Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233362e302f32342d3234203d3e20323033333830.roa
File: 3139332e33362e3233362e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: /kgReef1M7cOcymsJU574/C0c9ubMLjaIrAzgmipVFg=
Subject key identifier: 9F:81:D3:39:E9:3B:81:5B:88:B4:F1:87:75:A4:32:35:9E:A8:9C:B8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 36343F26DCC3A661E27D34F88A85E3D25BD6E8F8
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233362e302f32342d3234203d3e20323033333830.roa
Signing time: Wed 05 Aug 2026 12:52:05 +0000
ROA not before: Wed 05 Aug 2026 12:47:05 +0000
ROA not after: Wed 04 Aug 2027 12:52:05 +0000
asID: 203380
IP address blocks: 193.36.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:34:3f:26:dc:c3:a6:61:e2:7d:34:f8:8a:85:e3:d2:5b:d6:e8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Aug 5 12:47:05 2026 GMT
Not After : Aug 4 12:52:05 2027 GMT
Subject: CN=9F81D339E93B815B88B4F18775A432359EA89CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:d1:fc:08:e3:d6:10:78:bb:70:18:ee:3f:
2b:ef:24:6d:45:bd:31:8f:58:04:1d:b3:de:25:f9:
b0:58:ae:e8:a8:23:44:2a:15:76:f4:16:27:50:2b:
9a:66:15:ee:ef:7a:11:30:50:4e:b6:96:9c:ea:b3:
a9:a0:50:da:8d:71:67:1f:5d:bb:59:3c:4b:30:af:
02:a7:99:35:4a:a0:dd:ce:98:dc:a0:74:bc:9d:19:
cd:20:0f:0c:1c:77:1c:95:a4:69:05:67:e8:7b:15:
56:21:40:46:c8:db:07:61:c4:d5:85:84:7d:5a:24:
4d:a1:6c:a2:80:e5:51:e3:62:59:b7:af:45:d3:27:
06:ea:66:4f:61:0e:bd:c4:2b:5f:41:74:a9:83:75:
1b:ab:92:c3:be:02:8f:1e:be:7c:7f:de:a7:a6:04:
7a:57:2b:6e:b1:5f:cb:e8:3d:79:70:27:23:7c:8c:
d9:05:19:d5:a3:47:cd:4a:b1:0c:90:6a:65:d1:bd:
bd:22:74:0a:e2:6c:ef:31:bd:75:b7:2a:c2:21:32:
b0:14:3b:ee:c9:ac:dd:7e:27:e5:be:d6:9c:1a:76:
f2:6d:0e:d1:f9:64:d7:81:52:d7:03:df:1a:6e:ff:
84:fd:6a:2a:b1:d2:cf:64:64:91:1e:67:63:8e:94:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:81:D3:39:E9:3B:81:5B:88:B4:F1:87:75:A4:32:35:9E:A8:9C:B8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233362e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.236.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f6:c2:17:cf:c6:b5:03:f6:c1:37:f1:8e:1b:bc:4a:eb:e0:
b6:66:b5:95:9a:06:21:3e:b5:93:ab:0a:a3:33:36:83:11:e7:
78:62:78:79:00:c5:63:46:c3:b2:fb:7e:5f:50:0b:9d:f1:1a:
ae:81:28:db:ab:74:f5:7d:bc:10:7c:49:10:47:50:fe:b9:39:
3d:4b:fd:77:f1:04:75:a3:82:a7:f8:d1:7b:95:02:2b:53:e1:
06:d8:7b:e6:7e:da:9b:47:be:79:8a:a4:ad:ad:b8:ab:6a:69:
b1:bd:14:60:bb:5e:97:e3:79:72:19:c0:21:68:42:b3:83:f1:
b3:fc:38:b9:fa:4c:e9:e1:6c:3e:c5:f1:f7:2a:42:7c:85:d3:
66:43:83:e0:e8:8d:68:58:4c:4b:67:68:c9:c0:6c:07:48:50:
df:6a:11:44:b2:dd:31:6d:c2:b2:2b:20:4a:79:0c:14:f9:da:
7a:aa:ef:45:60:80:26:d0:82:78:d6:9d:cb:4e:4a:04:2d:27:
4a:7a:b4:fb:de:d6:7f:d3:4c:5f:26:8c:21:16:d5:89:25:a2:
5d:a5:17:84:26:ff:8c:97:21:ba:02:50:41:1a:c4:fb:5a:5c:
c1:74:3d:20:da:1b:8f:76:53:71:45:50:77:e9:cc:e0:7f:b4:
bc:e8:0b:b4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 26 07:51:19 2026 by rpki-client