Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32362e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134392e32362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ot+5FVec78GPSSihnHjPLrYuRrVNQRRoI72VJ/FPIxY=
Subject key identifier: C8:20:9D:C8:FF:35:FF:E3:CF:AC:A6:50:D0:B4:AF:46:EA:BA:A6:E2
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 68EF77BAAF08F226591A1DBB24FD5295898BC9C6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:11 +0000
ROA not before: Fri 23 Oct 2026 16:25:11 +0000
ROA not after: Fri 22 Oct 2027 16:30:11 +0000
asID: 136787
IP address blocks: 193.149.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ef:77:ba:af:08:f2:26:59:1a:1d:bb:24:fd:52:95:89:8b:c9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:11 2026 GMT
Not After : Oct 22 16:30:11 2027 GMT
Subject: CN=C8209DC8FF35FFE3CFACA650D0B4AF46EABAA6E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:69:83:88:14:8e:c7:68:80:f9:13:7d:a4:
c6:dd:1d:db:6b:de:71:0f:5f:b1:01:14:1b:47:8b:
10:fe:65:ec:18:1c:12:50:83:6c:22:c6:2e:c3:8d:
65:d7:fd:95:de:e7:4b:23:72:f6:8c:e2:29:1f:db:
aa:7a:1f:a6:7a:ac:eb:e5:08:21:49:82:2c:72:e0:
4d:26:65:a1:9c:3f:17:5d:cb:e7:46:3b:3a:56:61:
dc:9c:8d:4a:dd:d0:50:14:d1:55:6e:40:26:b2:b7:
52:f6:4b:99:97:02:a4:2d:60:0a:bc:a1:50:76:15:
ad:d0:cb:4f:a8:4d:95:80:8b:60:d5:fd:03:a1:a6:
63:f7:bf:db:13:61:fd:36:9e:aa:3b:f3:4c:39:75:
40:c6:a4:9e:60:4b:d9:f7:12:a7:4d:84:62:c0:e7:
ee:0a:1d:b4:2e:c7:92:e4:b2:18:8d:3f:a5:b7:53:
8c:c8:10:66:38:70:10:2d:80:10:85:98:a1:a1:b8:
d0:99:a7:09:1a:65:13:58:4b:bf:d3:71:dc:0f:99:
fb:84:cc:1c:0b:60:96:be:14:4e:75:d9:6a:fc:a7:
f9:29:8b:9a:84:b5:e4:c3:59:b5:d5:49:03:ba:0f:
ff:ab:3f:d8:a9:d4:08:c4:8d:4e:39:ce:eb:28:82:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:20:9D:C8:FF:35:FF:E3:CF:AC:A6:50:D0:B4:AF:46:EA:BA:A6:E2
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.26.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:0f:0b:9c:b5:6f:51:c7:fd:15:a8:ed:a6:24:06:42:f8:d9:
9c:63:0e:2c:77:c3:a2:9f:8f:e4:fb:f5:e3:f9:07:5a:74:92:
81:2d:b0:64:2f:59:78:3d:05:27:c3:da:19:66:2c:e9:b7:27:
15:3c:dc:6a:20:13:bb:68:e4:c7:c1:ab:47:06:70:1b:8e:09:
06:36:de:d7:9f:26:a0:de:95:ff:28:78:01:3d:8f:bc:cc:84:
0c:e3:96:d4:70:87:5e:84:96:a7:17:5c:e2:7f:27:d0:2f:17:
3c:34:ce:2e:06:10:17:fa:f8:85:d3:43:33:9e:f2:48:ff:57:
d0:82:b6:e0:09:83:4a:db:78:1d:11:76:e6:3d:76:8c:fc:25:
ab:04:db:8f:44:41:b7:92:39:0a:72:dd:7c:b5:e5:fe:4e:af:
95:dd:88:db:df:5b:61:71:a9:2a:a5:03:a0:77:09:d5:67:d0:
b0:ef:53:68:9d:58:ca:f2:f6:ae:8b:2b:03:2c:03:e2:42:18:
cf:ec:c3:6a:69:87:b5:21:d9:c5:77:cb:4f:07:30:3b:71:ff:
21:a6:aa:82:26:2d:43:ff:ac:5d:3f:3b:2a:73:08:b7:4c:88:
40:75:6b:1b:0a:6a:ee:fe:9e:1b:03:2a:fc:d5:0c:9b:4c:2e:
5c:d7:f7:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 10:37:59 2026 by rpki-client