Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234322e302f32342d3234203d3e20313336373837.roa
File: 3139332e34362e3234322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: kLRAYXq4jK9NfE7NhKg0VRfAPnR+1kyMMVeGijRmqMg=
Subject key identifier: E7:C7:52:1F:47:3C:83:CD:EA:D2:10:F1:6B:A2:8F:39:AC:E9:10:87
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5048E39D59A89D527AA97E71F3EE1F23A8DB22F5
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:21 +0000
ROA not before: Fri 23 Oct 2026 16:25:21 +0000
ROA not after: Fri 22 Oct 2027 16:30:21 +0000
asID: 136787
IP address blocks: 193.46.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:48:e3:9d:59:a8:9d:52:7a:a9:7e:71:f3:ee:1f:23:a8:db:22:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:21 2026 GMT
Not After : Oct 22 16:30:21 2027 GMT
Subject: CN=E7C7521F473C83CDEAD210F16BA28F39ACE91087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:ee:73:b3:fd:00:de:7f:8b:b0:50:2f:83:
55:73:e5:38:2f:a4:01:85:f0:0e:8a:23:49:d6:a2:
2b:d5:b9:18:86:49:51:4e:b2:86:2f:09:3a:97:d9:
81:1e:b4:be:95:41:e4:22:a7:2c:a9:4a:f5:b2:df:
79:8e:aa:7a:5e:d6:b8:55:8f:d4:15:52:88:dd:2f:
18:64:2d:58:52:a6:60:97:5e:b2:72:c6:50:09:79:
71:7f:99:7c:49:70:06:84:94:7c:49:c9:52:63:88:
dc:43:de:79:e9:76:39:f3:20:0c:15:36:4f:73:06:
19:5a:3d:e7:d3:36:ad:83:37:b3:32:ea:49:66:19:
3a:8f:04:4e:2f:b4:62:e7:17:10:38:52:21:03:21:
4a:0f:a0:1d:9f:6f:e0:1c:ca:e9:a0:e9:94:a8:71:
82:94:f5:b7:32:da:10:c5:b6:6f:31:e9:45:00:c6:
d2:d5:3f:7e:a6:8c:5a:06:7f:a2:37:89:b2:93:a3:
70:41:69:90:7c:7d:84:16:b7:fd:c1:4d:a2:f7:cd:
0f:ce:4f:5c:a4:f7:a7:5c:a5:07:52:77:54:56:3c:
7a:11:bc:a3:75:91:f4:38:35:1e:00:96:a9:7a:c6:
0b:56:a8:78:35:91:c2:8e:64:4e:08:80:dd:ce:ab:
43:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C7:52:1F:47:3C:83:CD:EA:D2:10:F1:6B:A2:8F:39:AC:E9:10:87
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.242.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:6e:92:a6:51:26:5e:b9:2f:56:d3:16:5d:f2:0f:a3:2a:87:
ae:52:ab:0f:77:e3:c8:d9:74:e6:72:67:24:2c:59:e6:2c:7f:
5e:25:50:40:1f:c5:d2:99:73:c3:00:f8:ee:6b:b0:b7:a1:47:
6b:71:43:79:37:94:1f:9d:a7:7d:04:cd:c9:68:01:14:f1:0a:
af:cb:b0:1b:28:2c:c1:19:5d:51:aa:5d:c8:ae:51:e8:8a:92:
bb:6b:e3:1a:69:5b:ff:5a:5a:1b:a6:3a:ea:a5:b0:f1:9b:b1:
be:a8:26:53:84:9c:09:66:50:64:80:ac:1f:b6:39:28:94:31:
88:54:da:64:ee:4d:d1:2d:66:7b:f2:91:4d:a5:ae:72:a8:7d:
c4:e6:4f:6a:f2:f3:37:ce:c7:4b:4e:9b:c4:ab:1a:b3:f6:fa:
86:8d:88:a5:70:6f:6c:10:39:64:44:7b:63:b1:f6:88:3e:b7:
14:95:e8:3e:ba:90:0e:87:56:ed:c5:12:9a:46:ca:51:55:dd:
33:e7:e6:9b:30:76:fa:a2:4b:65:8b:64:30:f7:cf:0c:ce:40:
00:94:28:75:2f:0e:7e:9f:f6:8a:9c:6f:d7:8a:2e:e1:0e:2d:
3c:6d:f3:98:36:ba:af:cd:36:53:68:a8:f6:a8:48:79:1a:39:
e7:f3:97:48
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUUEjjnVmonVJ6qX5x8+4fI6jbIvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MjFaFw0yNzEwMjIxNjMwMjFaMDMxMTAvBgNV
BAMTKEU3Qzc1MjFGNDczQzgzQ0RFQUQyMTBGMTZCQTI4RjM5QUNFOTEwODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYP+5zs/0A3n+LsFAvg1Vz5Tgv
pAGF8A6KI0nWoivVuRiGSVFOsoYvCTqX2YEetL6VQeQipyypSvWy33mOqnpe1rhV
j9QVUojdLxhkLVhSpmCXXrJyxlAJeXF/mXxJcAaElHxJyVJjiNxD3nnpdjnzIAwV
Nk9zBhlaPefTNq2DN7My6klmGTqPBE4vtGLnFxA4UiEDIUoPoB2fb+Acyumg6ZSo
cYKU9bcy2hDFtm8x6UUAxtLVP36mjFoGf6I3ibKTo3BBaZB8fYQWt/3BTaL3zQ/O
T1yk96dcpQdSd1RWPHoRvKN1kfQ4NR4Alql6xgtWqHg1kcKOZE4IgN3Oq0NfAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQU58dSH0c8g83q0hDxa6KPOazpEIcwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTM0MzYy
ZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMEu8jANBgkqhkiG9w0BAQsFAAOCAQEAu26SplEmXrkvVtMWXfIPoyqH
rlKrD3fjyNl05nJnJCxZ5ix/XiVQQB/F0plzwwD47muwt6FHa3FDeTeUH52nfQTN
yWgBFPEKr8uwGygswRldUapdyK5R6IqSu2vjGmlb/1paG6Y66qWw8ZuxvqgmU4Sc
CWZQZICsH7Y5KJQxiFTaZO5N0S1me/KRTaWucqh9xOZPavLzN87HS06bxKsas/b6
ho2IpXBvbBA5ZER7Y7H2iD63FJXoPrqQDodW7cUSmkbKUVXdM+fmmzB2+qJLZYtk
MPfPDM5AAJQodS8Ofp/2ipxv14ou4Q4tPG3zmDa6r802U2io9qhIeRo55/OXSA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 15:35:53 2026 by rpki-client