Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234302e302f32342d3234203d3e20313336373837.roa
File: 3139332e34362e3234302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Hacqo+MMMB7gBAI3VXSXBeVVRpvvCrGbs7gHgxc4VAo=
Subject key identifier: E2:5D:62:E7:DF:C1:2A:07:73:89:47:70:07:7D:5A:BC:68:C4:4C:C2
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5E0DAD8D7C3038617A816BFEB48D32F14F168B3E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:18 +0000
ROA not before: Fri 23 Oct 2026 16:25:18 +0000
ROA not after: Fri 22 Oct 2027 16:30:18 +0000
asID: 136787
IP address blocks: 193.46.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:0d:ad:8d:7c:30:38:61:7a:81:6b:fe:b4:8d:32:f1:4f:16:8b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:18 2026 GMT
Not After : Oct 22 16:30:18 2027 GMT
Subject: CN=E25D62E7DFC12A0773894770077D5ABC68C44CC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:14:1b:f6:ab:77:88:8b:0d:76:01:7d:a3:
e2:ea:0e:f4:70:79:8c:69:28:5c:37:be:ea:52:2c:
d4:38:de:4c:68:58:a9:fb:d6:b0:68:51:51:25:b5:
93:ff:cc:5e:01:1f:2b:07:d9:ca:17:88:45:3a:fd:
11:7f:33:b5:ef:1c:2e:1b:6a:61:87:0e:e1:69:fc:
b1:11:90:9f:bb:23:5d:49:89:12:24:e3:5b:fa:d2:
44:e5:71:65:2d:6f:ac:82:8b:bb:27:ee:1b:f3:9e:
7e:6f:a9:42:d3:ce:aa:d3:6c:86:01:96:99:af:25:
27:60:c4:81:c6:a1:d2:3e:ec:d0:a2:cc:e1:9c:7e:
e9:30:a8:9c:10:ce:af:05:1e:f9:75:83:df:23:f4:
63:fe:c9:cd:ff:c8:c6:4d:09:eb:4e:8b:6b:32:6e:
f1:c2:5c:d4:3d:39:18:f5:57:12:d6:95:73:76:2b:
59:27:af:1a:01:3f:6e:bd:dc:03:37:40:81:7c:e3:
16:6f:cc:c7:69:54:52:65:46:fe:32:35:26:61:de:
5b:2a:34:7e:72:74:82:52:27:16:5b:51:92:55:e5:
bd:1b:ea:c9:1b:12:71:0b:2f:22:22:4b:53:0f:d3:
f0:b8:2b:ca:be:0a:97:a6:1b:02:04:47:d4:34:8d:
94:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5D:62:E7:DF:C1:2A:07:73:89:47:70:07:7D:5A:BC:68:C4:4C:C2
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:6c:21:de:16:2d:1a:49:ee:31:1d:eb:39:d6:52:65:d1:61:
7d:e9:3e:50:6e:64:0a:94:d7:27:1d:67:83:0d:93:da:91:d8:
d6:52:b9:aa:ac:89:df:86:1c:ab:b8:1a:b2:c4:a9:77:50:98:
f9:6c:5c:45:a4:76:3d:24:7b:9e:87:68:f8:cc:aa:48:d4:15:
1c:d2:02:f6:7c:b2:e2:b4:51:0f:3c:26:88:b1:8d:9a:39:3a:
f3:f2:21:40:c4:f6:4c:23:cd:ef:a0:95:e9:4f:d1:39:ca:e3:
5b:8a:72:f0:b0:32:56:18:35:d6:48:88:c5:ab:20:51:66:25:
c7:c9:58:e3:05:4c:92:d2:8d:39:fa:51:1a:ea:4f:ee:2e:b5:
8b:77:9d:ec:0a:e7:49:f4:8a:96:8f:2e:ba:fa:3b:fa:53:d7:
9d:2f:61:55:bc:79:a5:51:9c:57:70:2e:23:de:38:ed:22:f3:
ca:86:f9:5e:95:16:a9:8f:fa:a4:b0:cc:83:b6:d5:87:a6:63:
38:f9:f8:33:1f:e7:fd:89:e8:3e:f9:c7:68:ba:a0:8d:b9:d8:
66:7a:5b:67:5a:78:e1:75:ff:7d:dc:e9:bc:51:c8:fd:c6:bc:
c7:58:a8:41:4a:25:90:aa:1d:fe:0b:56:b4:14:bd:30:86:ce:
b8:82:76:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 01:51:42 2026 by rpki-client