Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e39312e302f32342d3234203d3e20323136323533.roa
File: 3135322e38392e39312e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: A33F+qUwwINRQiH9+vzBl6ghbljI3hPkNiQ5f7njTBM=
Subject key identifier: 75:57:01:59:9F:65:E8:4F:0B:B6:2B:5C:23:47:F8:AB:AA:FF:8C:55
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 46170DDFAF87A9DC0D8AEF0A95441E5BD86CD973
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e39312e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:17 +0000
ROA not before: Fri 16 Oct 2026 18:44:17 +0000
ROA not after: Fri 15 Oct 2027 18:49:17 +0000
asID: 216253
IP address blocks: 152.89.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:17:0d:df:af:87:a9:dc:0d:8a:ef:0a:95:44:1e:5b:d8:6c:d9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:17 2026 GMT
Not After : Oct 15 18:49:17 2027 GMT
Subject: CN=755701599F65E84F0BB62B5C2347F8ABAAFF8C55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:99:64:b2:ff:a5:76:5c:47:8e:1f:13:3e:
69:0a:59:bc:29:5d:31:80:f6:34:5a:cf:f1:7c:db:
0d:b5:1c:c5:3f:9d:9d:e5:0d:46:9b:9a:b5:0c:3b:
cb:2f:5d:0e:e3:e6:82:31:0a:4d:72:9f:11:f0:56:
5a:60:fd:2f:56:e2:97:a7:79:69:69:e4:dc:df:c7:
4d:f1:98:ab:ed:f9:57:94:2f:2f:01:c4:46:08:60:
17:3e:be:bb:f5:ef:0d:7d:16:45:81:8c:09:f5:3b:
7a:08:10:6e:3c:09:4c:c4:5e:15:a4:d8:9a:ce:f3:
83:90:7d:f6:77:0e:ba:8e:b0:4c:c6:72:04:2a:71:
59:d3:11:a3:9c:3e:23:e1:80:a0:a1:20:d1:a8:d4:
21:b5:d3:dd:95:fa:3d:57:49:9b:02:fb:80:3c:bf:
ca:26:4d:43:a9:64:3a:fd:39:5d:61:2b:f3:20:df:
eb:45:3f:25:72:90:ea:c1:ee:04:dd:17:5b:92:63:
2d:fc:ab:c3:b3:62:46:74:b8:37:49:f6:9b:7a:a0:
8f:7e:b8:b6:1e:b8:47:c2:7f:4d:b0:e8:d3:c8:ed:
54:11:f8:81:29:d9:35:b6:10:91:54:17:71:7f:8d:
5f:cc:32:df:0b:c2:3d:4e:41:23:09:4c:33:bb:4e:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:57:01:59:9F:65:E8:4F:0B:B6:2B:5C:23:47:F8:AB:AA:FF:8C:55
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3135322e38392e39312e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.91.0/24
Signature Algorithm: sha256WithRSAEncryption
69:11:8e:18:76:fa:a0:db:46:fc:df:7c:3c:84:a3:28:d1:f4:
60:fc:b2:c7:5a:8c:d4:a7:de:75:47:35:f0:c7:3e:c1:16:17:
7a:09:95:f2:e3:70:52:e3:57:35:bc:b6:d7:b6:8f:8a:f9:79:
7b:dd:80:63:9c:67:cc:9c:6b:9d:b3:00:24:0c:b3:66:06:3d:
e3:45:ab:31:24:e4:53:2c:40:f5:1f:85:79:ca:c7:f1:bd:bc:
e2:e8:16:38:7a:49:8a:44:6e:82:fa:ef:61:1a:c6:30:6e:ff:
7c:18:a5:0d:6c:85:b5:3f:b7:93:0a:5f:25:a5:01:ee:bf:13:
b2:88:f5:c7:65:08:86:44:9d:fc:74:0b:95:cc:d5:d0:d2:99:
9d:dd:46:b1:61:ef:9a:4a:73:67:ae:6f:4b:26:1f:20:f4:d4:
9e:5f:0c:b9:44:2b:84:8c:a7:ac:8e:5a:2b:23:be:d5:f2:34:
5b:74:c2:dd:fb:14:55:3f:6c:13:04:e8:8d:54:82:ed:f3:28:
3c:ff:87:e9:50:ec:17:8c:07:95:c0:c2:46:a5:61:47:f7:36:
8a:b5:8c:4e:0e:b2:da:c9:6a:8d:59:46:f6:16:a4:22:eb:6d:
59:64:00:29:59:71:83:cd:cd:55:f7:59:c2:69:cb:22:6b:52:
6a:0e:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:35 2026 by rpki-client