Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37332e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134382e37332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Jn87cbO2JcodwbLLDcbkrYAssztQ3kGKEBShF6K+yfI=
Subject key identifier: 4D:AA:F0:FF:17:3B:01:E8:BD:DC:37:4E:EF:32:E5:EB:83:86:AB:66
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 42361255D2834F85B3154AD5DEA2ED3D1FA0B576
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:12 +0000
ROA not before: Fri 23 Oct 2026 16:25:12 +0000
ROA not after: Fri 22 Oct 2027 16:30:12 +0000
asID: 136787
IP address blocks: 193.148.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:36:12:55:d2:83:4f:85:b3:15:4a:d5:de:a2:ed:3d:1f:a0:b5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:12 2026 GMT
Not After : Oct 22 16:30:12 2027 GMT
Subject: CN=4DAAF0FF173B01E8BDDC374EEF32E5EB8386AB66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:24:96:39:1c:c1:fe:7b:a8:7c:c6:db:6f:
2b:07:00:f4:ab:8c:22:cf:14:b1:8c:34:cb:f0:15:
88:9f:f8:ae:50:e9:72:29:d9:33:6f:bb:69:0f:39:
a3:5a:8c:bc:a5:a3:3e:ab:a6:7c:ad:c5:18:a1:04:
38:65:30:f7:37:2d:a0:8f:aa:9f:85:d5:d0:f0:a4:
a4:7f:16:98:e9:e7:d0:4f:fa:03:ec:32:b2:f9:fc:
9a:cd:31:38:94:02:3e:0b:9d:f4:d4:9b:9d:49:83:
3b:ae:e9:55:45:d1:ff:89:f0:1e:6e:21:91:e5:61:
64:c3:ad:18:ee:2e:58:a4:f6:52:46:ab:88:8c:0e:
14:f0:f8:ff:74:fe:a1:74:28:2b:7e:2b:eb:66:34:
99:41:52:76:26:62:a3:1c:ad:8c:8f:3b:ea:b8:0f:
07:e5:79:7f:2f:3c:8d:5f:4c:9f:88:d8:7d:66:44:
cb:1f:fd:17:b4:1c:50:eb:d7:07:41:84:30:68:51:
e9:0e:1a:4a:c5:3b:93:40:09:76:af:b8:49:46:09:
b4:58:53:50:e9:e2:57:b4:a2:68:a1:02:08:c9:95:
3d:7b:da:47:42:ae:a5:28:f5:bd:3c:58:e9:a8:72:
ca:76:1f:b4:c1:9d:a6:ef:eb:21:33:54:3e:32:a3:
31:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AA:F0:FF:17:3B:01:E8:BD:DC:37:4E:EF:32:E5:EB:83:86:AB:66
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.73.0/24
Signature Algorithm: sha256WithRSAEncryption
15:29:e8:98:46:96:c7:96:50:36:2d:4a:57:ea:0f:66:93:36:
1f:94:e5:62:ac:b1:bf:49:03:09:eb:37:7b:3e:d1:b6:9e:81:
d1:c3:e7:b0:75:5c:3b:01:64:18:c4:d1:59:ad:da:ce:8f:5f:
35:29:6f:7f:c9:fc:cd:df:75:49:aa:64:13:0a:cd:5b:0a:4f:
40:81:87:96:5c:51:0d:de:04:f6:f4:26:e2:81:53:ca:60:1c:
dd:01:f3:37:4e:09:b7:67:e4:68:8a:b8:13:52:db:62:1a:4d:
d2:69:4c:68:bf:9a:3f:82:ae:82:75:da:4e:17:74:31:d2:3d:
42:a6:d3:61:9c:bc:f4:67:bb:1d:62:52:03:48:4f:f3:f6:c9:
8a:12:0f:d9:33:c6:99:78:8a:3d:a8:83:f6:c0:09:13:d3:41:
1c:16:55:78:42:3e:af:d8:d1:61:e2:1b:3d:1e:e8:5b:9c:1f:
1b:d6:90:d2:3d:19:07:c5:5e:38:d0:fd:cc:11:0a:5c:13:d4:
ad:a9:ca:0c:1a:f8:60:8a:a1:1c:c8:dd:03:e7:3d:00:d3:2b:
8d:a6:5d:9c:39:cb:70:67:2a:2d:e0:27:cd:71:05:e7:53:9a:
7e:f7:15:d6:1a:02:f3:d7:4f:ab:e5:8e:52:94:df:08:d0:d3:
f6:78:3d:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:55:05 2026 by rpki-client