Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33332e302f32342d3332203d3e20313431393935.roa
File: 3137382e3231322e33332e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: 2+Tz9K3hHDd7HTS5oyfT+SklYUE/PKih8vOum+Plccw=
Subject key identifier: CA:A1:C1:24:D1:6E:CC:AB:F9:74:B8:5A:3F:1B:45:6A:9C:4A:E3:C2
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 13D5408FC82B9B355BCEEC10DF4B2B8D9537F1C4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33332e302f32342d3332203d3e20313431393935.roa
Signing time: Fri 23 Oct 2026 16:30:11 +0000
ROA not before: Fri 23 Oct 2026 16:25:11 +0000
ROA not after: Fri 22 Oct 2027 16:30:11 +0000
asID: 141995
IP address blocks: 178.212.33.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 15:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d5:40:8f:c8:2b:9b:35:5b:ce:ec:10:df:4b:2b:8d:95:37:f1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:11 2026 GMT
Not After : Oct 22 16:30:11 2027 GMT
Subject: CN=CAA1C124D16ECCABF974B85A3F1B456A9C4AE3C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:80:e0:42:9f:43:44:b7:89:53:d6:e6:3f:
08:5d:73:9f:e3:5e:bc:09:e7:4a:8a:00:03:a2:c3:
4c:a5:2d:2d:dc:65:b1:8a:ef:bc:59:1c:ad:be:cb:
a1:f2:7a:9c:c4:d9:7c:11:8b:cf:33:b2:92:70:d7:
2d:5f:37:d8:9f:11:5c:05:58:0f:6a:14:a0:77:cb:
b2:10:9f:e8:7c:0f:41:6c:6a:c2:aa:d1:02:38:f4:
af:65:5f:fe:5c:06:34:58:4d:de:59:31:2d:df:85:
1e:67:0c:55:3b:2d:6e:3b:6d:a3:94:4e:bf:f6:40:
c4:74:59:1d:6d:4e:73:3b:19:a2:61:ca:c6:23:ed:
ba:78:7e:fe:90:27:80:25:6d:c6:05:58:d7:f6:29:
a2:a9:71:e6:01:41:be:ed:84:b5:c0:96:11:42:8a:
df:6f:55:3e:4d:26:f9:7a:10:1e:e9:95:b8:20:2b:
d0:ff:7a:76:25:d7:b3:4c:52:c8:7f:4e:7e:7e:44:
2d:dc:58:19:d8:d2:a7:b6:fe:7b:44:56:67:f8:ef:
61:6a:95:b5:76:65:11:b6:05:a0:85:b5:23:9e:ae:
f0:85:65:07:84:12:8d:39:14:42:5d:9f:92:b7:ed:
d6:bd:1b:c9:96:9d:ea:04:0c:10:b8:fb:bf:28:bb:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A1:C1:24:D1:6E:CC:AB:F9:74:B8:5A:3F:1B:45:6A:9C:4A:E3:C2
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33332e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f3:22:df:71:6e:d5:22:69:dd:1d:ef:56:41:ea:ed:e1:92:
59:9d:65:8d:13:37:08:a0:96:e8:3a:45:9d:ec:4d:ae:b0:64:
5f:05:02:84:b5:2a:80:8a:8e:32:49:7c:60:8c:3f:d4:93:f3:
56:84:52:fc:c0:49:92:96:31:00:1d:95:da:c5:04:0f:35:09:
21:0e:20:83:9b:1c:67:c2:4f:29:a7:26:8d:78:b0:49:fb:64:
12:17:66:9b:86:8b:16:3e:07:f6:21:d1:59:38:3c:9d:b2:89:
be:5b:f6:f3:72:12:c6:c5:90:1f:22:2d:22:37:ef:f9:28:af:
7c:1b:a9:10:05:19:79:07:a2:3e:31:f3:da:aa:40:0e:cb:ec:
ba:84:7c:51:46:e8:b7:06:d8:fb:04:5e:e0:59:a5:2b:db:19:
dc:62:68:cd:ae:d7:85:f2:46:1e:2b:53:dc:60:60:5d:ae:0b:
02:26:32:01:a0:e3:d7:c0:1b:47:cf:e4:e0:85:11:d8:f5:65:
e8:a2:b7:5e:97:4c:60:53:64:40:88:a9:37:de:e4:9a:e6:f5:
e8:f6:64:f7:3a:77:44:b6:8a:89:4b:51:99:8f:c3:9b:ee:15:
28:66:29:10:97:d1:92:bc:d5:47:64:77:a2:a9:1b:e2:8f:9c:
42:d6:f6:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:47:40 2026 by rpki-client