:12:e9:ae:9f:32:b9:
23:6a:69:67:4c:ea:02:da:1e:60:09:3d:6c:f2:9b:54:ab:ed:
0e:65:7e:09:2a:38:72:aa:0b:88:ce:04:0f:52:86:f7:0c:06:
e2:0c:da:df
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUXt2LgNaUT6B6qEDZ9lz69aqLxU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMTYxODQ0MTVaFw0yNzEwMTUxODQ5MTVaMDMxMTAvBgNV
BAMTKDA3QjRCMEI3NTM2N0EzQzlENTc5OTQ4MzA5RUNBODg4OThFRjQ2MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7vxH7v7ZRrvsQQ5WQrcJgqKQ
sbOBBfXnXOWkVTNk0+KTIkvG1Ys9dvmhJFMermghMGvEW+Zn4cf2i+mi4EYMCDgt
ujsL7iYA9t1opC8bu41xplVfwNw4uwVfB+e6jfuI74s1zTVXfsuexFWvjF3h+A4h
2V9LdTRed4Cay/XTuE3L4TNxGsDcKkeIWRnFES4Xr+Py4HirRBVzOF3YLUz2Jztc
zvYe3C3hbH+dUlXRTQ9jG3iK9tuEEZmG8KpCYvtlkeagPYmuUq4+sHhxtBeqKV+o
rDlcQbjcTzkNheTyRHzu47mMKL2/OSvCp+imsmfA340DhmguZdx0qV/nc1ArAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUB7Swt1Nno8nVeZSDCeyoiJjvRjMwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM1MzIyZTM4Mzky
ZTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzYzMjM1MzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACYWVkwDQYJKoZIhvcNAQELBQADggEBAAlN35aUna8g2dcKzLkGDg7rO6YU
4JChprTNLOSJq2q/8nlktYbpCtV+hkGtlQJszpUguwPdQ38jXBp3dlibnzMa78zK
GlDo/4qMAdTJa++szN1jliKeEjFf9RyhEXmknaAWSq7SeroP5YkMjNAd4zrmfNJV
lUzk8IplDBkY9v3DQpRfN+jAYoykyiN8IUBEaX66lt0XYfHGBCY82kbcKqJGDkd0
NBb0FLL3+TaM1d2PP1jx/GDS7RMCzyk8MR1bKE7YjtwuLOsPpAyXNVFmWlE6axLp
rp8yuSNqaWdM6gLaHmAJPWzym1Sr7Q5lfgkqOHKqC4jOBA9ShvcMBuIM2t8=
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:38 2026 by rpki-client