Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33392e302f32342d3234203d3e20313336373837.roa
File: 3139322e3134352e33392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: pJM8LihVvBRl/49DAVu6EoRhhJG0yNiS0k0rMbPK8Lw=
Subject key identifier: AD:16:57:43:07:73:28:94:E8:E0:2D:3E:C6:2F:B6:83:1C:82:D2:A0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5CC3F4F4D9168138959477BD651CCF1081127E71
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:17 +0000
ROA not before: Fri 23 Oct 2026 16:25:17 +0000
ROA not after: Fri 22 Oct 2027 16:30:17 +0000
asID: 136787
IP address blocks: 192.145.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c3:f4:f4:d9:16:81:38:95:94:77:bd:65:1c:cf:10:81:12:7e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:17 2026 GMT
Not After : Oct 22 16:30:17 2027 GMT
Subject: CN=AD16574307732894E8E02D3EC62FB6831C82D2A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:04:44:2f:06:16:98:17:d5:85:73:28:5c:5c:
01:14:8a:83:db:28:f6:31:6d:28:e7:c6:38:18:ce:
73:be:59:95:ea:31:4f:27:2c:32:88:fe:bb:2f:4a:
4b:ad:eb:3a:cc:06:50:fd:79:6d:4e:2d:f9:f4:31:
2c:3d:47:6f:d2:9e:a0:5c:ad:e1:6a:be:06:29:38:
23:c1:95:62:97:5a:99:31:54:21:af:2c:63:d0:a0:
99:7c:17:d3:ba:ae:f3:69:88:11:13:79:bd:0e:1d:
0c:d4:00:56:fe:b0:b7:a6:4a:30:de:ad:a5:64:3f:
98:03:fb:bf:59:6d:5e:a2:fd:12:ff:f8:22:9e:7c:
08:59:05:f3:9b:6d:cd:da:b9:14:44:12:2b:59:6a:
08:c7:71:a0:be:f8:aa:cf:3b:a3:6f:49:ec:84:55:
5c:f0:01:52:80:16:00:40:e6:45:16:e2:ac:95:a3:
38:83:a4:00:ee:20:87:d8:55:92:26:69:f0:09:fc:
1c:3e:8a:f0:27:e7:ac:54:66:c1:e7:09:9f:32:ba:
e8:ec:fc:2e:82:a6:33:76:a3:ac:35:96:13:88:cd:
db:de:cc:14:9c:3b:8b:c6:be:93:b0:2d:2e:d6:20:
b1:d1:28:57:f6:c1:8f:ba:f2:1f:f9:2f:36:83:be:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:16:57:43:07:73:28:94:E8:E0:2D:3E:C6:2F:B6:83:1C:82:D2:A0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.39.0/24
Signature Algorithm: sha256WithRSAEncryption
70:28:93:4d:eb:28:00:7e:02:b6:bb:e5:e4:ec:d4:94:b1:7a:
6e:ba:9b:73:13:84:ed:c2:7e:2d:f6:ca:3e:a5:9d:24:83:f5:
6f:31:0e:a9:83:d4:36:bc:99:51:4e:b9:22:d4:1c:bd:ad:1b:
cb:6b:89:fb:ee:4c:fc:49:9b:aa:ad:a9:df:70:c0:14:d8:71:
72:7e:6e:79:32:06:9e:8d:28:bd:31:58:27:48:eb:fb:ee:db:
68:e2:9b:db:ee:91:66:df:1c:a5:b7:b8:08:42:e4:20:85:07:
1a:e9:4d:a5:b7:ab:4d:ef:12:ef:90:ad:9f:96:2e:ec:8a:84:
ac:b6:b4:3f:4f:78:ae:af:f5:28:c7:b8:2e:0e:44:7c:88:d2:
c2:52:e8:ab:d1:42:bb:ad:d3:a1:8d:6d:f4:13:fd:86:12:39:
4b:5a:6c:01:0c:3f:e6:4c:31:a6:dc:56:29:54:0c:9f:91:fc:
0c:1f:14:e6:8d:c3:99:40:ec:b3:7a:88:4f:eb:7e:a2:de:9f:
37:0a:57:9d:bd:f7:88:a5:98:09:28:2f:86:9f:dc:80:3e:d1:
9f:f4:6f:c9:04:e7:1b:06:f6:73:5a:63:a9:43:a7:3a:12:b4:
78:ea:1f:f3:e1:eb:77:38:39:2a:a0:ca:54:d6:98:69:71:66:
0b:46:84:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 19:35:20 2026 by rpki-client