Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e203235333639.roa
File: 3138352e3139332e31362e302f32342d3234203d3e203235333639.roa (raw, json)
Hash identifier: DPViUQ6Dj7wHflKYmbM11AkOLziWi/4jW+aQJB7xHlU=
Subject key identifier: 0D:25:74:1D:5B:2B:2E:54:0A:8B:5D:A6:2D:E7:D6:A3:34:86:8C:17
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 708B3C08CED4D5E51A35C7A7D6ECB2475F53D7
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e203235333639.roa
Signing time: Wed 12 Aug 2026 20:58:26 +0000
ROA not before: Wed 12 Aug 2026 20:53:26 +0000
ROA not after: Wed 11 Aug 2027 20:58:26 +0000
asID: 25369
IP address blocks: 185.193.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8b:3c:08:ce:d4:d5:e5:1a:35:c7:a7:d6:ec:b2:47:5f:53:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Aug 12 20:53:26 2026 GMT
Not After : Aug 11 20:58:26 2027 GMT
Subject: CN=0D25741D5B2B2E540A8B5DA62DE7D6A334868C17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:bc:f9:1f:0a:a7:9f:aa:84:72:33:ba:ce:
4b:36:b3:fb:b8:5a:9e:3b:a4:6c:44:ae:15:14:85:
b8:a7:84:a3:45:ca:e0:e7:82:c1:3c:74:9e:03:df:
61:a9:0a:fd:1a:a8:fa:0d:8c:ac:22:9b:d6:20:4e:
95:6d:5a:77:05:9d:5d:00:c6:5e:c0:c8:7f:4d:b3:
0d:ba:3f:43:dd:22:32:7b:6a:27:9b:d9:20:72:a5:
93:7b:cd:22:4e:e2:2f:50:47:c1:a0:4f:af:a1:13:
f8:a0:31:19:25:ae:58:2a:b1:32:5e:0c:d3:9e:1d:
4b:8b:44:da:44:a1:ec:af:6c:93:62:3a:1a:fa:73:
3a:b3:49:d0:93:c3:16:71:5c:7c:36:85:da:da:d0:
5b:cf:97:7f:b1:dd:11:89:68:53:97:de:9b:77:36:
6b:c4:39:e6:10:63:59:53:18:0f:98:51:11:ef:f0:
5f:72:df:92:c3:e9:f1:a7:7e:a9:18:c8:71:c4:0a:
4b:af:1f:8d:96:56:a9:b2:ec:0e:92:77:7b:f4:27:
19:5e:6c:b6:6d:01:08:eb:07:70:fe:42:f3:0b:87:
59:0e:fc:55:bd:e9:5a:84:5e:83:c9:f3:3a:20:fa:
30:7a:e0:6c:f6:89:fe:31:89:ac:18:10:48:4d:65:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:74:1D:5B:2B:2E:54:0A:8B:5D:A6:2D:E7:D6:A3:34:86:8C:17
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e203235333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.16.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e9:bf:02:8c:bc:6c:77:46:2a:bd:e4:1d:63:65:fc:d0:11:
22:c4:bd:af:cb:23:40:c1:44:b8:08:ca:d5:37:d6:58:8b:41:
a0:25:f8:e1:31:37:e4:a3:df:aa:ee:a7:72:94:c7:ab:3c:a4:
f7:9a:d1:76:26:ea:56:60:46:f5:b3:a5:55:d0:de:bb:5b:9e:
8f:14:4a:97:41:54:81:58:26:72:52:31:bb:c1:8d:f6:a0:c6:
50:86:55:e1:26:99:cc:44:3e:e8:7e:90:e4:7f:b9:2d:13:32:
fd:d4:ba:49:2b:69:99:34:05:e0:67:98:22:6b:df:c1:6c:0d:
59:99:a5:49:41:c0:cf:3f:df:b6:90:ad:2b:1b:ec:bc:91:f1:
c2:72:c0:da:bb:7c:1c:99:29:fd:8f:78:07:53:b5:9c:b7:ce:
10:6a:62:f3:3b:e1:31:5b:3d:5c:4f:7a:4a:3a:76:b1:b9:55:
df:59:76:fd:c1:d7:5b:62:d1:cb:bb:86:5d:81:5a:11:03:7f:
f4:36:3b:b2:d0:f5:fc:12:de:f7:df:c1:92:27:20:6c:9c:cd:
cb:6b:59:df:57:26:db:da:e8:0e:56:a3:6c:83:0e:c4:af:ff:
52:c8:50:df:f5:2b:09:fc:2d:52:1d:aa:8b:65:c2:d2:f0:f5:
a9:57:f4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 06:16:26 2026 by rpki-client