Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37322e302f32342d3332203d3e20313336373837.roa
File: 3139332e3134382e37322e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: FgA2Q2C5oRbOSyGkiYBmWHY78GseqV3eyaDfg5C/EzY=
Subject key identifier: 15:A9:A8:3E:30:7C:50:C3:83:3B:F4:6D:FC:31:49:E3:9F:A8:1F:B8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2C8D31C629577B647DA870B841B0FD05BFA81BFD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37322e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:19 +0000
ROA not before: Fri 23 Oct 2026 16:25:19 +0000
ROA not after: Fri 22 Oct 2027 16:30:19 +0000
asID: 136787
IP address blocks: 193.148.72.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:8d:31:c6:29:57:7b:64:7d:a8:70:b8:41:b0:fd:05:bf:a8:1b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:19 2026 GMT
Not After : Oct 22 16:30:19 2027 GMT
Subject: CN=15A9A83E307C50C3833BF46DFC3149E39FA81FB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:3c:73:49:cf:58:2a:88:bd:68:dd:41:f9:
66:9c:b5:96:51:ad:0e:93:11:3a:4a:8a:fb:da:4f:
cf:37:c2:99:70:36:26:dd:f8:7a:3b:64:72:6a:fe:
37:4f:56:14:16:fd:d4:63:a0:8a:41:65:74:c1:ce:
c3:bc:dd:db:c9:4e:74:47:62:c7:56:c9:38:16:03:
18:b2:cc:ef:54:c1:04:f4:97:1a:ec:e7:bb:0c:19:
95:b5:17:7e:76:0e:91:43:7f:a9:22:93:61:8f:03:
80:27:56:e3:ac:c2:68:a5:9a:1a:a2:ad:99:ae:73:
e2:9c:6b:a3:3f:1e:dc:42:62:dc:87:7f:eb:3a:a7:
cf:70:02:05:49:18:80:fd:b0:e8:a6:44:45:f2:ac:
ce:12:9f:0c:e9:42:df:a4:63:d3:cb:a6:96:f8:6c:
42:87:e9:a6:37:c1:96:2d:13:4e:9d:ba:53:e2:d6:
30:56:24:80:4e:ba:b7:bc:92:c0:a5:04:66:96:dc:
0b:bf:a5:7a:58:f8:2b:e1:9d:24:be:3d:e3:02:5a:
14:6e:45:44:9f:7b:d3:9e:66:27:06:64:58:9b:e7:
1b:02:3b:55:08:14:b6:8c:8c:35:a7:b6:18:95:62:
e3:b2:72:ab:f3:c4:59:ce:84:b1:d7:70:74:6f:71:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:A8:3E:30:7C:50:C3:83:3B:F4:6D:FC:31:49:E3:9F:A8:1F:B8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37322e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.72.0/24
Signature Algorithm: sha256WithRSAEncryption
db:a2:cc:47:51:66:d8:1c:3d:55:ae:ff:8f:03:40:6e:42:c8:
c6:ab:9e:1d:a5:f4:66:d9:df:84:e0:79:42:84:54:49:fb:2c:
13:de:2d:15:e2:bc:b2:31:14:3c:b3:8a:7b:a7:33:83:01:e2:
e1:23:2e:d0:f3:7f:9c:90:ba:b5:cd:74:1e:37:61:5a:5b:ef:
f5:1a:36:ea:01:ca:a0:50:6b:2a:ac:70:d3:ba:db:a2:60:1c:
75:b4:f4:80:a1:85:2d:1d:db:aa:45:41:df:f7:c1:0a:75:7b:
51:a9:0a:56:46:49:fe:0a:c3:67:d3:ee:ea:ff:71:d9:53:60:
d3:60:40:e7:c4:f7:e3:10:d4:15:54:3e:25:6c:07:01:14:54:
53:e2:27:02:38:85:32:65:2b:a9:b7:77:f7:87:4b:ee:b5:ba:
74:a4:eb:8c:0c:af:bb:72:e8:f5:e2:f5:d4:5e:cd:9d:11:b1:
b9:19:c8:8e:b5:36:d5:2f:0f:b0:ca:eb:bf:9f:25:d0:9e:d4:
db:52:a0:8d:48:5f:05:d7:5d:84:2e:50:2d:ab:98:b5:8c:63:
a7:9a:4f:e8:62:2c:29:cd:c2:aa:fa:f5:fb:0d:d0:76:78:5b:
b3:73:4a:e0:2b:1b:99:97:0e:ce:01:47:f6:04:d5:c9:21:50:
cd:14:f4:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:53:43 2026 by rpki-client