Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234342e3132312e302f32342d3234203d3e20313938373533.roa
File: 3138352e3234342e3132312e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: ySolqQ5JvyVTN5BVr+fIVf6i1sYjJf4wmAZazXdAmvw=
Subject key identifier: 90:6D:AC:67:3C:64:25:4F:0C:82:A1:6C:2E:E7:F2:75:B9:25:6A:5A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 53AB78BCC7F0BC80D4B44F3AC56C43FF7624A8A2
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234342e3132312e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:36 +0000
ROA not before: Fri 16 Oct 2026 18:49:36 +0000
ROA not after: Fri 15 Oct 2027 18:54:36 +0000
asID: 198753
IP address blocks: 185.244.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 21:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ab:78:bc:c7:f0:bc:80:d4:b4:4f:3a:c5:6c:43:ff:76:24:a8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:49:36 2026 GMT
Not After : Oct 15 18:54:36 2027 GMT
Subject: CN=906DAC673C64254F0C82A16C2EE7F275B9256A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:10:46:ca:08:d0:8e:44:ad:34:93:a1:db:
59:2a:8f:01:43:7b:72:8b:b4:8d:18:b2:24:b9:30:
d5:3c:5e:15:36:cc:59:2e:36:a3:c5:3c:28:9a:88:
db:b2:ee:ab:51:c0:66:40:2a:e1:e3:fd:84:ac:65:
94:c6:cf:f1:28:b5:5e:ea:1b:d8:c4:19:f3:f2:da:
d5:75:d6:3b:f9:9c:79:ac:ab:6a:a7:d8:ff:b4:4d:
4b:5b:89:a5:28:7d:ac:64:19:fa:9d:b1:f8:fe:8a:
fd:4b:a7:3a:22:6a:ee:0e:54:a2:ab:a9:aa:f6:9b:
32:53:11:31:1f:d5:75:e9:1b:79:a6:81:99:a9:22:
3a:07:d5:22:bd:76:a4:c0:70:14:92:95:bf:6f:30:
55:51:c1:b1:69:38:23:7d:9a:9a:bf:a4:0a:10:a0:
5c:69:67:ec:1b:d1:c5:47:7f:f6:81:2d:05:62:8d:
97:eb:b7:fb:01:03:05:bb:cf:09:85:50:2c:e3:16:
ef:35:ac:c8:11:6a:66:ce:7b:98:48:74:a7:f6:e5:
66:0e:75:2b:08:65:eb:2b:27:5b:86:c0:f6:32:2a:
79:e2:75:de:91:6a:ea:3b:07:61:da:ae:67:79:b2:
0a:d2:cc:df:37:e9:76:79:2f:78:4e:6d:d9:c3:e1:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6D:AC:67:3C:64:25:4F:0C:82:A1:6C:2E:E7:F2:75:B9:25:6A:5A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234342e3132312e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4b:5b:7b:24:ae:47:83:ee:0d:a4:33:c6:61:5f:da:b3:16:
85:d5:d0:c6:a5:7a:59:e4:d6:3e:73:0c:32:25:fa:2b:71:d5:
fb:1f:1c:20:51:85:71:b8:f7:49:2f:a5:e9:e2:51:b5:3d:8c:
ca:a2:3d:32:8f:14:97:3e:2a:59:aa:4f:a9:f1:62:cf:33:90:
ce:9f:3b:37:34:a3:dc:72:e6:b5:e3:15:d6:8f:91:66:d8:42:
00:e4:18:bf:8e:5c:85:3b:f6:1c:d9:fa:42:aa:31:df:2d:d5:
8d:58:ea:a9:5d:fb:a0:2b:da:78:fa:ab:62:2f:29:6d:1f:09:
04:6e:69:1d:2c:36:55:94:27:f6:91:b1:b9:c8:9a:26:ed:d1:
0b:e4:2e:e9:5a:32:9b:62:86:17:e7:45:e9:0d:a9:29:a9:40:
64:08:70:f7:15:8d:b3:17:80:32:34:8d:0b:ed:e9:34:a0:da:
af:84:b0:c3:04:fb:a8:a3:22:60:6e:b2:1f:9e:15:8a:97:d8:
ca:7d:0f:67:92:36:4e:34:57:02:6e:48:40:97:18:58:f0:68:
e9:96:1d:a4:3f:fa:03:bc:09:9e:b9:dc:70:45:5f:79:53:ab:
f3:a3:5e:6f:1e:c8:f0:7e:7c:3f:4e:80:5a:5e:0c:f6:2f:3e:
df:73:b4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:54:05 2026 by rpki-client