Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37342e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134382e37342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: DZkO8onDhFWpRIUQaq7kHlaoySyAkz5wtsYydA51mec=
Subject key identifier: 4A:F4:6C:1A:04:F1:A6:B0:D6:16:C1:69:02:7D:3D:59:A7:A5:45:31
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 356A68969322E57826E112FAC2028B8D127E8846
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:30 +0000
ROA not before: Fri 23 Oct 2026 16:25:30 +0000
ROA not after: Fri 22 Oct 2027 16:30:30 +0000
asID: 136787
IP address blocks: 193.148.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:6a:68:96:93:22:e5:78:26:e1:12:fa:c2:02:8b:8d:12:7e:88:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:30 2026 GMT
Not After : Oct 22 16:30:30 2027 GMT
Subject: CN=4AF46C1A04F1A6B0D616C169027D3D59A7A54531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:f1:03:6c:19:4e:e0:4f:0d:0f:bc:d7:b3:
9e:d7:84:3a:bf:65:e0:25:ad:59:92:44:b9:bd:db:
12:b1:77:0e:1e:37:96:78:65:f3:fc:e6:ca:a3:80:
a6:9d:93:2c:cd:64:ce:25:24:7f:78:7e:b2:65:55:
8a:d1:d7:e1:b2:e8:71:dc:68:af:e0:53:b3:d7:23:
08:b5:12:39:6e:33:95:9b:cb:74:75:57:26:83:82:
b5:ff:b0:69:36:30:90:31:31:2d:c6:3a:5b:3c:e3:
77:0f:b6:e6:76:22:aa:e3:cd:2c:95:48:b0:fe:8a:
9c:16:b3:b8:2d:fd:11:21:56:ca:70:94:26:73:75:
c1:dc:66:dd:fb:0e:45:20:ed:79:74:a4:8a:ed:78:
22:2f:2d:42:de:37:07:1e:86:c7:a9:9c:1c:d7:98:
53:07:79:5d:f3:4f:43:bb:16:b3:7b:2d:0d:ad:6e:
b7:74:6e:3c:ab:0b:50:08:0b:b7:b2:72:bb:9d:41:
7b:81:89:41:88:cb:7b:d4:08:83:ae:e7:52:48:cd:
01:04:61:bb:41:92:bc:7c:67:4c:ed:76:31:2e:ec:
c4:4e:97:cb:55:ed:92:6a:d3:e4:71:ca:9f:50:ce:
f8:13:20:7e:98:9f:94:46:f9:d9:7a:9c:7b:db:1a:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F4:6C:1A:04:F1:A6:B0:D6:16:C1:69:02:7D:3D:59:A7:A5:45:31
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.74.0/24
Signature Algorithm: sha256WithRSAEncryption
43:35:f0:9f:be:1a:0d:d4:36:7f:5e:64:1e:18:10:a1:06:f2:
99:e2:99:0d:fe:66:c6:4a:f2:19:d8:b6:11:95:f0:59:95:2b:
9b:e9:e8:e8:d1:37:09:fa:8b:39:67:55:2e:86:a9:4b:2b:e6:
17:f4:ee:b1:e6:58:a4:20:3a:e1:61:86:46:a8:75:a9:d4:c2:
f4:c6:fc:43:d5:6d:6d:c0:42:73:2b:59:81:85:e4:72:ab:b7:
d9:51:b3:25:fb:90:8c:dc:f6:4e:04:a7:eb:95:9a:b0:d8:8c:
e0:88:b1:49:f8:24:61:3a:9e:7e:a5:9a:a5:f8:55:34:bf:92:
22:47:ba:c6:25:44:06:28:1d:09:55:57:f5:bc:64:90:a1:1b:
42:e8:ea:6c:aa:73:a8:1a:e8:2a:b4:dc:b9:d8:7a:f7:34:c0:
83:56:a0:cf:8d:ff:b2:53:36:f0:bc:56:2d:c6:3f:29:e3:8c:
0b:1c:09:d4:87:5b:90:a9:a3:3e:28:04:c6:49:c9:00:4f:01:
2a:1f:81:fa:36:63:b7:44:2d:75:81:8f:84:3e:a2:fa:0b:c1:
7b:ba:68:79:83:09:6b:1d:b7:64:66:9b:7a:ce:50:e6:ec:10:
12:ea:9d:17:17:0b:ac:d4:32:ed:4a:47:07:67:04:99:06:ce:
48:84:51:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:48:35 2026 by rpki-client