Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137342e3235322e302f32322d3232203d3e203432333636.roa
File: 3138352e3137342e3235322e302f32322d3232203d3e203432333636.roa (raw, json)
Hash identifier: W8YSfZoS7WxcIo4PT3b64l2eEoBKtIThmYX4pi9+2mY=
Subject key identifier: 60:03:9F:B3:CD:7C:FA:3C:F9:86:03:23:CE:BF:AB:AF:54:E2:10:C7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 36AB5E05D4D06723F5FE5AF1538D72DCB09AD6CE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137342e3235322e302f32322d3232203d3e203432333636.roa
Signing time: Fri 17 Jul 2026 16:26:20 +0000
ROA not before: Fri 17 Jul 2026 16:21:20 +0000
ROA not after: Fri 16 Jul 2027 16:26:20 +0000
asID: 42366
IP address blocks: 185.174.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ab:5e:05:d4:d0:67:23:f5:fe:5a:f1:53:8d:72:dc:b0:9a:d6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 17 16:21:20 2026 GMT
Not After : Jul 16 16:26:20 2027 GMT
Subject: CN=60039FB3CD7CFA3CF9860323CEBFABAF54E210C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:2e:db:49:1a:75:59:f6:76:44:01:d4:7f:
57:51:8f:2f:1c:a1:d6:95:f9:63:5d:10:8a:5e:00:
67:66:6b:50:98:f3:80:ba:17:e4:2d:07:83:31:b8:
32:ae:d0:3f:05:fa:55:16:0b:7e:f8:28:2a:4f:52:
7a:f8:f8:55:00:d1:58:60:24:5a:14:7e:23:e4:86:
04:04:25:a5:d7:67:74:6e:5f:b2:d3:12:b7:a9:8b:
c5:a6:b7:9a:8f:18:f4:c4:a7:5d:57:12:5f:37:53:
5c:7e:27:b5:f9:03:86:b4:90:3b:f0:a8:1d:00:23:
97:94:f4:2d:53:1d:28:fd:9b:c1:b9:f1:16:e9:dd:
50:51:6e:33:22:cc:20:02:5e:11:a2:13:c1:b1:83:
86:76:a3:8a:e0:e7:e5:bc:4e:27:79:fb:d0:e2:47:
74:f7:22:10:82:0a:4c:1f:cf:41:48:36:3d:03:36:
49:48:65:f2:e1:1f:4e:c6:53:be:6d:04:12:20:6f:
b7:b0:66:2d:f8:9d:38:2b:d6:9e:1e:ec:3f:e1:90:
3d:cf:31:50:d1:ff:4e:9f:b3:8a:dd:c6:c5:9b:89:
4c:06:88:9f:31:16:84:56:26:5d:95:4d:78:61:30:
2e:31:c7:1e:47:47:41:37:16:4b:4f:6f:17:ba:45:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:03:9F:B3:CD:7C:FA:3C:F9:86:03:23:CE:BF:AB:AF:54:E2:10:C7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137342e3235322e302f32322d3232203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:91:cd:0f:c6:18:65:15:8d:4c:c0:07:3a:06:a3:58:d8:0d:
6f:93:47:d5:0e:14:03:a5:28:11:87:16:f5:5e:97:40:94:38:
d2:fd:1b:cf:9d:53:4e:4b:ca:37:7b:0d:39:f0:f2:7d:92:b3:
d0:d8:ce:c8:57:8d:cd:b9:9a:91:e5:cd:96:6c:df:8f:5f:a3:
9d:7b:57:d2:57:2a:14:74:d8:14:09:67:db:06:4a:fb:8c:83:
71:e9:df:f5:87:bf:46:3f:ce:bd:d2:d2:0e:27:17:4b:e7:11:
52:b5:1d:d1:6b:15:fe:7d:34:af:af:21:75:a9:c4:38:2d:8d:
40:35:89:a2:71:9f:7c:21:f6:5b:7c:f4:88:3a:a4:73:5a:18:
cf:23:3a:bd:89:47:20:4e:2e:6e:9d:c4:dd:fb:9a:fc:03:95:
03:81:86:18:75:d4:08:47:15:66:09:b5:9e:73:63:27:48:8b:
69:bc:06:ad:47:dc:bd:3e:6a:6f:2d:fd:2a:bb:fa:17:fe:d0:
80:ae:31:6f:b0:13:b4:90:b7:2c:ea:01:ad:15:17:e4:82:d9:
8d:7b:9b:09:7d:e3:2d:23:80:23:c6:c4:3d:74:bf:ad:7f:c8:
34:ea:02:d9:14:56:bb:14:de:8d:db:9b:36:89:bf:f2:6a:f9:
de:b6:e7:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:11:27 2026 by rpki-client