Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234342e3132322e302f32342d3234203d3e20313938373533.roa
File: 3138352e3234342e3132322e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: ykdr+amyRFQ6KlsoIqMhkqq7n3jgLtAZP8jHDfVqWqw=
Subject key identifier: 67:33:5B:DB:62:11:45:9C:86:FF:30:74:2A:76:97:C9:2A:6B:54:9C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 138113868B3129CA572D5810F674B40283B5FEF7
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234342e3132322e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:38 +0000
ROA not before: Fri 16 Oct 2026 18:49:38 +0000
ROA not after: Fri 15 Oct 2027 18:54:38 +0000
asID: 198753
IP address blocks: 185.244.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:81:13:86:8b:31:29:ca:57:2d:58:10:f6:74:b4:02:83:b5:fe:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:49:38 2026 GMT
Not After : Oct 15 18:54:38 2027 GMT
Subject: CN=67335BDB6211459C86FF30742A7697C92A6B549C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:d3:2b:3a:f8:e0:10:bd:5a:e3:89:15:48:
db:7e:35:72:a5:9f:b0:b0:a6:d8:db:61:3e:cc:d6:
48:ff:aa:2d:d6:76:03:14:04:58:2e:0e:d5:25:22:
d0:b9:99:84:86:87:ca:e7:12:68:87:39:19:d5:28:
d9:d3:59:db:6c:fe:0c:a9:33:9b:aa:c3:cd:07:ee:
a8:68:b5:93:27:69:b8:68:64:ae:07:c2:45:8a:3f:
b1:6d:b6:a9:1b:c6:bf:30:4f:a2:c4:0d:d8:b7:31:
13:4a:25:2c:ed:43:1c:31:1b:9d:d1:84:c5:25:23:
a8:e0:63:10:52:48:be:68:68:27:f7:58:9c:bb:ed:
4c:1a:ed:3d:b3:fc:71:7c:8f:ff:64:51:30:cc:2e:
27:2f:71:e7:d5:82:0d:c4:00:ea:5a:ca:82:03:47:
77:5d:27:46:71:ab:55:ad:f8:cc:1a:82:5a:10:66:
ea:3e:c1:07:1e:b1:d7:f0:cf:a2:5e:3b:9f:4a:8a:
04:70:34:53:04:0c:45:32:8f:ea:4e:af:d8:f4:08:
3e:52:30:19:0d:5f:04:e1:09:d1:e2:be:56:fe:07:
9a:8f:52:09:52:4f:ec:3f:3f:0c:97:c2:8c:f8:be:
34:b2:0d:66:32:81:bb:68:de:e6:bb:f2:95:97:a0:
11:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:33:5B:DB:62:11:45:9C:86:FF:30:74:2A:76:97:C9:2A:6B:54:9C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234342e3132322e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.122.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:cd:9c:bf:d1:3b:86:53:11:6c:ca:f7:a1:fd:c6:ac:eb:3b:
12:f2:47:13:47:34:3f:2e:06:16:99:1e:88:ad:6b:bb:6d:59:
02:e1:f0:08:6c:d0:fd:30:d9:bf:75:ac:5e:bc:24:4d:48:86:
a4:eb:0e:14:4b:4d:6a:50:71:18:81:d1:ab:b2:be:1b:33:53:
6b:db:19:fc:e4:2f:77:cc:99:49:08:84:22:24:c2:78:b3:81:
1a:44:8b:3b:ad:99:79:1f:5e:6a:4c:b0:12:1f:82:07:7f:23:
41:55:24:ab:ed:60:f8:d1:49:1f:a8:01:88:9f:9c:49:2d:80:
49:0c:fa:5b:13:d5:ce:e4:42:86:85:6b:3d:2b:96:ba:fe:52:
1e:77:30:88:d0:0a:61:c2:0e:76:9d:a9:59:ee:91:38:62:70:
c0:b6:7c:64:5f:eb:c2:38:2d:f9:64:c7:ed:41:89:d7:92:c7:
9d:49:4b:a7:3e:d2:8c:0e:8f:df:ef:e0:c4:ce:04:70:dc:34:
5b:20:2b:f4:3b:fa:64:87:9a:39:f0:4d:1d:9a:12:f9:89:ba:
0f:01:6b:8b:59:fc:46:25:9b:78:4a:42:16:c5:b5:04:98:37:
a3:1e:88:25:69:f1:49:fc:28:d9:6d:35:da:a4:bd:5c:37:fd:
98:ae:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:28:20 2026 by rpki-client