Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31342e302f32342d3234203d3e20323132323338.roa
File: 3139332e3230332e31342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: NZPNW7YStVe7WuCaqwKjsOk1Wm1CYG2/dwmXEhvQCJA=
Subject key identifier: BD:02:72:BE:D9:E2:F6:BE:F8:C8:0C:F2:21:72:F4:01:20:4C:57:BE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1A2FF9BFE957093DBFD788312B24A9AE64E1ACD4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31342e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:45 +0000
ROA not before: Thu 10 Sep 2026 09:23:45 +0000
ROA not after: Thu 09 Sep 2027 09:28:45 +0000
asID: 212238
IP address blocks: 193.203.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2f:f9:bf:e9:57:09:3d:bf:d7:88:31:2b:24:a9:ae:64:e1:ac:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 10 09:23:45 2026 GMT
Not After : Sep 9 09:28:45 2027 GMT
Subject: CN=BD0272BED9E2F6BEF8C80CF22172F401204C57BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:6d:b0:ae:77:b7:21:a4:fc:bf:10:db:06:
c2:c3:7b:c3:d4:f9:85:25:ac:2d:22:fc:91:33:2e:
99:56:75:0c:d6:08:f3:ba:28:6c:71:bf:31:76:81:
e7:cc:96:2f:9c:30:05:a2:03:93:cb:a4:72:60:5a:
ab:3e:27:e4:7a:40:75:04:e8:4f:62:97:c7:a6:77:
70:ca:aa:28:81:bc:55:89:03:69:a2:32:ab:3c:9e:
31:43:c0:02:a4:44:b2:0a:05:b2:24:b6:4f:7b:79:
f1:93:4c:2f:db:7c:73:00:c2:f3:58:16:3e:a9:39:
f9:38:00:c1:94:e8:0e:95:0a:3e:38:b5:9c:a1:5a:
83:f3:2f:75:79:af:0e:c9:d5:0a:e3:e8:f4:88:a8:
11:82:ea:36:17:de:f6:11:79:b4:75:d1:85:14:02:
5d:94:21:f3:f9:8d:81:e8:fe:92:2e:ce:c8:c9:bc:
74:f0:ce:91:d9:94:69:96:09:70:bf:89:18:d3:3c:
3c:f5:20:d5:ec:99:12:e9:80:ea:66:47:f2:99:5b:
1a:d0:21:d4:f9:95:10:6a:9c:e4:d0:2b:32:a9:bc:
e3:21:8e:f7:70:f9:49:60:2a:a5:e6:5b:f2:a4:08:
ea:d2:c3:a3:47:5b:1a:6a:6a:da:45:91:37:15:d4:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:02:72:BE:D9:E2:F6:BE:F8:C8:0C:F2:21:72:F4:01:20:4C:57:BE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.14.0/24
Signature Algorithm: sha256WithRSAEncryption
92:2b:aa:ff:f0:0d:e8:0c:2c:25:55:36:44:16:d2:af:b7:89:
af:7a:31:98:84:66:6d:94:20:e0:32:9c:a3:c5:4a:ef:54:40:
45:f2:b8:eb:8b:d0:01:04:31:11:ab:9d:06:f8:a2:53:7d:d4:
44:b4:27:f5:1b:94:ff:66:57:50:4b:0c:99:90:73:1f:b3:a8:
51:a8:82:56:23:7a:6b:8a:a4:56:1b:db:3c:3c:aa:9c:29:5b:
29:fa:33:75:9f:fb:7b:5e:88:a7:5a:17:11:87:fe:68:f5:7a:
47:7f:67:cc:83:7f:d4:8e:03:57:42:3a:f9:1e:e2:33:7d:7c:
95:d5:a4:c1:6f:b8:de:f3:9c:27:c4:42:87:ee:6f:50:a0:d9:
62:6a:dc:c2:e3:eb:8c:3e:0b:e0:5f:55:b0:08:79:9c:c9:bd:
1c:e7:21:76:f4:27:91:7c:7c:80:43:a7:dc:70:02:63:e4:f6:
0e:a4:b1:20:98:55:d0:c1:bb:50:07:af:04:e2:36:15:a3:02:
29:d1:d4:5e:5a:f0:af:bf:89:cb:4f:dd:b2:97:bd:09:e7:bb:
b5:31:4e:76:63:b7:13:c1:88:3f:9d:eb:e9:00:78:90:dc:f5:
6f:5c:9d:20:e2:5c:7e:ff:e7:04:ee:f0:78:2d:19:fe:6c:4d:
de:dc:76:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 18 17:07:35 2026 by rpki-client