Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32372e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134392e32372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: QVxTR6dweZieK6UQCMaMS7wCxAP6Hr8rW41GsQ15/jI=
Subject key identifier: 93:22:70:56:6C:BA:CA:D2:27:16:01:71:BE:BF:DA:89:C7:44:6C:3E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 23A2C208E126E031E7D51FDA38626A08A08746C1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:19 +0000
ROA not before: Fri 23 Oct 2026 16:25:19 +0000
ROA not after: Fri 22 Oct 2027 16:30:19 +0000
asID: 136787
IP address blocks: 193.149.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a2:c2:08:e1:26:e0:31:e7:d5:1f:da:38:62:6a:08:a0:87:46:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:19 2026 GMT
Not After : Oct 22 16:30:19 2027 GMT
Subject: CN=932270566CBACAD227160171BEBFDA89C7446C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:83:ac:1e:66:e4:8a:65:5e:d6:45:a6:69:
50:9f:ee:c4:74:e4:8e:54:5d:93:6c:5f:71:1b:30:
d7:90:8c:8f:c6:51:ee:39:51:7d:29:8f:6c:95:35:
c1:b1:97:1e:53:f0:17:60:aa:70:30:30:8e:c0:68:
43:de:cd:50:37:c5:88:2d:d0:c5:20:1a:6b:3a:13:
92:31:79:be:79:eb:7f:47:db:ac:3d:a8:59:0f:50:
27:48:4f:12:68:f6:b9:4d:2c:9d:b0:c0:91:d8:51:
71:e6:ca:9e:55:50:7b:f7:3d:67:17:2a:7d:23:5c:
65:98:9d:ac:a6:ba:82:97:df:aa:21:33:ca:d0:b1:
72:7b:87:9e:3c:7a:68:d5:38:60:43:b3:de:45:2b:
8b:01:4f:ed:a8:20:d2:12:02:fd:2f:e3:41:03:e3:
24:20:bb:0f:9c:ec:ef:50:22:d5:45:6c:39:50:87:
9e:a2:4f:61:06:be:cb:38:d4:57:27:a2:cc:94:47:
d3:7d:37:14:c4:3d:b0:95:7e:da:2b:7d:b7:85:3a:
d6:fb:62:17:09:a6:ee:ac:4e:2a:e3:50:a1:45:e4:
c6:22:e9:f9:b1:be:39:41:c9:05:af:c4:4d:76:4a:
f3:3c:03:29:25:87:b5:c3:ce:03:13:e8:6d:7c:74:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:22:70:56:6C:BA:CA:D2:27:16:01:71:BE:BF:DA:89:C7:44:6C:3E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.27.0/24
Signature Algorithm: sha256WithRSAEncryption
27:37:0d:61:0f:90:26:5b:b9:dc:07:36:de:c9:45:96:fb:8c:
7d:c3:c0:fc:5b:eb:61:45:32:53:ae:7d:eb:eb:df:ce:f2:81:
cb:0f:7c:0d:c2:21:c0:f2:41:7f:5a:70:2e:3f:0e:bd:b3:75:
90:b0:12:64:66:99:b2:45:ea:67:59:f2:9b:2d:1f:9c:e4:91:
7e:ab:7f:ea:98:d8:36:7d:2b:9a:35:cd:38:20:7a:68:ab:f6:
7c:d3:6f:22:39:08:f2:5e:77:35:9c:00:72:40:2b:20:b0:cb:
2d:39:0d:d5:83:45:a4:f8:d7:04:f4:bc:cd:3b:4b:0d:97:3d:
a9:85:f7:2b:e7:db:f9:75:74:90:48:c8:32:b9:dc:c1:2c:14:
64:fc:7b:34:12:b5:d8:fe:8e:9f:80:d3:62:56:21:fe:c4:cf:
6f:ac:0a:85:2e:25:ab:e2:62:0f:2d:b8:55:13:57:13:3b:33:
2f:01:06:8f:5c:0a:5d:39:20:dd:ab:5b:09:fb:6d:a4:72:f3:
ca:c1:c5:61:b9:b9:61:7c:be:9f:65:a2:c4:27:c6:89:62:0b:
6d:34:14:38:69:7b:7e:11:af:e1:70:5e:72:df:71:98:fa:9f:
ce:a6:34:00:c8:40:ae:58:c6:00:f1:29:32:6c:f2:9b:72:81:
bc:ca:18:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:02:36 2026 by rpki-client