Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37392e302f32342d3234203d3e20313336373837.roa
File: 3137362e3131332e37392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: XnRDvf4IgDss6eSYdlltPay3PfglIMuAmphOhUwWZfo=
Subject key identifier: 0E:36:4D:85:C9:CA:4D:E6:9A:5E:83:A6:97:C5:19:8A:E2:1E:D0:E4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 43A0CCBB450048B99C91127310C365ABB3C2216C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:42 +0000
ROA not before: Fri 23 Oct 2026 16:25:42 +0000
ROA not after: Fri 22 Oct 2027 16:30:42 +0000
asID: 136787
IP address blocks: 176.113.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:a0:cc:bb:45:00:48:b9:9c:91:12:73:10:c3:65:ab:b3:c2:21:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:42 2026 GMT
Not After : Oct 22 16:30:42 2027 GMT
Subject: CN=0E364D85C9CA4DE69A5E83A697C5198AE21ED0E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:0a:1d:2a:b5:58:2d:a4:b3:a6:14:03:74:
48:38:83:6e:29:14:76:4d:50:58:19:9b:df:5d:c7:
d0:9a:2c:9a:64:f9:88:e4:0c:ad:15:f6:25:41:a6:
6f:a6:d2:35:72:16:b9:3d:87:d2:9d:88:93:e6:b3:
12:22:2e:55:be:2f:b8:2d:65:2b:a9:f2:42:74:55:
10:94:6b:1f:92:d5:75:03:ce:d3:ab:90:c6:14:6a:
cb:bb:10:73:cb:b2:5c:c7:b2:e8:e9:ca:02:c9:fa:
5d:32:04:b2:a2:02:7e:33:03:f4:46:c5:26:4b:43:
a0:9f:a9:03:3b:78:17:c3:b0:2e:65:0d:a7:45:5b:
3e:fb:df:82:17:12:78:47:38:bc:64:d1:99:b7:c9:
17:fb:e5:d3:1b:d0:42:e2:5f:b7:b7:b2:8a:56:d7:
c4:2a:11:52:a5:42:5d:b4:db:90:93:13:d0:8c:d2:
a9:7c:5a:d7:c4:6c:e7:6c:82:9b:0e:40:c0:78:53:
a1:2e:3c:d9:e3:04:e6:be:ce:b7:a0:89:f2:0e:1a:
86:4e:25:44:f9:48:9e:63:c8:7a:3f:1d:7e:b4:c7:
ca:d6:e9:82:13:69:3b:29:a6:70:f3:06:bf:52:db:
66:54:ab:3d:3e:fb:42:52:5d:f3:3a:88:4c:58:a1:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:36:4D:85:C9:CA:4D:E6:9A:5E:83:A6:97:C5:19:8A:E2:1E:D0:E4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.79.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b6:81:a9:82:94:e1:cb:40:cd:ef:33:ac:30:a1:1c:53:3e:
61:d1:5a:42:06:b7:f6:f7:fe:4e:a3:23:72:96:e6:eb:ec:75:
60:33:4a:bb:be:e2:b3:d6:3a:53:61:aa:bf:de:1f:a3:08:ea:
67:d3:86:16:49:e1:da:c7:a8:62:71:9a:c8:64:4e:58:55:c9:
ab:6e:ab:d4:6f:89:2b:45:2e:87:43:3e:ff:93:11:df:e1:21:
62:2e:5d:5a:39:f8:2c:ae:23:66:28:85:6e:35:67:94:99:0e:
ae:99:00:3b:42:90:11:0c:e3:b8:4e:f3:f5:87:92:46:28:2f:
57:06:15:7e:ae:2c:22:bf:76:f7:9f:95:bc:d7:87:5c:09:57:
30:67:8a:a7:6a:e1:95:de:57:62:18:ee:ae:8c:4a:63:5e:1c:
3b:90:c6:58:7a:89:a6:87:39:f2:21:2a:c0:24:ba:1f:57:aa:
77:f7:93:36:88:a1:6f:e8:bf:e3:a6:35:bf:3d:60:bd:a9:7b:
88:98:3f:e0:a2:87:b6:9e:f3:a2:19:ab:5f:19:9f:2c:4f:fe:
56:f8:c0:e9:8f:1a:39:b8:6f:eb:6f:07:c7:76:d2:5f:4a:16:
0d:b0:7a:af:30:19:a0:3a:f7:54:d7:52:e0:25:2d:44:54:42:
df:f7:11:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:02:43 2026 by rpki-client