Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33322e302f32342d3234203d3e203632323430.roa
File: 3137382e3231322e33322e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: 611CXcH8mq9Yy3ePhG/8Jcb/X5CS3sVJBKkTOWNJOow=
Subject key identifier: 9A:1B:6B:42:8A:CD:D6:B8:11:23:E8:08:4E:93:F7:F8:29:6F:F8:BE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 43A463BDEF0721626CD7EC7C0FC44D607E254A67
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33322e302f32342d3234203d3e203632323430.roa
Signing time: Fri 23 Oct 2026 16:30:35 +0000
ROA not before: Fri 23 Oct 2026 16:25:35 +0000
ROA not after: Fri 22 Oct 2027 16:30:35 +0000
asID: 62240
IP address blocks: 178.212.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:a4:63:bd:ef:07:21:62:6c:d7:ec:7c:0f:c4:4d:60:7e:25:4a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:35 2026 GMT
Not After : Oct 22 16:30:35 2027 GMT
Subject: CN=9A1B6B428ACDD6B81123E8084E93F7F8296FF8BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:7d:37:ba:b7:4a:11:30:0b:cc:69:88:01:
00:03:b7:0f:35:93:6a:78:52:eb:ed:46:6f:ff:3c:
73:a9:b1:06:cf:29:8d:fe:6b:15:9e:45:12:cd:aa:
7e:2e:a8:8e:9e:fc:03:e5:36:5f:89:c0:72:0e:3d:
b5:bd:de:a2:61:4d:6e:16:be:97:cb:04:23:60:32:
d8:c2:38:6b:59:32:a7:fe:ef:e6:8a:c6:28:74:7a:
3a:d4:39:0d:d4:73:45:06:45:d9:5c:24:4b:a2:3e:
38:8c:b7:e5:d0:06:b8:71:fd:00:8d:90:dd:73:bc:
55:12:2b:40:ea:c4:c8:10:7d:95:7d:bf:09:28:ba:
42:2c:d4:64:ae:53:b3:9a:cc:b8:95:71:03:70:b3:
b4:a6:b3:3c:58:11:70:54:87:18:e4:5a:5a:bf:ef:
8e:05:1f:5c:db:65:b1:11:8b:6d:86:57:a9:0a:89:
b4:f4:46:f4:41:d3:ed:20:9b:78:dd:f2:31:0d:29:
aa:5e:5d:b6:5b:92:b3:3a:15:18:7c:68:d3:8b:f4:
7e:62:ba:b1:fd:54:ee:4d:20:fd:64:5b:65:20:0d:
19:4e:e3:85:87:27:77:96:0e:da:25:4c:c0:7a:ab:
c3:1d:56:00:59:b8:08:dd:ab:df:52:6c:f9:48:44:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1B:6B:42:8A:CD:D6:B8:11:23:E8:08:4E:93:F7:F8:29:6F:F8:BE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33322e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.32.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:4b:6f:43:79:9e:fc:e1:00:ac:20:cf:3e:0a:ac:e8:8b:ff:
0d:c7:4a:ff:8c:19:35:e2:9a:26:05:3f:b0:99:85:a7:7a:a0:
9a:19:32:42:92:8c:cc:37:b5:62:86:f6:8f:d5:c3:08:f3:f0:
e5:5b:c5:3a:2f:27:d3:65:4e:f5:6a:39:54:ec:05:10:a2:00:
c6:cb:17:28:6b:b8:62:83:1d:84:4e:ae:7f:b3:52:5d:d1:5f:
8c:dd:b9:e3:ad:75:4e:80:8d:01:45:c7:9c:01:4e:31:d0:5e:
e7:d1:24:df:f8:21:b2:d0:27:9b:0a:23:cf:a0:59:0b:14:f3:
b3:47:8c:08:ba:08:bb:5c:ab:30:b1:4d:8d:9e:68:f7:b2:21:
e6:9d:fe:c4:8f:72:b6:be:d0:34:86:8d:05:1f:30:aa:20:7e:
f7:a8:05:40:71:81:6b:a5:54:c4:94:bc:b1:79:be:01:7c:99:
0a:07:20:6b:db:f2:dd:40:7c:9c:5a:b3:e4:c5:a0:cd:68:30:
e0:38:84:dd:e4:b0:d5:43:1d:eb:bb:9f:ad:e8:06:42:05:4f:
f4:ea:a7:ad:85:82:ac:cf:e2:c9:db:73:ba:1e:e9:ae:ca:ed:
14:4d:20:e4:fb:dd:62:b7:c9:a5:27:69:24:c2:95:97:0b:b9:
03:16:40:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:47:04 2026 by rpki-client