Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e20383334.roa
File: 3138352e3139332e31362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PvGwojyqyPHpMWWXbL2LUy6wHrJT8AyiyUuAqyYdSNk=
Subject key identifier: 34:3A:B7:5B:1A:07:DE:85:C6:00:14:69:A5:8C:C9:34:17:3C:61:52
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1F9F899D1BA7DEB670C0D9C59B9C89CCF111AF6C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e20383334.roa
Signing time: Sat 14 Nov 2026 18:40:35 +0000
ROA not before: Sat 14 Nov 2026 18:35:35 +0000
ROA not after: Sat 13 Nov 2027 18:40:35 +0000
asID: 834
IP address blocks: 185.193.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:9f:89:9d:1b:a7:de:b6:70:c0:d9:c5:9b:9c:89:cc:f1:11:af:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 14 18:35:35 2026 GMT
Not After : Nov 13 18:40:35 2027 GMT
Subject: CN=343AB75B1A07DE85C6001469A58CC934173C6152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:c7:6f:35:2f:91:a6:2f:b4:fd:f3:85:4c:
2c:e5:fa:60:e8:dd:66:89:ed:97:fa:04:26:15:12:
65:d7:2b:5b:8e:23:27:b2:21:17:53:c0:b1:a2:2f:
b8:54:ad:e5:13:05:ff:c1:63:75:a3:74:a6:91:c5:
fc:3a:53:5a:e3:64:41:1f:c7:c5:cf:38:2c:64:ab:
bb:71:33:25:b3:97:53:07:68:4a:f2:9e:c4:29:db:
0d:6d:56:9f:95:06:9c:6a:b1:a5:5a:d9:6b:a8:52:
2f:60:34:9d:fe:29:b0:15:7b:4c:fc:8b:92:8b:02:
a3:aa:fd:ab:1c:3a:51:95:a4:32:40:29:79:42:b8:
87:82:b5:b0:ec:79:42:39:56:6d:35:dc:a0:d9:cf:
56:cd:91:7f:26:88:2b:e9:84:8a:c7:75:d9:0c:34:
80:43:31:25:22:4b:ae:8e:f0:72:24:11:1b:78:4c:
43:04:69:08:fd:42:30:42:3f:fb:5b:30:92:21:7f:
8b:f0:9c:ce:09:0b:26:f9:aa:dc:e0:38:10:b1:e8:
99:65:24:ed:62:36:36:1e:9f:96:cd:6b:f7:a0:79:
fb:39:33:6a:9d:41:02:b7:de:be:ac:21:1b:68:64:
fd:38:20:58:a1:86:47:b8:a8:bd:16:6f:25:b4:27:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3A:B7:5B:1A:07:DE:85:C6:00:14:69:A5:8C:C9:34:17:3C:61:52
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.16.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:0e:00:f1:c8:e0:3d:a6:b1:da:60:5c:a0:e4:4a:93:cf:16:
e1:49:ac:4c:5b:94:72:e5:4f:55:21:cd:0a:bc:37:de:c5:17:
02:bc:1d:f2:25:3b:01:5a:66:25:d2:6a:1e:e4:e5:4b:a7:23:
1b:e7:fb:66:74:ea:c7:f1:6e:e2:ce:41:c0:d3:52:5d:93:43:
08:86:b6:5b:85:35:3d:4d:f8:25:56:2d:66:2a:c6:7f:92:15:
40:69:69:9c:9f:35:a1:8b:b4:dd:58:40:fc:1f:24:c1:af:23:
78:b1:b0:f8:41:56:5f:5c:2e:86:c3:80:7f:e7:f8:76:4a:61:
72:4e:dc:18:7d:99:d7:66:61:7e:70:c2:3c:cc:29:b2:2c:e5:
9f:f3:1d:ac:75:b8:1c:36:95:96:fa:07:e3:ec:28:e2:ce:64:
52:ee:16:d8:49:f0:24:62:27:55:c2:63:e4:1c:2a:17:bd:ad:
2b:f8:5d:44:b0:ab:61:9c:69:32:ab:e2:21:1f:f9:ff:ff:b0:
56:19:3f:b3:39:06:f2:10:9c:a0:7d:48:c0:05:0d:c2:dc:b3:
7d:71:ca:09:45:a3:a0:25:83:11:81:df:5c:e9:2a:89:b0:47:
b7:72:a1:4a:07:c0:19:25:83:8a:a0:90:f9:89:f7:42:72:29:
f7:1b:31:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:05:26 2026 by rpki-client