Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32342d3234203d3e20313336373837.roa
File: 3137362e3131332e37362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: crH3k6DHAGOfai3dUHnSJG8Xlu8MbktVhSp/tCRz95w=
Subject key identifier: C0:88:30:40:3F:C8:27:B2:05:B5:7C:B3:5D:5C:8B:41:2F:9D:34:13
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 593667A7D11FEC1C26BF20EB4C032AA27ECA91AB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:41 +0000
ROA not before: Fri 23 Oct 2026 16:25:41 +0000
ROA not after: Fri 22 Oct 2027 16:30:41 +0000
asID: 136787
IP address blocks: 176.113.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:36:67:a7:d1:1f:ec:1c:26:bf:20:eb:4c:03:2a:a2:7e:ca:91:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:41 2026 GMT
Not After : Oct 22 16:30:41 2027 GMT
Subject: CN=C08830403FC827B205B57CB35D5C8B412F9D3413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:a8:fe:42:cb:4a:5a:ec:70:d8:f5:34:e7:
4f:a9:bf:82:46:41:2a:ed:50:c8:ae:c0:b0:4a:73:
c1:95:c5:c4:7e:e3:e3:cb:34:4a:2c:66:eb:83:76:
7c:e6:46:a8:92:d5:33:ba:8f:59:8e:ec:a6:98:ea:
3b:78:aa:fa:7e:a6:07:0f:29:3d:e4:11:34:9a:c9:
64:7f:46:7c:a6:1a:ca:f6:44:bc:18:27:67:38:ac:
ef:31:e8:da:95:1c:74:a0:ae:34:e3:57:da:01:48:
f1:1f:11:20:99:c2:90:f1:eb:5e:a7:15:c6:92:20:
24:4d:1b:fe:ac:fc:59:8a:a4:17:eb:4b:71:2b:9c:
1c:cf:a9:54:73:8c:c2:f7:50:48:db:6f:b7:2c:92:
70:4f:97:b3:f9:40:13:8a:17:11:28:65:64:16:18:
04:42:37:df:f2:a0:f6:59:5b:61:de:43:5b:32:64:
b6:3e:cd:0a:7a:df:74:d2:47:20:5e:e1:50:b3:d3:
1a:06:df:cc:35:ac:19:c4:a8:32:32:d9:81:c8:94:
c1:b0:b9:df:b2:94:f4:0b:98:50:f2:fe:84:f3:07:
e6:2d:32:4f:18:38:f2:01:82:41:e1:10:ff:ff:81:
3a:7f:c2:f8:6b:3f:39:a6:cd:8f:32:89:b9:d3:d2:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:88:30:40:3F:C8:27:B2:05:B5:7C:B3:5D:5C:8B:41:2F:9D:34:13
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.76.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:ca:46:67:9b:ec:5e:64:a2:71:61:2b:51:29:fb:36:9b:a7:
00:ca:9e:47:c5:13:91:72:47:9b:a0:41:3c:f9:24:f2:ee:0b:
e9:67:61:e6:60:43:e5:c3:9f:63:a0:08:38:12:5d:df:d5:85:
5f:07:d2:2f:0b:fe:f6:93:2e:d6:56:07:aa:c8:fd:24:f3:0e:
c6:92:04:4b:4c:55:b7:33:55:97:1b:64:b7:48:07:6e:7e:d9:
7a:2f:5f:be:dd:f2:75:77:8a:aa:b2:a5:b6:4c:17:15:8c:8a:
c2:c3:9f:0f:4e:49:88:eb:66:7b:2b:75:8d:1a:01:0e:fd:25:
37:b8:74:17:b4:60:41:63:86:b4:2c:e5:ac:57:a2:59:56:0c:
f3:da:07:a0:14:a3:51:46:19:80:7b:21:33:6b:12:fa:71:ff:
52:d3:38:be:4b:b6:58:ff:87:dd:b6:78:ad:5d:88:a7:45:e3:
a5:c5:2b:eb:a0:b0:69:fb:4a:82:26:ae:30:66:85:0a:94:20:
a8:70:12:74:cb:e5:5a:3e:ca:c7:4c:9f:0e:de:70:d3:a4:f6:
a9:2c:97:95:82:92:58:2c:85:00:5c:6b:4d:ba:9b:16:66:98:
a9:83:79:20:19:dd:4f:11:50:ab:f9:60:45:36:c5:04:d3:a4:
fd:5a:ba:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:39:37 2026 by rpki-client