Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32342e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134392e32342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: iwq9ZV86HLb1JlfmESLw3GsgL9ao8LgQp0GWAtKvBvY=
Subject key identifier: 7B:AC:EA:D0:A4:BF:5F:E5:FD:6B:62:9B:DE:CE:39:48:59:8F:9A:3B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 51F7BFB57A352EE47ED76FF53D18820ED98D4430
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:10 +0000
ROA not before: Fri 23 Oct 2026 16:25:10 +0000
ROA not after: Fri 22 Oct 2027 16:30:10 +0000
asID: 136787
IP address blocks: 193.149.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f7:bf:b5:7a:35:2e:e4:7e:d7:6f:f5:3d:18:82:0e:d9:8d:44:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:10 2026 GMT
Not After : Oct 22 16:30:10 2027 GMT
Subject: CN=7BACEAD0A4BF5FE5FD6B629BDECE3948598F9A3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:fb:8c:34:38:99:c6:d4:2f:d9:a2:2a:ab:
a7:ca:86:08:ea:09:b5:cb:98:29:77:c1:25:39:a7:
0e:c9:15:17:32:fb:07:68:39:c8:c7:53:5b:11:62:
2c:ea:0b:0d:3f:db:6b:50:41:6a:20:9a:9b:c2:27:
b4:7f:0e:69:e1:d9:63:ea:30:a2:07:fd:f7:d2:73:
83:8e:10:d4:c1:e2:dd:9f:20:dc:13:7a:62:53:57:
80:2f:99:ed:3c:bf:29:7b:eb:14:cc:1e:41:e3:05:
14:60:94:b8:f8:c0:f0:94:b5:bd:99:93:9b:f5:54:
db:e9:94:dc:25:d1:dd:e7:6a:f9:af:48:b7:8d:ad:
3a:b0:11:44:01:3b:9e:db:b9:8f:19:6a:c0:04:24:
cc:ec:23:1a:2d:c9:a3:17:68:17:d1:d9:98:d8:86:
5f:9d:57:fb:03:e6:95:f0:e0:3c:af:78:3a:4b:12:
3c:da:ca:30:04:76:ee:26:85:e7:12:e5:ca:7f:fe:
ec:21:99:dc:78:e2:6b:56:f9:b1:dd:a2:38:ac:d9:
01:24:30:fb:7b:58:ee:a4:30:fc:dc:2c:19:2c:1a:
31:4e:52:ef:c1:f7:a1:c8:31:a7:be:ac:ae:c4:4d:
5f:a6:e3:f6:21:4e:32:4d:37:4b:54:2d:71:b5:4d:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:EA:D0:A4:BF:5F:E5:FD:6B:62:9B:DE:CE:39:48:59:8F:9A:3B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.24.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ab:ba:98:6d:85:11:3a:42:2b:43:08:06:db:4b:55:f4:b2:
df:78:d9:ae:b8:32:e8:be:91:0e:97:28:2c:7a:71:0e:32:95:
21:b4:82:70:e5:7d:86:4a:50:1f:d0:35:6c:0e:e8:3e:cb:42:
5d:c5:a5:3f:e1:1e:ac:10:55:9a:a0:72:7e:b4:40:8e:f6:f9:
fa:4a:22:bf:59:7a:4d:86:83:61:ef:f5:1c:9b:75:77:9f:07:
49:4f:48:c3:81:0a:11:11:d4:50:d2:eb:28:b4:ba:b2:16:cb:
4a:50:c1:70:2b:29:fb:7d:47:17:d2:41:49:35:17:da:00:93:
ba:92:84:39:9f:19:b2:af:43:d2:1f:53:39:35:c1:ef:29:ea:
97:54:6b:bd:ed:b3:3c:b3:86:62:3a:2e:0f:b8:1d:2f:a9:e5:
e1:45:90:27:67:d9:64:8c:80:66:96:e2:e8:94:d4:cf:8b:2a:
e7:2a:5e:d6:0b:f3:0d:c2:99:9e:52:94:4c:5d:83:53:d1:a2:
71:51:71:af:49:a4:1c:aa:b4:27:cf:56:e8:64:2a:0e:e9:6c:
30:ab:fd:df:44:b0:54:a5:4d:87:bc:c1:7f:bb:a1:ba:36:85:
5f:6f:47:61:7e:4c:2f:00:0e:a7:16:aa:28:5b:25:5f:aa:f0:
58:9e:26:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:07:31 2026 by rpki-client