Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e20313939353530.roa
File: 3138352e3139332e31362e302f32342d3234203d3e20313939353530.roa (raw, json)
Hash identifier: acW51xTtYtOt5ZL6JfWNgT6h0HV+gAw5mBhFjU+SywQ=
Subject key identifier: D1:6C:08:A0:51:EB:2A:B3:42:78:13:0A:DD:18:D5:0C:86:FB:11:21
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 06C9263708E22BC989F6145A6E1671C6A2662747
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e20313939353530.roa
Signing time: Tue 13 Oct 2026 20:11:38 +0000
ROA not before: Tue 13 Oct 2026 20:06:38 +0000
ROA not after: Tue 12 Oct 2027 20:11:38 +0000
asID: 199550
IP address blocks: 185.193.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c9:26:37:08:e2:2b:c9:89:f6:14:5a:6e:16:71:c6:a2:66:27:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 13 20:06:38 2026 GMT
Not After : Oct 12 20:11:38 2027 GMT
Subject: CN=D16C08A051EB2AB34278130ADD18D50C86FB1121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:cc:5a:c1:ad:38:b4:34:b5:1d:60:cf:cb:
27:d8:e2:3a:22:c9:50:fd:97:83:f9:1e:8b:00:57:
4b:70:ec:da:37:36:54:4d:f9:63:bf:21:e0:f0:0e:
2d:c7:a2:8e:76:e2:58:ac:1e:5a:33:b7:32:60:15:
f3:ec:2c:86:02:92:1c:03:1a:e3:d6:a1:a9:72:d1:
4a:62:8c:fa:ec:ed:cb:d0:b0:f7:a9:cc:35:da:7b:
bc:04:36:52:09:80:b2:ed:7b:33:c3:8a:f0:75:a8:
08:48:05:be:d7:dd:e7:b4:b5:c7:e4:c6:6b:c6:ec:
db:9f:a7:21:3e:83:9c:b5:e0:54:6b:e9:44:2e:26:
ce:de:6a:e0:db:c0:74:5c:24:c9:7e:7f:f8:d6:39:
a1:55:ec:a2:3f:07:fd:a6:52:de:18:78:a8:cc:2b:
e7:7d:ba:c7:d3:e6:9f:d5:01:bc:36:8c:fb:78:04:
cc:e3:3c:57:b1:1b:67:a1:f3:2b:d4:8f:18:99:9e:
7e:60:92:23:3a:af:97:b2:17:b1:64:1d:9f:37:44:
22:d6:bd:71:96:af:c6:a2:97:d5:7d:7c:c4:d2:89:
a2:d3:28:61:cb:61:4b:da:c0:da:c1:4d:92:63:5a:
25:10:bb:78:03:aa:2e:8b:c3:70:a2:a0:6a:48:39:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6C:08:A0:51:EB:2A:B3:42:78:13:0A:DD:18:D5:0C:86:FB:11:21
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e20313939353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.16.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c6:9d:e5:ba:64:eb:1d:a6:46:0a:86:65:d1:b8:db:a7:0f:
4b:ad:85:42:e0:9f:0a:02:2f:a1:52:a0:02:4d:85:51:c8:94:
7d:ee:77:e3:db:40:83:df:7f:20:d2:37:5c:ef:44:d7:07:23:
50:2b:bd:1e:d3:6a:2e:5e:7f:d8:0e:01:d0:dc:f3:0e:70:7b:
6d:03:4f:20:e3:10:0c:e2:32:40:dd:3d:98:d4:1c:53:8f:7a:
14:bb:db:0d:f9:aa:0f:8d:a1:39:c3:6b:d4:fe:0f:f6:15:7c:
df:40:24:21:73:10:39:21:3d:77:60:79:40:56:e4:8c:c1:ac:
e2:88:2d:fd:4b:0f:a6:31:fb:e2:02:3f:f9:75:5e:fb:75:68:
41:51:12:f3:3d:7c:bc:c0:5a:48:b6:5f:df:4c:8f:7d:76:fa:
68:f3:8b:2f:ee:7f:83:9d:b8:98:03:0b:d4:f4:95:1b:bf:24:
de:47:6e:6a:93:ca:6b:32:62:a3:42:1f:3c:27:aa:94:41:2a:
6d:69:0c:8d:35:0a:10:27:85:6b:d8:c5:4d:70:93:3c:15:6b:
e0:aa:1f:ed:d9:c5:f6:b2:64:ee:b0:ad:16:23:7f:9e:3a:c2:
33:ae:49:03:f7:2b:2d:cc:eb:52:02:1e:97:4c:64:90:e3:a1:
e2:6e:ed:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:27:36 2026 by rpki-client