Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e322e302f32342d3332203d3e20323136313531.roa
File: 3138352e3136392e322e302f32342d3332203d3e20323136313531.roa (raw, json)
Hash identifier: BQwnJctqT9S9n0Ke7EF0XROvFVqeVf14It4dzPz4WCs=
Subject key identifier: 85:CB:0B:E1:BA:49:2C:ED:CB:A0:8C:A9:A2:36:35:E8:A9:51:C6:B3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7440E56C6D41449EEE81FADF828BC65718FFB62B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e322e302f32342d3332203d3e20323136313531.roa
Signing time: Tue 20 Oct 2026 07:51:31 +0000
ROA not before: Tue 20 Oct 2026 07:46:31 +0000
ROA not after: Tue 19 Oct 2027 07:51:31 +0000
asID: 216151
IP address blocks: 185.169.2.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:40:e5:6c:6d:41:44:9e:ee:81:fa:df:82:8b:c6:57:18:ff:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 20 07:46:31 2026 GMT
Not After : Oct 19 07:51:31 2027 GMT
Subject: CN=85CB0BE1BA492CEDCBA08CA9A23635E8A951C6B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1a:be:f5:5f:ee:20:20:65:55:9e:0e:46:d9:
a4:41:40:7c:95:ca:cf:83:de:5b:2e:e0:3c:d4:1d:
05:15:08:0c:f5:1d:70:41:cb:47:74:00:3b:e2:f3:
dc:26:4a:46:f6:df:20:f2:c3:54:c8:32:3f:be:d4:
6f:cd:dd:13:38:5f:4e:2f:2c:c6:74:36:90:13:3f:
db:d6:5e:de:e8:5e:0d:34:9c:a6:d8:70:7d:33:f8:
b1:93:7d:15:f9:04:c0:48:8d:dc:4a:c7:a5:4b:97:
a1:7a:93:c3:69:86:de:4d:1c:ee:5b:9f:d8:9f:b1:
c6:76:55:ef:44:6b:51:a9:c7:73:0a:fe:31:a3:39:
a0:6c:25:96:6c:21:03:8a:5c:36:54:59:aa:3e:bd:
29:00:c1:ae:c5:88:45:ab:46:5a:b6:35:04:dc:31:
73:8e:bc:16:46:27:c0:7d:47:fa:2d:99:1d:08:0f:
0c:28:96:ff:f9:46:d2:fe:43:1c:a7:40:15:d4:cd:
c4:fd:50:aa:8f:f5:2e:da:c9:2c:b4:77:02:d1:1a:
fb:e5:b9:5c:ff:e1:c3:20:34:4d:28:f9:0f:2e:f9:
8e:cf:f8:fd:5d:50:92:3c:af:bc:5c:41:14:18:e9:
9e:fb:c5:0f:ed:ac:85:0c:54:28:4f:f9:0c:69:99:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CB:0B:E1:BA:49:2C:ED:CB:A0:8C:A9:A2:36:35:E8:A9:51:C6:B3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e322e302f32342d3332203d3e20323136313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.2.0/24
Signature Algorithm: sha256WithRSAEncryption
72:68:50:7a:16:b5:25:7c:ac:2b:e8:8d:6b:61:57:7a:29:43:
8d:12:0d:33:7e:d0:9c:16:b3:5a:ae:5c:ea:ff:f1:ab:cb:3f:
61:6f:6d:ef:eb:a2:42:50:26:09:b4:55:01:cb:91:99:e2:f9:
96:d8:73:88:89:8c:4e:6a:3c:ac:5f:fe:00:b6:39:b5:a3:5c:
e5:e4:81:3a:22:20:20:34:dd:34:8d:fc:1b:b1:5d:6c:2e:5b:
65:0d:96:2f:e2:a8:1b:2c:41:f0:ff:84:56:a8:c6:d5:1a:27:
b6:4f:f4:7a:70:73:b2:29:fd:e5:c7:83:9b:62:c5:ca:88:44:
31:81:b5:5e:c8:6e:28:56:f0:45:0a:f4:3f:f6:47:c6:d0:24:
c2:bf:70:d4:e6:e8:55:a2:32:28:8c:d5:b1:74:a6:e7:3e:b4:
4b:78:ac:f8:2d:91:b0:00:21:a6:92:bf:50:c5:35:5d:a0:32:
eb:6c:5d:03:4a:a7:2f:c1:d4:64:1f:d6:32:04:e8:58:28:fd:
e6:38:d0:14:05:ce:f4:c2:2a:f3:41:61:90:7d:2a:d3:2e:ee:
70:24:30:79:2e:1f:76:f1:81:29:f1:d6:df:fc:b5:7f:28:b8:
a3:9b:a7:ed:5e:6f:3d:a4:16:81:e6:43:cd:8f:f2:7a:d4:59:
97:52:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:10:28 2026 by rpki-client