Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234342e3132302e302f32342d3234203d3e20323138343038.roa
File: 3138352e3234342e3132302e302f32342d3234203d3e20323138343038.roa (raw, json)
Hash identifier: joAruUrwwAiFqedi9gfVDNkNftNzuilMWz+cRPnSivc=
Subject key identifier: 17:66:B8:3D:95:32:FB:4E:1D:51:B2:C1:BB:AF:F9:72:23:FB:93:C9
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5EEC21E3A65E2F8FF0908B3223C9C177BC0BCC67
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234342e3132302e302f32342d3234203d3e20323138343038.roa
Signing time: Wed 14 Oct 2026 12:25:36 +0000
ROA not before: Wed 14 Oct 2026 12:20:36 +0000
ROA not after: Wed 13 Oct 2027 12:25:36 +0000
asID: 218408
IP address blocks: 185.244.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ec:21:e3:a6:5e:2f:8f:f0:90:8b:32:23:c9:c1:77:bc:0b:cc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 14 12:20:36 2026 GMT
Not After : Oct 13 12:25:36 2027 GMT
Subject: CN=1766B83D9532FB4E1D51B2C1BBAFF97223FB93C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:48:46:26:67:aa:d7:40:1d:32:60:7d:e0:
d2:a5:24:7c:d4:a0:d6:12:d8:41:c3:56:45:77:08:
46:88:12:41:e7:f9:17:6e:15:3d:75:e9:23:31:06:
50:bb:7b:f8:78:7c:d1:dc:a7:9f:e6:63:cf:cd:b6:
f6:7c:96:81:6a:90:ff:06:2e:60:2a:18:32:67:e6:
eb:3e:34:07:63:c7:1b:1a:a8:01:40:6d:d2:5b:e3:
63:d4:17:3c:83:98:06:34:15:b3:fc:ea:59:7d:fb:
40:82:f8:5c:c1:bf:19:8b:60:94:a3:78:6a:4c:6f:
a8:76:6e:61:9d:bb:41:f5:2c:83:12:49:f1:55:bc:
10:3c:8c:d0:6c:65:ec:03:7c:d5:8b:52:a6:9c:e1:
76:5d:8e:19:4b:d4:81:36:b3:d6:b0:e8:c0:a9:98:
44:13:91:37:8c:39:4e:d7:c5:72:57:b6:cb:f9:05:
2a:b6:b1:3a:16:b8:bf:9e:be:2f:ac:4b:90:19:67:
32:77:27:8d:3d:b1:fa:1b:67:4c:f8:8b:dd:52:c0:
ab:27:a5:79:60:fe:f2:0a:6c:ab:2c:48:2b:2e:c2:
76:c9:b5:ce:95:bb:0e:a9:5d:d3:97:5c:3a:09:88:
38:65:28:41:78:74:7a:a2:88:4e:77:95:ac:9f:e7:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:66:B8:3D:95:32:FB:4E:1D:51:B2:C1:BB:AF:F9:72:23:FB:93:C9
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234342e3132302e302f32342d3234203d3e20323138343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:31:06:2e:5b:2f:0f:2d:a6:90:3b:e0:fa:30:e9:f5:71:3c:
3d:8f:dd:58:70:c6:59:6f:62:5b:81:d0:55:19:81:55:a8:e9:
b8:37:10:38:e5:e2:81:75:ef:cc:25:41:01:e8:c7:1a:91:32:
b1:9b:ea:29:97:d3:1b:61:88:f2:1e:b1:7f:89:d4:84:cb:4a:
79:25:55:d3:9f:a0:ea:95:51:d3:fe:c4:a3:b0:17:bd:66:a4:
bb:5e:51:15:ff:5f:04:57:96:15:26:8d:9f:e0:94:89:02:72:
fc:13:0e:26:16:e7:47:1e:c1:de:0e:f1:0d:5e:87:4b:1f:0d:
cd:dc:bb:ae:ee:94:d8:b2:4d:39:ca:58:1a:75:e6:4c:1c:ed:
49:99:ba:6b:af:39:c8:b2:4b:14:5e:3b:4c:6c:cc:8d:f8:cd:
30:94:b9:1b:b8:e5:a1:6f:27:ed:8d:02:9c:ab:e0:fd:41:67:
be:4c:2d:81:3f:12:bb:36:e5:1d:e8:ad:75:3e:16:97:49:a1:
2c:58:12:5c:eb:02:8b:1d:98:a1:7b:de:a6:69:fc:d5:64:40:
f9:70:c6:01:aa:76:de:86:10:7a:65:15:31:b6:8a:d1:f9:4c:
82:51:45:b4:1e:00:79:c2:3c:3d:4a:c4:63:e9:77:45:a3:3e:
42:07:d2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:29 2026 by rpki-client