Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e39302e302f32342d3234203d3e20323136323533.roa
File: 3135322e38392e39302e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: IXjQws7j7z1xx3yDr3/z1ECQ4qxNqD1zCoRLBBF8k9U=
Subject key identifier: 69:1F:B6:C0:43:87:7B:98:90:63:56:FC:0A:E6:31:83:B9:F1:02:A3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 719BD0CD2DBF57F8737A72AEE73FFCD155AEF287
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e39302e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:16 +0000
ROA not before: Fri 16 Oct 2026 18:44:16 +0000
ROA not after: Fri 15 Oct 2027 18:49:16 +0000
asID: 216253
IP address blocks: 152.89.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:9b:d0:cd:2d:bf:57:f8:73:7a:72:ae:e7:3f:fc:d1:55:ae:f2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:16 2026 GMT
Not After : Oct 15 18:49:16 2027 GMT
Subject: CN=691FB6C043877B98906356FC0AE63183B9F102A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:54:23:2b:83:b6:13:5e:ef:9b:5b:ac:bd:
d7:1b:68:23:8b:17:61:e4:fd:99:af:9e:9a:10:7b:
53:0e:2f:43:6d:a4:18:ad:89:96:8f:65:d4:ff:52:
d2:66:29:5b:d3:b1:38:f6:5e:d2:08:b4:80:99:0b:
12:a1:95:53:c2:92:94:8f:17:64:86:61:c5:ec:5d:
28:f8:cd:39:11:48:c2:b9:59:59:69:2d:72:d5:81:
83:b2:60:32:8e:ab:1b:33:60:ed:98:03:a5:6e:c5:
24:3f:b9:a5:c2:40:13:d2:52:69:4b:0c:08:d3:6a:
a7:47:7e:c2:02:69:6f:2d:bb:8d:e2:43:5f:6d:71:
71:2a:3d:c4:ea:85:36:11:ca:f3:83:79:5a:2d:e8:
ef:5a:43:91:4e:26:ec:15:91:7d:55:fe:7b:c6:8a:
a9:ac:9c:a5:cf:64:5d:94:8e:81:08:9c:8c:98:16:
99:2a:f8:cc:35:c4:1c:2b:47:b6:1d:17:94:c2:80:
5a:6d:f6:8a:89:6e:57:b6:c6:91:fc:bb:1f:d8:e2:
ac:5f:65:9e:60:64:26:5f:c8:0d:f9:39:db:76:b9:
52:c2:21:0d:19:a1:a9:fa:c9:39:77:2c:b4:e1:5c:
49:d9:2c:ec:0c:c3:7d:4e:2e:00:88:c1:da:ce:ee:
37:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1F:B6:C0:43:87:7B:98:90:63:56:FC:0A:E6:31:83:B9:F1:02:A3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e39302e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.90.0/24
Signature Algorithm: sha256WithRSAEncryption
23:64:49:b8:4d:cf:d9:1b:c9:e6:46:3d:a9:08:d2:4c:34:13:
2c:c1:60:8c:67:25:6a:6d:30:7f:97:3b:10:22:62:a0:7a:3f:
dc:1f:c5:6e:e1:91:8d:9a:4b:bc:70:f3:62:8b:14:7d:ab:49:
53:40:c6:b0:2c:68:91:88:a4:ed:38:60:1c:ad:4c:40:d0:01:
ef:4a:b7:7d:8f:d2:df:e5:35:ce:42:2c:26:e1:eb:a7:f8:93:
42:4f:8d:2d:b5:f9:fa:5e:6e:b7:14:2b:85:8e:eb:d6:41:37:
4f:b2:aa:2e:88:2a:2f:15:98:75:2b:f0:8f:8b:7a:5b:42:c0:
89:b3:f6:d7:ae:f1:b2:b2:53:67:2d:6e:a5:2a:f3:4c:60:60:
f1:7b:f8:91:e3:66:95:22:84:23:1a:3e:ca:71:a4:0b:5e:e4:
7c:7c:11:c1:f3:84:c0:fc:cb:0b:8f:20:de:a6:18:bc:fe:81:
13:aa:5b:44:db:6b:4a:b8:12:21:f5:96:0b:c1:80:4f:f3:55:
81:c1:52:1c:27:eb:66:e2:be:db:a9:f7:24:3c:d3:df:f7:82:
ca:99:4d:4a:b2:ab:cd:10:59:f1:a3:c1:f9:55:d0:90:40:a3:
b5:51:6a:be:1c:99:b6:59:11:6f:06:34:4b:89:43:bf:1f:dc:
1c:6b:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:33 2026 by rpki-client