Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234302e302f32342d3234203d3e2039303039.roa
File: 3137362e3232372e3234302e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: gwyhL8cWHFFme/TgsRy1uLzF3OwEEpXMNy1h5yp28Tk=
Subject key identifier: 56:7C:C9:64:DF:FD:22:4A:49:30:E3:2A:C5:95:76:AA:1B:06:9B:AE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1FA2F8F849B0C3410F6C31899BACE0EF444447F7
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234302e302f32342d3234203d3e2039303039.roa
Signing time: Thu 01 Oct 2026 19:44:20 +0000
ROA not before: Thu 01 Oct 2026 19:39:20 +0000
ROA not after: Thu 30 Sep 2027 19:44:20 +0000
asID: 9009
IP address blocks: 176.227.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a2:f8:f8:49:b0:c3:41:0f:6c:31:89:9b:ac:e0:ef:44:44:47:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 1 19:39:20 2026 GMT
Not After : Sep 30 19:44:20 2027 GMT
Subject: CN=567CC964DFFD224A4930E32AC59576AA1B069BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:f9:27:5d:00:92:18:0f:9f:55:c6:98:5c:
90:89:f7:dc:9b:42:84:4f:91:3f:bc:03:3c:e4:c5:
5d:76:47:4e:25:86:a7:09:0f:6b:51:8a:d5:d4:70:
a3:33:a2:ce:95:4e:c9:48:b6:f1:31:52:77:a8:9f:
bf:48:06:de:09:3c:aa:18:16:38:f5:b2:69:06:71:
72:2d:cb:16:21:75:82:11:6e:a7:74:ff:6e:7f:1d:
f1:8d:a1:7a:99:e0:ba:6c:eb:82:3b:a6:21:82:44:
c2:f4:1c:11:c7:74:d9:80:ab:a9:e1:c6:f3:c4:87:
4a:3a:c3:3d:bb:fa:25:99:7c:c3:77:e4:31:b9:54:
c6:9e:18:15:ee:97:11:e8:f5:42:ee:05:ae:14:74:
4c:1f:d3:0b:51:a8:5a:85:1d:5a:6c:34:ab:f8:36:
21:97:aa:cf:1a:0c:b4:57:1c:f9:ef:54:a7:7c:4b:
8d:91:29:b7:1c:ae:95:e4:05:6d:b2:ef:0d:6b:cd:
a5:70:66:85:91:1e:6e:e9:4a:bd:d1:47:b6:40:30:
8c:52:08:21:cf:52:12:14:42:d1:c4:87:1a:66:3c:
0c:fa:5b:29:8a:31:57:50:28:9a:c3:58:f1:e6:92:
a9:1a:10:5c:34:ab:0c:37:b6:61:b1:42:d2:d5:15:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7C:C9:64:DF:FD:22:4A:49:30:E3:2A:C5:95:76:AA:1B:06:9B:AE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234302e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.227.240.0/24
Signature Algorithm: sha256WithRSAEncryption
60:aa:80:55:ce:3d:13:88:55:49:42:7b:ce:e8:54:1c:c8:c8:
b0:e6:d1:62:7b:02:f9:6b:69:40:aa:7c:1d:cb:77:fb:77:ff:
83:27:dc:65:94:81:de:82:f0:f2:7c:e9:a0:48:13:37:6e:50:
01:ea:56:82:50:41:4b:89:1f:32:7b:08:40:fd:36:94:d4:cf:
1d:89:dd:ad:33:1c:68:49:f8:a7:30:5a:e8:7d:b5:29:79:1e:
b0:b3:df:76:09:1d:9f:14:d7:f6:88:99:d6:11:72:cd:6a:46:
15:d0:03:85:3e:0c:cf:6f:82:dd:eb:83:3c:5e:5d:ee:c1:9a:
22:2d:7d:69:f1:d7:14:5b:7a:89:cb:86:43:f1:e0:5c:8a:97:
d9:96:9c:95:86:b9:a0:bf:2f:37:73:7d:bd:eb:5b:3f:99:76:
0c:13:14:b5:68:87:c3:37:b3:f1:94:ac:b0:6f:2c:59:c3:17:
dd:93:cc:00:7b:28:1c:54:b7:e9:6a:43:8e:e7:1a:b9:f6:18:
b3:97:b5:ce:cc:bb:7d:43:da:0b:43:91:5b:bb:81:62:d7:c3:
a6:40:88:29:a1:e9:db:c8:84:35:8e:6a:ba:ef:25:12:07:07:
e2:78:b5:cb:41:4f:3d:83:ff:d9:02:71:5f:cc:d6:33:b3:a5:
87:62:dd:e3
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUH6L4+Emww0EPbDGJm6zg70RER/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMDExOTM5MjBaFw0yNzA5MzAxOTQ0MjBaMDMxMTAvBgNV
BAMTKDU2N0NDOTY0REZGRDIyNEE0OTMwRTMyQUM1OTU3NkFBMUIwNjlCQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bfknXQCSGA+fVcaYXJCJ99yb
QoRPkT+8AzzkxV12R04lhqcJD2tRitXUcKMzos6VTslItvExUneon79IBt4JPKoY
Fjj1smkGcXItyxYhdYIRbqd0/25/HfGNoXqZ4Lps64I7piGCRML0HBHHdNmAq6nh
xvPEh0o6wz27+iWZfMN35DG5VMaeGBXulxHo9ULuBa4UdEwf0wtRqFqFHVpsNKv4
NiGXqs8aDLRXHPnvVKd8S42RKbccrpXkBW2y7w1rzaVwZoWRHm7pSr3RR7ZAMIxS
CCHPUhIUQtHEhxpmPAz6WymKMVdQKJrDWPHmkqkaEFw0qww3tmGxQtLVFajtAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUVnzJZN/9IkpJMOMqxZV2qhsGm64wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzYyZTMyMzIz
NzJlMzIzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzMDMwMzkucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACw4/AwDQYJKoZIhvcNAQELBQADggEBAGCqgFXOPROIVUlCe87oVBzIyLDm
0WJ7AvlraUCqfB3Ld/t3/4Mn3GWUgd6C8PJ86aBIEzduUAHqVoJQQUuJHzJ7CED9
NpTUzx2J3a0zHGhJ+KcwWuh9tSl5HrCz33YJHZ8U1/aImdYRcs1qRhXQA4U+DM9v
gt3rgzxeXe7BmiItfWnx1xRbeonLhkPx4FyKl9mWnJWGuaC/Lzdzfb3rWz+ZdgwT
FLVoh8M3s/GUrLBvLFnDF92TzAB7KBxUt+lqQ47nGrn2GLOXtc7Mu31D2gtDkVu7
gWLXw6ZAiCmh6dvIhDWOarrvJRIHB+J4tctBTz2D/9kCcV/M1jOzpYdi3eM=
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:32 2026 by rpki-client