Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31382e302f32342d3234203d3e20313336373837.roa
File: 3138352e3139332e31382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: aY6ItPU1uEaXc9iq7gX+C+CJ2SphOPvacGDATRPOB2A=
Subject key identifier: 9C:F8:24:61:85:83:06:79:0B:1C:5B:A4:A1:79:A9:D2:EF:1B:87:96
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 49E7B2332B84A3EE400742F897EBBD7D49A30BAD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:19 +0000
ROA not before: Fri 23 Oct 2026 16:25:19 +0000
ROA not after: Fri 22 Oct 2027 16:30:19 +0000
asID: 136787
IP address blocks: 185.193.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e7:b2:33:2b:84:a3:ee:40:07:42:f8:97:eb:bd:7d:49:a3:0b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:19 2026 GMT
Not After : Oct 22 16:30:19 2027 GMT
Subject: CN=9CF82461858306790B1C5BA4A179A9D2EF1B8796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:0c:a7:6f:44:23:e0:fa:62:6b:ac:70:be:
99:78:03:c1:cb:91:70:28:57:58:56:9c:a2:94:e6:
39:69:fb:2c:b2:b1:be:bc:cd:be:63:ae:7a:96:6f:
ec:8b:e6:b4:df:5f:ac:76:a1:94:50:f6:3c:2c:b4:
e2:9d:c4:7d:38:cd:b2:b1:11:e2:6e:b3:69:b9:2d:
00:66:45:c2:1c:f5:9a:d9:3c:ee:7b:61:81:ee:35:
f1:16:4a:6b:98:5c:f2:61:f3:1d:a1:0c:43:f3:5d:
35:d6:66:ea:50:fb:82:01:fe:4e:6b:b0:ee:8b:2d:
83:72:ec:0e:5a:36:80:4c:f7:2c:36:56:ea:7f:2f:
b1:3f:aa:50:85:51:0d:18:5b:fb:54:0e:af:46:ff:
57:dd:09:7e:52:f5:c0:ad:1b:75:fe:3e:04:bd:7b:
b5:d6:97:bd:c5:12:5d:6a:37:ed:39:a4:d6:ca:1a:
df:4e:85:2e:75:f4:9e:45:6e:25:71:cd:f8:40:29:
d8:8a:24:ee:88:17:36:23:76:10:ad:64:6f:7c:54:
5b:84:74:97:a6:6e:21:92:63:17:d9:63:77:06:ac:
e0:ab:06:eb:70:10:21:41:2c:e7:48:2e:17:35:19:
d3:ef:4a:6b:cb:fb:12:d2:89:91:3f:ac:e4:89:69:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:24:61:85:83:06:79:0B:1C:5B:A4:A1:79:A9:D2:EF:1B:87:96
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.18.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:4c:9f:83:e0:d6:af:e1:39:ee:30:a0:59:96:56:2d:a5:90:
f1:c7:5d:42:3f:fb:01:42:cc:dd:9d:11:56:12:52:76:67:ba:
f3:c5:f2:da:ab:9d:63:35:4f:ae:06:69:f6:a9:73:23:33:7a:
ac:71:f9:ba:f0:cd:b8:74:42:e6:4c:83:e0:05:94:54:86:33:
2c:a2:41:a0:a7:96:f1:f4:17:c4:31:96:44:49:3c:ab:33:ea:
0b:1d:b5:7f:cc:a7:b3:e9:44:84:d3:e3:cd:9e:94:da:c1:68:
d5:4f:56:48:9c:a6:de:c4:5b:55:27:4c:ae:49:7d:29:a9:8c:
d7:f4:8b:87:ab:e2:b0:fa:bc:3a:a3:33:99:bf:30:8b:c5:41:
45:c8:09:f4:f2:c1:06:13:b4:d6:ed:30:4e:bd:de:e4:70:07:
60:18:0b:bb:50:1b:3e:c9:61:55:04:cd:43:ec:60:b4:58:9c:
88:1f:16:0d:f0:1d:04:95:4f:7b:1b:4e:98:0e:67:78:32:69:
9e:14:40:2b:5e:01:ce:19:ec:c8:a3:83:fd:cc:15:7a:a9:7f:
b1:68:31:ee:da:de:cc:05:1e:44:dd:75:ac:2f:07:9d:c1:bb:
d3:b7:f9:25:56:65:c5:36:9e:c0:7e:4e:a4:b0:83:a4:dd:5e:
58:1d:5b:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:55:29 2026 by rpki-client