Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32352e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134392e32352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 0mFY9spgCFtMCt79QvMDSxRlG7i6L5H53liH8X0+c5U=
Subject key identifier: F4:9F:8A:53:7D:D4:CB:72:14:F3:B5:14:6C:5C:37:59:AE:48:7D:4E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 20D173222A13B0EEF998A94203872ED979206898
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:45 +0000
ROA not before: Fri 23 Oct 2026 16:25:45 +0000
ROA not after: Fri 22 Oct 2027 16:30:45 +0000
asID: 136787
IP address blocks: 193.149.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d1:73:22:2a:13:b0:ee:f9:98:a9:42:03:87:2e:d9:79:20:68:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:45 2026 GMT
Not After : Oct 22 16:30:45 2027 GMT
Subject: CN=F49F8A537DD4CB7214F3B5146C5C3759AE487D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:b3:2e:a2:44:8a:3f:ca:5c:6b:be:8f:b4:
14:dc:cf:7b:b9:40:d6:d3:23:4f:6e:c7:0f:9a:a6:
16:ef:6d:96:f9:f6:df:e0:12:ad:6a:b0:6f:c3:23:
b4:b8:cf:62:33:72:39:05:ea:81:57:dd:27:6b:92:
e2:75:00:26:61:b7:9c:af:c2:40:cb:a9:1f:01:1c:
2b:cb:8f:ba:54:c6:02:0d:a0:c9:6e:f7:69:0a:68:
d7:c2:f0:e4:ce:fe:dd:54:84:67:f5:8c:b6:ab:2e:
67:26:85:a3:34:bf:3d:04:6a:5c:be:46:53:c5:e9:
ab:a2:29:1f:68:1f:f9:0c:b6:90:57:de:25:c0:0c:
09:c5:7c:e1:ac:89:57:1c:03:f3:40:cd:7a:a1:92:
7b:f5:56:e0:f7:90:f6:42:eb:fc:00:e2:b7:37:ba:
04:0d:01:90:4f:04:15:f4:12:d6:35:d4:63:42:5c:
4b:a4:e5:ff:e9:16:76:c1:11:17:de:68:e4:90:ab:
fa:5b:9f:b6:f2:35:ae:59:52:12:3e:bd:36:79:d6:
15:1e:4e:2a:ab:20:85:bb:37:51:ee:85:d0:bf:47:
ee:75:49:75:01:bc:a3:b1:08:81:c5:bd:cf:fb:b3:
9f:fd:37:59:1f:6f:69:03:b5:57:c6:0d:eb:8c:25:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9F:8A:53:7D:D4:CB:72:14:F3:B5:14:6C:5C:37:59:AE:48:7D:4E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.25.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2f:0f:19:3f:de:51:a9:69:59:ea:c3:f0:78:12:1a:03:18:
a4:8d:06:4b:2c:63:10:66:c3:4a:b3:96:c2:39:6c:28:74:6d:
b2:df:8d:3c:76:5c:e6:07:7d:57:bd:c8:d4:68:a1:48:ff:5b:
80:b7:83:b8:4b:e8:d8:af:93:86:f5:cd:3f:0e:5a:34:c7:91:
92:cb:bd:54:78:ff:9a:5a:4b:83:7d:13:17:89:ff:90:69:ca:
d0:99:65:68:c3:00:bd:b0:7b:01:64:d1:39:73:de:95:5b:40:
ef:da:e9:44:5a:ea:dc:95:cd:89:ac:df:74:60:1d:e7:bb:7e:
6e:63:0d:b7:8c:dd:44:a3:c0:fa:34:f2:96:7b:e5:21:c5:1b:
14:1b:5a:ee:36:cb:ba:d2:ee:7e:4b:8c:3a:76:09:52:a3:af:
b6:95:28:d4:f5:06:ce:38:29:ea:cb:5e:8d:dc:51:a0:e3:d3:
b4:09:36:f5:5a:15:f5:ec:34:4b:cc:3c:28:ed:45:93:65:42:
ca:37:99:9b:f3:d8:73:8c:32:10:f6:30:6d:2e:f9:00:e6:d5:
ec:63:d1:5c:b0:43:3b:cb:b4:3e:e1:8f:ac:cb:a0:c1:eb:5d:
57:91:fb:a7:78:f3:d2:77:3d:71:16:73:b2:71:08:ab:46:d7:
a8:8e:51:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:26:56 2026 by rpki-client