Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31372e302f32342d3332203d3e203531313637.roa
File: 3138352e3139332e31372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: StQE+k7+yrYoe+wdO3A9ETOWww/PM7wtDXPS6jcJa5E=
Subject key identifier: A8:77:6B:28:E8:FB:66:DF:7D:6A:8D:AF:F3:74:5E:F2:0B:C1:F4:03
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4586F4196A24149B23EDA4EDBBE3A0224FB9C720
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31372e302f32342d3332203d3e203531313637.roa
Signing time: Fri 23 Oct 2026 16:30:38 +0000
ROA not before: Fri 23 Oct 2026 16:25:38 +0000
ROA not after: Fri 22 Oct 2027 16:30:38 +0000
asID: 51167
IP address blocks: 185.193.17.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 07:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:86:f4:19:6a:24:14:9b:23:ed:a4:ed:bb:e3:a0:22:4f:b9:c7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:38 2026 GMT
Not After : Oct 22 16:30:38 2027 GMT
Subject: CN=A8776B28E8FB66DF7D6A8DAFF3745EF20BC1F403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:cb:ee:13:d2:7e:1b:a4:26:8d:35:2e:8d:
0b:d1:95:31:97:c6:ba:4f:50:14:ee:f3:4f:6e:d8:
4b:7d:36:0f:a0:96:b3:45:ae:2c:d7:03:ba:77:a2:
ad:35:f8:0d:66:72:c3:82:ff:b2:1b:7e:32:0e:cc:
bd:45:54:86:ca:46:fe:89:c6:52:9e:24:23:fc:8e:
df:d3:50:74:fa:4b:fa:c9:67:9b:04:a1:33:f6:1d:
ad:2a:8c:5a:1e:60:bc:11:99:9e:5a:63:2d:f1:a8:
4a:23:39:8d:51:28:1e:11:6d:71:07:2d:9a:52:6c:
90:18:10:49:a9:42:6c:28:05:18:2b:91:f5:22:3b:
59:82:ed:7d:37:45:87:c7:9e:28:eb:1e:25:01:19:
85:a3:63:ba:97:66:bf:b6:47:c3:6a:e0:27:65:07:
d3:d8:83:5f:4f:7e:89:b5:00:70:d4:1d:9f:2b:00:
4e:1c:c3:64:d2:fa:c4:26:d9:33:de:1a:a3:65:53:
f8:98:32:7f:57:5c:a6:23:fb:84:3f:1e:65:ea:50:
61:42:81:46:11:a5:bb:5c:29:c5:25:d0:89:74:1b:
ca:ac:84:e6:b6:7d:98:2f:0f:13:2f:89:7c:27:a7:
a6:35:af:83:20:38:80:de:dc:5d:6b:e9:7d:c8:d6:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:77:6B:28:E8:FB:66:DF:7D:6A:8D:AF:F3:74:5E:F2:0B:C1:F4:03
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31372e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.17.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:18:21:ee:e4:73:1a:ae:d3:8c:4f:28:4b:b2:61:71:a7:9b:
6b:00:fd:3d:00:e3:7a:16:32:f2:18:71:35:81:b8:f9:ea:75:
67:32:a8:19:fd:da:85:72:a4:19:2c:80:ad:94:5c:e5:21:64:
4f:77:13:4c:25:29:bd:19:68:15:3a:fd:63:5a:6e:ee:b6:33:
7d:f5:9d:c5:ec:e4:4f:7d:36:46:c6:0d:99:41:86:a8:83:11:
78:74:de:c1:dd:b9:2a:3e:2d:01:b2:ac:cd:0a:10:2d:30:08:
a7:b3:40:63:d9:76:48:b9:42:ef:fb:f0:43:12:e3:ba:6f:2c:
75:95:d0:fc:ec:0a:73:a1:1c:5c:8e:ca:e5:ad:a6:eb:7c:0c:
06:91:83:90:a4:70:05:c0:f7:9b:9a:48:e9:0a:97:55:55:6d:
bd:f6:d5:bc:3f:86:8a:70:e4:68:ca:dc:74:09:c0:64:ab:98:
1d:f2:f7:8b:08:58:96:0b:42:9a:f7:b5:08:2e:4a:4b:41:bd:
5e:dc:28:c6:aa:72:e8:41:6f:a5:fe:35:72:da:42:ef:de:e8:
0f:1a:e7:a7:c0:fd:5d:d8:92:01:ac:59:34:b5:67:c0:ea:82:
ea:3b:43:0c:96:52:21:24:e5:c6:88:9f:0f:39:59:a6:46:a5:
3f:0a:32:53
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIURYb0GWokFJsj7aTtu+OgIk+5xyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MzhaFw0yNzEwMjIxNjMwMzhaMDMxMTAvBgNV
BAMTKEE4Nzc2QjI4RThGQjY2REY3RDZBOERBRkYzNzQ1RUYyMEJDMUY0MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/MMvuE9J+G6QmjTUujQvRlTGX
xrpPUBTu809u2Et9Ng+glrNFrizXA7p3oq01+A1mcsOC/7IbfjIOzL1FVIbKRv6J
xlKeJCP8jt/TUHT6S/rJZ5sEoTP2Ha0qjFoeYLwRmZ5aYy3xqEojOY1RKB4RbXEH
LZpSbJAYEEmpQmwoBRgrkfUiO1mC7X03RYfHnijrHiUBGYWjY7qXZr+2R8Nq4Cdl
B9PYg19Pfom1AHDUHZ8rAE4cw2TS+sQm2TPeGqNlU/iYMn9XXKYj+4Q/HmXqUGFC
gUYRpbtcKcUl0Il0G8qshOa2fZgvDxMviXwnp6Y1r4MgOIDe3F1r6X3I1gMrAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUqHdrKOj7Zt99ao2v83Re8gvB9AMwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzkz
MzJlMzEzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC5wREwDQYJKoZIhvcNAQELBQADggEBACwYIe7kcxqu04xPKEuyYXGnm2sA
/T0A43oWMvIYcTWBuPnqdWcyqBn92oVypBksgK2UXOUhZE93E0wlKb0ZaBU6/WNa
bu62M331ncXs5E99NkbGDZlBhqiDEXh03sHduSo+LQGyrM0KEC0wCKezQGPZdki5
Qu/78EMS47pvLHWV0PzsCnOhHFyOyuWtput8DAaRg5CkcAXA95uaSOkKl1VVbb32
1bw/hopw5GjK3HQJwGSrmB3y94sIWJYLQpr3tQguSktBvV7cKMaqcuhBb6X+NXLa
Qu/e6A8a56fA/V3YkgGsWTS1Z8Dqguo7QwyWUiEk5caInw85WaZGpT8KMlM=
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:11:56 2026 by rpki-client