Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37382e302f32342d3234203d3e20313336373837.roa
File: 3137362e3131332e37382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: n5KJqhU1YuzcTyliZVOmkmCymD9nkGHkJlRGk7lNwzg=
Subject key identifier: 6C:EF:04:7A:46:60:9F:D4:44:5B:4E:C4:9F:1B:A6:7B:AA:45:D2:12
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7F7E5D9D9DCCBCC2433579C8787A44FE8683E089
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:43 +0000
ROA not before: Fri 23 Oct 2026 16:25:43 +0000
ROA not after: Fri 22 Oct 2027 16:30:43 +0000
asID: 136787
IP address blocks: 176.113.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7e:5d:9d:9d:cc:bc:c2:43:35:79:c8:78:7a:44:fe:86:83:e0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:43 2026 GMT
Not After : Oct 22 16:30:43 2027 GMT
Subject: CN=6CEF047A46609FD4445B4EC49F1BA67BAA45D212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:57:bf:60:2d:e2:64:31:65:93:80:0d:17:
09:35:e4:2f:14:29:bf:ef:5a:ce:fe:d6:c2:94:fb:
a4:c9:63:ad:34:27:07:0f:c2:ef:5b:d0:90:c2:ba:
4c:08:ba:6b:87:46:11:4e:af:21:fb:dc:5c:4d:e1:
68:50:09:19:ec:1d:79:2f:f1:14:76:5a:cf:2d:b7:
1e:07:48:0d:3a:de:aa:3b:f5:2b:3d:4f:a8:fb:a3:
2c:9c:81:67:41:2c:60:fe:7b:4c:e1:71:ab:d0:a6:
51:3b:be:09:de:56:46:aa:3a:ae:1c:29:58:38:b0:
87:3e:d1:68:51:fa:0c:21:3b:ac:12:db:c6:11:44:
2c:38:a9:d0:dd:f5:9c:b0:33:94:04:71:51:8f:40:
ee:83:ab:20:a5:d0:89:18:c8:37:4f:60:a7:b2:b8:
2c:f1:dc:0d:18:5b:01:9f:c8:14:c7:11:29:65:78:
0e:4c:eb:59:0c:b5:1d:0e:a8:aa:0c:9a:79:a0:59:
28:d6:60:49:2a:2c:4b:f5:e5:33:03:2a:13:01:a7:
7a:d8:3e:e8:ee:7d:b2:9f:37:58:24:16:e4:d9:2c:
bd:36:9d:1a:bc:b6:a4:49:0e:02:ac:37:5a:8e:bc:
c6:f6:79:5e:b5:a7:34:0d:9e:d6:c7:01:9d:c6:0b:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EF:04:7A:46:60:9F:D4:44:5B:4E:C4:9F:1B:A6:7B:AA:45:D2:12
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.78.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d6:04:11:7d:e3:f5:d5:80:97:17:d5:37:59:26:9c:e9:9a:
12:d5:67:11:f5:a2:13:54:81:c8:38:19:ff:38:bf:e8:ee:1f:
94:28:4e:ca:96:2f:24:19:7e:b4:df:eb:ff:86:53:d4:b8:cc:
c1:98:4f:73:de:08:fd:aa:6a:a8:b5:84:8f:86:c1:47:f1:a6:
63:48:e9:31:37:ac:7e:59:c7:5a:e9:f9:5e:3d:bf:41:30:1f:
91:0a:29:ce:16:15:73:a7:7f:0c:7c:1a:1c:d1:b4:94:8d:b5:
0c:4a:28:9b:8b:5e:04:99:c3:0b:63:77:1f:01:b5:71:9c:cd:
5d:d3:08:4f:d7:0c:91:74:b7:37:37:89:cf:ed:7c:c5:9b:1a:
3a:1b:af:e5:88:22:6f:eb:56:53:0c:d8:e4:d0:87:6e:65:75:
b3:fe:39:87:23:c4:f1:a4:55:34:3d:ed:16:7e:32:01:ba:fb:
30:07:22:f1:3d:8b:a8:ca:01:4f:16:79:a1:ee:51:93:ef:c5:
f7:3e:62:17:df:30:b9:10:93:89:9f:2c:35:b9:73:48:88:88:
8a:30:d1:31:33:02:d5:59:2a:e1:57:3a:8e:e2:5c:bd:28:f7:
7a:f1:8f:0c:8e:45:0a:22:5f:6e:c9:5b:ba:b0:36:15:52:e5:
84:60:0d:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:17:12 2026 by rpki-client