Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136322e3234342e32342e302f32312d3332203d3e203531313637.roa
File: 3136322e3234342e32342e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: v4z7iAl7YE159Gaut0AbA/qVUjaH8MxMzUG5Fo+Vs4E=
Subject key identifier: FA:9B:CB:FC:96:F8:64:FF:E9:34:9E:A1:A4:AF:73:1F:CC:04:0A:92
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7F7449C6BA27344B2794915DCF8D6982528216CD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136322e3234342e32342e302f32312d3332203d3e203531313637.roa
Signing time: Thu 15 Oct 2026 18:29:50 +0000
ROA not before: Thu 15 Oct 2026 18:24:50 +0000
ROA not after: Thu 14 Oct 2027 18:29:50 +0000
asID: 51167
IP address blocks: 162.244.24.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:74:49:c6:ba:27:34:4b:27:94:91:5d:cf:8d:69:82:52:82:16:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 15 18:24:50 2026 GMT
Not After : Oct 14 18:29:50 2027 GMT
Subject: CN=FA9BCBFC96F864FFE9349EA1A4AF731FCC040A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:33:43:6e:5e:dc:f8:23:d6:9b:8d:be:a6:cc:
e0:fa:01:13:f7:a8:40:83:a4:ac:95:64:e7:5c:02:
f8:96:65:cc:86:c4:81:a3:ce:99:c7:d8:f0:e0:d9:
b2:17:42:f6:64:5f:d7:62:ca:8a:2a:22:0e:34:cd:
bb:bf:94:fc:06:19:1f:6a:4a:ae:aa:46:f9:5c:20:
1f:ab:4b:17:c2:bb:a6:4f:74:10:94:af:a2:a0:3e:
21:f4:72:0a:d6:83:69:18:46:cc:a4:67:d0:49:20:
81:c4:84:a4:99:9c:fb:ee:b8:40:9f:4c:e4:fb:82:
c9:e0:5a:ae:4d:3e:75:d4:39:7b:65:5e:a7:cd:81:
ba:90:fc:39:29:d3:e4:b4:cc:4b:2b:50:7f:1b:f4:
fc:a4:f1:5f:15:12:33:56:e8:95:45:c8:87:61:72:
12:17:d0:57:17:a7:76:fa:31:0c:2c:91:cb:12:ab:
5a:05:34:93:e0:8a:86:dc:f4:a8:8d:b5:f7:53:f3:
f2:81:86:12:07:af:50:45:78:e8:2b:eb:e0:12:74:
0a:c0:87:3d:42:15:c0:e7:81:82:3e:40:89:ce:39:
8c:0b:1b:4d:88:62:2b:29:25:fc:0e:19:29:8b:83:
dd:28:85:63:84:00:3e:73:af:04:e7:83:cf:f0:95:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9B:CB:FC:96:F8:64:FF:E9:34:9E:A1:A4:AF:73:1F:CC:04:0A:92
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136322e3234342e32342e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.244.24.0/21
Signature Algorithm: sha256WithRSAEncryption
34:85:d6:31:b2:4e:69:3e:63:67:0b:0b:4a:ee:24:43:85:f5:
47:21:1c:bc:44:37:76:cb:69:ff:ac:fc:c4:ef:a3:3a:02:7d:
ec:f0:84:a7:d5:56:5b:76:1e:fa:03:70:46:79:6f:5f:16:cb:
39:4d:90:d7:53:da:ac:6e:4d:d5:73:2a:83:95:00:93:d0:30:
95:32:e5:8b:b1:0d:99:14:86:38:78:1b:71:1f:24:fc:af:9b:
30:d2:a3:54:a4:80:08:42:d3:b7:9c:45:ca:ce:c9:a6:d0:20:
74:66:58:ad:79:c6:8a:7f:fa:dd:f7:8b:38:01:dc:68:c0:f2:
06:b1:a1:57:de:0f:ed:2f:fb:22:e6:05:20:f5:72:dc:35:1d:
fc:5d:8b:c0:e2:00:52:2d:7b:7a:fe:62:a2:6b:b1:43:54:f6:
df:17:2b:3c:6b:25:93:50:6b:c2:7a:96:64:11:b5:9c:82:b9:
db:e2:dc:09:06:76:bc:9e:12:7e:9b:8a:a8:3f:cf:d9:fa:6e:
86:a1:3f:ad:8c:ec:db:9e:cd:fc:10:cd:cf:1e:f5:c4:ba:b1:
88:65:3a:7d:25:e9:48:41:78:dd:44:9a:64:95:b3:8d:18:3c:
9a:d3:92:db:2e:ba:8b:56:f6:77:a3:3a:3a:6e:40:fe:8a:c0:
03:5c:9a:1f
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUf3RJxronNEsnlJFdz41pglKCFs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMTUxODI0NTBaFw0yNzEwMTQxODI5NTBaMDMxMTAvBgNV
BAMTKEZBOUJDQkZDOTZGODY0RkZFOTM0OUVBMUE0QUY3MzFGQ0MwNDBBOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWM0NuXtz4I9abjb6mzOD6ARP3
qECDpKyVZOdcAviWZcyGxIGjzpnH2PDg2bIXQvZkX9diyooqIg40zbu/lPwGGR9q
Sq6qRvlcIB+rSxfCu6ZPdBCUr6KgPiH0cgrWg2kYRsykZ9BJIIHEhKSZnPvuuECf
TOT7gsngWq5NPnXUOXtlXqfNgbqQ/Dkp0+S0zEsrUH8b9Pyk8V8VEjNW6JVFyIdh
chIX0FcXp3b6MQwskcsSq1oFNJPgiobc9KiNtfdT8/KBhhIHr1BFeOgr6+ASdArA
hz1CFcDngYI+QInOOYwLG02IYispJfwOGSmLg90ohWOEAD5zrwTng8/wlc+rAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU+pvL/Jb4ZP/pNJ6hpK9zH8wECpIwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM2MzIyZTMyMzQz
NDJlMzIzNDJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAOi9BgwDQYJKoZIhvcNAQELBQADggEBADSF1jGyTmk+Y2cLC0ruJEOF9Uch
HLxEN3bLaf+s/MTvozoCfezwhKfVVlt2HvoDcEZ5b18WyzlNkNdT2qxuTdVzKoOV
AJPQMJUy5YuxDZkUhjh4G3EfJPyvmzDSo1SkgAhC07ecRcrOyabQIHRmWK15xop/
+t33izgB3GjA8gaxoVfeD+0v+yLmBSD1ctw1Hfxdi8DiAFIte3r+YqJrsUNU9t8X
KzxrJZNQa8J6lmQRtZyCudvi3AkGdryeEn6biqg/z9n6boahP62M7NuezfwQzc8e
9cS6sYhlOn0l6UhBeN1EmmSVs40YPJrTktsuuotW9nejOjpuQP6KwANcmh8=
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:04:13 2026 by rpki-client