Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31392e302f32342d3332203d3e20313431393935.roa
File: 3138352e3139332e31392e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: UrZDMdjyDUjlqTLe5uag+jn0HGozvxvg2vdPXnoqTEI=
Subject key identifier: AB:4E:34:7C:13:29:0A:BA:1B:74:D4:17:E2:09:D4:74:E9:4D:95:3B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 72693208BADE31AA5FDAB0D34469806ED746F625
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31392e302f32342d3332203d3e20313431393935.roa
Signing time: Fri 23 Oct 2026 16:30:27 +0000
ROA not before: Fri 23 Oct 2026 16:25:27 +0000
ROA not after: Fri 22 Oct 2027 16:30:27 +0000
asID: 141995
IP address blocks: 185.193.19.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 07:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:69:32:08:ba:de:31:aa:5f:da:b0:d3:44:69:80:6e:d7:46:f6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:27 2026 GMT
Not After : Oct 22 16:30:27 2027 GMT
Subject: CN=AB4E347C13290ABA1B74D417E209D474E94D953B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:78:4f:e2:f8:29:67:0b:a7:f8:8d:0e:78:
b7:df:8b:50:7e:ba:a5:af:22:16:6e:1e:98:ad:0a:
06:dd:33:90:b5:5d:15:20:c7:b8:f5:59:88:05:f5:
50:02:07:68:1b:7c:0c:79:08:ea:e5:ce:b4:f3:86:
6d:5e:f5:ed:b9:e9:b7:85:81:fc:80:09:0c:75:2d:
cc:5f:a1:76:ea:e6:ac:fe:5d:95:2b:02:37:65:1d:
9e:ac:43:63:bf:0f:44:5b:c8:08:ba:1d:a5:52:0c:
db:e8:29:2d:e7:4c:ff:c9:4b:c7:7f:37:2c:2e:12:
26:78:4a:c9:82:53:92:81:67:48:e1:eb:bf:5c:24:
02:66:5e:63:dd:38:77:bf:ab:72:b4:97:13:70:d1:
a7:e1:26:5e:ca:c0:85:35:8d:66:ce:68:6d:5e:93:
80:3c:d1:50:e2:4e:e4:2a:61:ad:13:de:00:ec:7b:
27:46:fa:31:f2:fa:90:59:17:13:d7:e7:53:cf:8d:
f6:98:ab:c9:65:57:57:e8:33:31:5e:3f:2b:94:f2:
3d:f4:18:a0:b5:38:eb:9f:8a:5f:d3:e1:62:de:3a:
ee:75:57:12:86:32:72:62:7c:e8:81:9e:ec:06:93:
ad:70:b3:36:11:22:be:be:ad:d2:cb:c0:90:d8:d3:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:34:7C:13:29:0A:BA:1B:74:D4:17:E2:09:D4:74:E9:4D:95:3B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31392e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.19.0/24
Signature Algorithm: sha256WithRSAEncryption
47:db:da:39:e4:88:aa:d1:9e:b2:28:1d:cc:e6:a1:e2:45:74:
0c:ac:4f:84:f4:44:66:0f:c4:ff:ec:75:70:29:7c:54:c7:8b:
a7:d4:3e:08:62:f6:8e:07:df:98:33:9e:7d:0b:a3:42:29:e5:
c0:c9:06:75:42:62:1b:24:7d:66:cf:b4:2d:e9:d2:58:df:bc:
92:5b:03:24:f7:d1:76:79:ed:7a:78:05:0a:8f:0e:44:75:79:
83:d6:6c:00:46:1a:2c:9c:12:7e:c5:bb:5d:3b:3c:c9:7f:8c:
fb:89:cf:e7:b1:0c:77:bf:e5:88:84:e1:e3:30:5a:58:59:27:
83:4a:c5:8a:6b:fc:0c:17:75:36:02:4d:49:7d:a0:98:bf:78:
24:fc:96:37:96:04:5a:da:18:6e:98:7b:7f:52:e8:1e:e5:e0:
55:e9:9f:b0:9c:f8:98:0b:12:3e:3d:3a:17:ff:18:12:fd:d3:
78:cc:65:5a:2d:ba:2b:6d:d0:c8:26:fe:31:48:36:35:9f:68:
b3:e6:49:93:20:53:62:08:4e:b1:6a:5f:cb:c5:7a:d1:5b:c9:
aa:01:84:8a:c4:2b:1b:f3:a4:56:3f:f1:25:6c:51:bb:64:0c:
a7:37:d1:0c:d1:5e:26:35:db:d3:10:92:f1:82:1d:fe:88:fc:
b8:7c:69:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:01:11 2026 by rpki-client