Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32322d3232203d3e20313336373837.roa
File: 3137362e3131332e37362e302f32322d3232203d3e20313336373837.roa (raw, json)
Hash identifier: dxfbJHnymBU2wR9n/rHMAPbvGL8WHwfH5yXMZMWKTiM=
Subject key identifier: 2A:53:98:82:8A:42:72:40:E0:73:8D:E3:C3:85:8B:73:78:FA:7A:41
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 399B82C447B290F6F79F29A4F1AEE8769814219D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32322d3232203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:16 +0000
ROA not before: Fri 23 Oct 2026 16:25:16 +0000
ROA not after: Fri 22 Oct 2027 16:30:16 +0000
asID: 136787
IP address blocks: 176.113.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:9b:82:c4:47:b2:90:f6:f7:9f:29:a4:f1:ae:e8:76:98:14:21:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:16 2026 GMT
Not After : Oct 22 16:30:16 2027 GMT
Subject: CN=2A5398828A427240E0738DE3C3858B7378FA7A41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1b:d3:a3:8d:9d:c3:fd:53:67:f6:5a:29:2a:
2c:75:fd:0a:24:9e:74:b6:24:32:b3:e2:8c:4c:6c:
9d:0e:d7:72:e5:04:38:a7:de:5c:d1:77:1f:98:5d:
c0:c2:d7:90:d3:f3:6e:56:8e:0c:51:7a:23:66:71:
8c:c3:5a:bf:9b:71:ac:00:57:28:10:16:37:e1:33:
4d:d1:c2:d0:4e:fe:18:3b:ed:3f:89:aa:30:e8:b7:
09:a2:2c:d2:b5:6e:a3:e1:db:64:da:f4:07:8b:0d:
75:67:2a:61:5c:ce:4a:8b:14:d3:ce:a7:97:2b:86:
e8:58:b1:e0:b5:eb:7b:fb:e9:55:bc:d8:58:64:4e:
e1:db:1a:e6:71:0d:b0:5c:0e:82:ed:bc:83:ef:54:
dc:fc:45:f2:94:bd:12:6d:ae:93:37:52:c1:a4:2b:
e1:86:d5:31:ae:ab:73:f2:ce:f7:65:83:d8:b3:aa:
1d:a6:92:de:9d:26:45:7c:c4:d2:69:65:13:1e:0b:
52:4a:8f:fd:9f:ff:75:21:3d:22:09:75:55:cb:0a:
34:a6:64:1f:e0:26:97:d4:da:28:26:8a:fc:80:7e:
91:dc:e7:8f:b4:5f:d6:a9:97:f4:26:d8:40:30:9e:
78:d2:b7:a5:9c:d9:5f:ac:0b:8a:a9:2b:95:45:fe:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:53:98:82:8A:42:72:40:E0:73:8D:E3:C3:85:8B:73:78:FA:7A:41
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32322d3232203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.76.0/22
Signature Algorithm: sha256WithRSAEncryption
10:84:05:a1:e2:7b:f5:59:30:66:c8:81:b7:60:2f:49:52:67:
81:22:b7:43:01:3c:4f:e0:3b:8e:7c:52:5a:d4:0e:d9:b4:ad:
69:27:52:a9:31:ee:f1:63:76:0d:bc:c9:eb:d4:99:f6:26:1f:
2c:51:99:82:5b:72:09:92:ed:d8:0a:3d:4f:ff:ff:c7:79:29:
b7:1b:40:6a:3a:f7:0b:b6:78:da:5a:b2:bf:f4:48:75:54:1e:
b1:bf:e9:91:09:03:a1:93:31:dc:8a:f2:02:da:00:cf:24:d5:
27:ac:6e:2c:75:a1:e3:aa:68:6f:1f:fa:23:b5:98:d7:e6:37:
d7:44:ed:3b:9a:5c:10:dd:d3:27:4f:53:f7:f4:11:24:e6:e7:
97:d3:bc:3b:fa:44:ec:a2:6e:9e:a2:ec:88:37:75:20:fd:45:
35:52:02:a8:ab:e3:e0:8a:f7:ff:f8:40:8c:55:da:59:d9:db:
dc:62:87:ad:76:6f:63:41:40:b4:65:74:26:b2:c0:2f:2d:19:
af:2a:9d:f8:25:3b:1f:da:94:3c:d4:5c:d2:cd:66:69:ca:11:
1a:ca:71:6a:d2:af:35:7b:ab:4b:93:66:0a:96:61:47:a3:dd:
b8:07:3d:19:f4:ef:48:b2:ae:eb:3b:2c:35:a1:f3:ae:0a:0b:
eb:d0:66:f1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:44:18 2026 by rpki-client