Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33362e302f32342d3234203d3e20313336373837.roa
File: 3139322e3134352e33362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 1rzSI9aNj7lHLx/wbh2VON8qGya253+O3BIHzcU/ovY=
Subject key identifier: A0:57:CE:BE:36:B9:AB:94:B0:75:37:7E:A0:E8:75:F9:DD:6E:3C:53
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0FEB32EC1FCCF9B10780FEEF1EF12C8A111DE547
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:14 +0000
ROA not before: Fri 23 Oct 2026 16:25:14 +0000
ROA not after: Fri 22 Oct 2027 16:30:14 +0000
asID: 136787
IP address blocks: 192.145.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:eb:32:ec:1f:cc:f9:b1:07:80:fe:ef:1e:f1:2c:8a:11:1d:e5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:14 2026 GMT
Not After : Oct 22 16:30:14 2027 GMT
Subject: CN=A057CEBE36B9AB94B075377EA0E875F9DD6E3C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:80:98:3a:4e:7b:0d:00:79:a4:a5:c0:98:86:
ad:82:66:e7:17:e4:17:9c:7c:49:0f:d6:ac:4d:c3:
c9:d7:50:c4:a9:00:09:ba:81:e7:dd:51:c0:27:b1:
2a:4b:52:d3:eb:f7:a4:43:2c:f3:bf:57:f6:aa:50:
72:1b:1a:85:20:fb:0b:d3:83:3c:da:bd:a0:4a:3e:
c4:1d:3b:d2:4d:93:ca:c7:e5:59:d7:84:82:3f:e8:
59:ae:e5:63:25:ad:90:0a:d6:e0:d5:4f:85:3a:c0:
aa:b1:e0:f7:2f:16:93:4e:94:7a:04:cd:18:6e:6d:
1a:a4:f5:95:70:c9:40:b0:d2:7d:4b:49:3c:a0:23:
62:40:2a:bf:8a:6d:96:7c:4e:85:aa:e0:4f:f2:14:
1e:c9:70:d7:3f:3e:c6:f9:80:3e:35:a8:51:ae:27:
79:1f:2a:8b:29:86:bc:43:b4:82:de:37:c2:8e:2b:
93:37:23:93:72:e9:2f:76:ff:85:8a:a1:54:dc:c4:
bf:54:ab:b7:4b:6e:fe:6b:46:7d:70:5c:d2:8b:aa:
b4:ba:6c:42:de:2f:db:fe:d4:49:8e:24:75:67:c5:
2b:25:e2:d8:c6:86:55:ae:64:fd:f4:71:5f:c8:a9:
c7:cf:4a:82:96:93:b3:5e:1b:8a:b5:bf:fb:cf:ae:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:CE:BE:36:B9:AB:94:B0:75:37:7E:A0:E8:75:F9:DD:6E:3C:53
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.36.0/24
Signature Algorithm: sha256WithRSAEncryption
79:90:52:8b:75:03:65:a8:90:83:a4:90:69:17:f7:4d:e9:c3:
af:37:b3:08:3d:ba:92:70:7e:d0:b9:a3:10:98:9f:58:37:46:
b6:8b:f8:59:a1:f5:ce:81:24:ab:76:45:eb:a7:ee:b0:07:40:
0d:fd:4f:4e:c5:89:28:0c:8c:e3:b8:5d:20:65:39:b0:82:50:
e7:f2:8c:f4:91:da:e5:d4:67:08:fb:c0:c0:22:ae:05:5c:2b:
6c:f7:f6:8d:ec:7a:24:7b:69:60:94:f9:23:63:60:fd:4f:c0:
19:f9:fc:38:57:5e:61:be:9f:50:1f:bb:dc:28:d9:12:cd:91:
bd:59:9b:1e:75:66:3c:51:38:64:83:e9:8b:1c:3d:66:e6:1b:
31:0f:27:5f:41:fe:9c:6c:90:38:64:e6:87:c5:50:a3:73:60:
dc:f3:71:3d:3e:b9:bc:b3:b4:8e:11:6d:06:17:0c:2a:4c:09:
52:61:0d:3c:31:a4:e9:62:bd:fb:67:f0:ad:10:f5:de:cc:6c:
f9:77:28:5e:52:65:98:38:ac:bc:24:c0:25:a3:f0:25:5e:33:
49:a2:07:49:f5:63:cc:81:8e:93:ae:c8:38:33:5b:53:33:7d:
d7:0e:c3:70:73:49:ee:6f:13:6e:b5:5a:0b:73:8e:5c:f6:3e:
df:b0:c0:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:43:40 2026 by rpki-client