Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37352e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134382e37352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 9CAz63Qp5UEfCIVcVdG5rHYNcnwoUpl96Wc2OozW35k=
Subject key identifier: 55:6D:45:56:E2:EA:3D:31:33:57:8C:F7:47:A3:C4:79:16:C6:B7:C6
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7E86308816106BD6E30608287D7AF168DE42D2F5
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:33 +0000
ROA not before: Fri 23 Oct 2026 16:25:33 +0000
ROA not after: Fri 22 Oct 2027 16:30:33 +0000
asID: 136787
IP address blocks: 193.148.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:86:30:88:16:10:6b:d6:e3:06:08:28:7d:7a:f1:68:de:42:d2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:33 2026 GMT
Not After : Oct 22 16:30:33 2027 GMT
Subject: CN=556D4556E2EA3D3133578CF747A3C47916C6B7C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:c2:48:33:d7:1c:a2:ee:db:ec:e2:21:94:
b4:f0:f2:65:a0:f9:fb:30:d7:46:61:4d:f3:15:96:
b4:be:bd:40:26:f6:79:95:21:81:cb:c6:8d:c6:48:
37:c6:9d:6d:49:30:44:bb:d2:c1:a5:80:3c:c1:3c:
dc:f9:80:fa:7d:61:fa:0d:1a:19:d2:54:db:92:7a:
5c:c6:2c:03:0c:f6:2e:66:3f:be:dd:78:c5:01:58:
d6:f1:b3:71:dc:f5:36:78:bc:d9:fc:2a:38:32:b2:
c3:cb:d9:7f:16:a1:63:44:91:17:1a:35:54:83:14:
2f:e5:fe:4e:26:87:d3:f8:4f:2d:54:f7:2c:ad:e7:
6c:f1:52:94:33:81:74:ea:38:29:cf:55:43:09:03:
b4:3c:9f:86:65:cc:68:3f:f0:c0:36:3b:e6:30:87:
70:fa:f1:5c:21:7d:63:3d:42:27:ce:4a:38:c2:15:
8d:be:32:54:22:cc:a8:6e:a8:64:f7:5c:b2:2b:50:
9e:47:51:9c:e5:c7:97:4a:79:dd:21:9a:e6:d2:2f:
9a:9d:af:5c:b3:55:8a:af:0b:90:6b:65:23:b3:90:
6e:d9:97:17:7b:63:b5:ba:86:d3:89:f9:bf:86:0d:
5d:7e:3c:17:b7:01:2f:97:09:61:76:99:79:29:89:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6D:45:56:E2:EA:3D:31:33:57:8C:F7:47:A3:C4:79:16:C6:B7:C6
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:26:ab:84:41:dc:67:50:65:94:39:d1:94:65:b5:f2:b7:64:
d4:40:df:1c:0e:1a:69:ae:a8:70:00:5b:3f:ca:34:7d:d7:a1:
50:81:e4:da:ae:99:bb:f0:87:4e:ef:90:ea:bd:2d:5f:6d:1a:
fe:c7:64:fd:62:65:91:9e:fe:59:e0:7a:07:8c:d2:c0:7e:35:
b9:d8:93:f3:04:e7:f3:50:73:91:5f:76:94:c1:94:33:93:3f:
f5:2d:f6:f2:42:f2:0b:2e:9a:2e:2c:98:61:ad:d2:7e:ec:db:
e8:97:a4:19:b4:2c:4b:12:e3:7b:05:7d:52:98:c6:b1:1f:fc:
2e:90:1c:aa:be:e8:dd:49:3a:f3:cb:ed:79:cb:e9:f9:1b:36:
5a:12:f4:ae:e5:5d:d3:79:a7:1c:2e:f6:a0:46:e7:ad:5e:d6:
4b:5b:89:56:f4:ee:ec:5c:13:c6:df:0c:f7:ec:69:4c:79:c6:
4c:3d:8f:02:01:fa:1d:00:b4:17:60:43:b1:4c:88:49:ab:46:
1f:73:fa:e9:e0:0e:b2:67:84:97:99:c7:2f:a1:18:09:f8:39:
9d:34:6c:a8:ff:3e:f9:db:52:47:7c:5e:e8:d8:1e:80:e5:1b:
45:4a:44:33:9a:e2:b1:78:31:d5:34:af:36:73:e9:38:26:68:
9c:b6:8a:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:35:49 2026 by rpki-client