Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33352e302f32342d3332203d3e20313431393935.roa
File: 3137382e3231322e33352e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: qXA6GDpSzOui0E0kT6DFAJQ3QHKAwk/vYCGQILo6jDU=
Subject key identifier: A9:93:7B:17:49:71:EA:49:18:16:CB:06:DF:73:0D:95:BB:18:92:0C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6CF07A0D384D2253EA643F5D9F6E75252495B27D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33352e302f32342d3332203d3e20313431393935.roa
Signing time: Fri 23 Oct 2026 16:30:31 +0000
ROA not before: Fri 23 Oct 2026 16:25:31 +0000
ROA not after: Fri 22 Oct 2027 16:30:31 +0000
asID: 141995
IP address blocks: 178.212.35.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 11:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:f0:7a:0d:38:4d:22:53:ea:64:3f:5d:9f:6e:75:25:24:95:b2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:31 2026 GMT
Not After : Oct 22 16:30:31 2027 GMT
Subject: CN=A9937B174971EA491816CB06DF730D95BB18920C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:35:ca:14:1c:3d:f3:34:37:58:18:1a:13:
ca:8f:71:5e:fc:56:84:d1:b0:3c:b5:54:9d:e5:1e:
71:d9:bb:7c:27:09:85:53:21:f3:97:c4:75:86:43:
92:36:5f:b8:3a:d1:74:bc:3a:55:e1:22:1b:37:2c:
ab:41:44:6f:8f:a0:7c:7c:a3:0a:9c:f6:54:0b:0c:
c7:45:0a:b7:c6:64:d4:40:7d:c3:d4:c1:74:dd:92:
b8:3c:b7:4b:5a:1b:ff:f4:f3:28:5b:c4:cd:2e:06:
62:dc:a3:fe:aa:10:1c:04:78:25:4e:fc:5b:3c:0e:
e3:87:23:d3:1b:73:d7:8c:0c:cd:6a:58:a9:d1:59:
b8:10:1c:0b:d2:06:de:10:72:b3:93:7c:8f:81:aa:
76:0d:48:f6:3e:1f:fd:ef:d8:52:aa:3a:a3:ab:8f:
6d:61:2a:a0:b3:56:a4:f5:60:3c:0e:1c:2f:f4:f4:
0f:a7:71:64:7f:e6:a4:68:4e:2c:d3:4b:a3:37:5b:
a1:81:6c:89:73:0c:bf:ec:cf:fc:50:db:82:15:14:
46:43:61:0c:a6:03:c5:54:6d:fa:f3:58:a3:f4:44:
b8:ed:f1:4f:3b:ed:b7:3e:4c:b4:75:81:f6:43:26:
4a:d7:0a:3c:3d:29:1c:27:ba:34:ff:db:3c:d8:b5:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:7B:17:49:71:EA:49:18:16:CB:06:DF:73:0D:95:BB:18:92:0C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33352e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.35.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e2:b9:60:fb:e0:90:04:23:2f:a8:3a:4a:e2:19:07:b4:c2:
83:13:ed:e0:c4:04:77:0f:76:f0:be:74:22:0c:ba:6f:f8:7a:
56:4c:38:24:20:f7:da:c1:72:97:34:a1:12:fc:0d:2b:b9:0a:
b7:c5:b9:db:29:a1:27:d7:0e:3a:9a:04:f7:3b:ea:21:83:84:
27:7a:ff:fb:16:cf:d4:e7:c2:8a:8a:0c:33:92:ee:7d:d4:c0:
3d:aa:11:02:ec:84:25:4e:02:12:3e:69:2f:1f:6a:f4:e2:3c:
90:c4:ea:97:2e:91:6f:19:05:54:4b:68:af:24:ad:e0:31:c3:
c2:c3:1a:d4:63:e5:e7:62:68:f0:9f:a0:98:c0:06:1d:5e:d2:
6d:5c:bb:e1:08:bb:37:4c:d1:a5:bd:72:e6:3a:e5:28:ef:eb:
1f:39:0f:13:1d:99:9a:3c:eb:ad:50:0d:9a:08:c1:17:64:91:
ea:93:8b:76:18:ef:93:be:c0:07:55:71:91:4d:01:72:0d:df:
35:8b:78:7a:0e:39:72:ca:c6:07:9f:63:3b:f0:97:43:75:65:
ce:ac:f9:8d:66:5a:5d:11:9b:16:70:63:14:2b:c5:86:9d:1a:
0c:1f:a1:9a:0e:12:b7:e1:0c:09:53:0d:e1:9f:b9:35:67:45:
d0:c2:cc:05
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUbPB6DThNIlPqZD9dn251JSSVsn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MzFaFw0yNzEwMjIxNjMwMzFaMDMxMTAvBgNV
BAMTKEE5OTM3QjE3NDk3MUVBNDkxODE2Q0IwNkRGNzMwRDk1QkIxODkyMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWzXKFBw98zQ3WBgaE8qPcV78
VoTRsDy1VJ3lHnHZu3wnCYVTIfOXxHWGQ5I2X7g60XS8OlXhIhs3LKtBRG+PoHx8
owqc9lQLDMdFCrfGZNRAfcPUwXTdkrg8t0taG//08yhbxM0uBmLco/6qEBwEeCVO
/Fs8DuOHI9Mbc9eMDM1qWKnRWbgQHAvSBt4QcrOTfI+BqnYNSPY+H/3v2FKqOqOr
j21hKqCzVqT1YDwOHC/09A+ncWR/5qRoTizTS6M3W6GBbIlzDL/sz/xQ24IVFEZD
YQymA8VUbfrzWKP0RLjt8U877bc+TLR1gfZDJkrXCjw9KRwnujT/2zzYtW1BAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUqZN7F0lx6kkYFssG33MNlbsYkgwwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzgyZTMyMzEz
MjJlMzMzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMTM5MzkzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEALLUIzANBgkqhkiG9w0BAQsFAAOCAQEAM+K5YPvgkAQjL6g6SuIZB7TC
gxPt4MQEdw928L50Igy6b/h6Vkw4JCD32sFylzShEvwNK7kKt8W52ymhJ9cOOpoE
9zvqIYOEJ3r/+xbP1OfCiooMM5LufdTAPaoRAuyEJU4CEj5pLx9q9OI8kMTqly6R
bxkFVEtorySt4DHDwsMa1GPl52Jo8J+gmMAGHV7SbVy74Qi7N0zRpb1y5jrlKO/r
HzkPEx2ZmjzrrVANmgjBF2SR6pOLdhjvk77AB1VxkU0Bcg3fNYt4eg45csrGB59j
O/CXQ3Vlzqz5jWZaXRGbFnBjFCvFhp0aDB+hmg4St+EMCVMN4Z+5NWdF0MLMBQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 22:22:42 2026 by rpki-client