Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234332e302f32342d3332203d3e203531313637.roa
File: 3139332e34362e3234332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: yoHc3YlECUYlaV41S5YjSyYWY7HB8UL3npPW82PPkbY=
Subject key identifier: 9D:9A:BC:74:6C:55:32:E9:A1:CA:31:A7:F5:31:93:65:15:E1:41:21
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0702A8B87B3FA7CE9077133D4E9A6E6B8C1E6432
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234332e302f32342d3332203d3e203531313637.roa
Signing time: Fri 23 Oct 2026 16:30:21 +0000
ROA not before: Fri 23 Oct 2026 16:25:21 +0000
ROA not after: Fri 22 Oct 2027 16:30:21 +0000
asID: 51167
IP address blocks: 193.46.243.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:02:a8:b8:7b:3f:a7:ce:90:77:13:3d:4e:9a:6e:6b:8c:1e:64:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:21 2026 GMT
Not After : Oct 22 16:30:21 2027 GMT
Subject: CN=9D9ABC746C5532E9A1CA31A7F531936515E14121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:15:8a:4f:73:3b:f2:ca:0f:ab:2c:c2:87:
88:72:a2:1b:9c:64:ff:9a:cc:5c:b7:d9:5a:7a:bc:
05:2f:04:e9:c6:dc:49:29:d1:bc:ae:7c:52:36:ec:
88:74:2f:1f:d7:e1:84:27:da:12:0e:1d:de:09:b6:
7a:5b:3d:1e:89:1a:63:cb:01:fb:3b:66:7f:1d:f7:
3e:dd:dd:a0:1f:b1:a6:eb:c7:85:a6:18:28:f1:68:
8a:4a:7c:81:cc:b1:cc:6c:bc:7b:98:7e:36:95:b1:
84:6b:08:2f:5c:fb:26:73:62:bd:5b:14:6c:cd:f5:
ec:4e:da:2d:6e:36:e8:a7:10:16:01:c3:12:43:32:
97:8e:20:32:bf:3e:49:dd:81:a9:76:44:a4:97:47:
b8:b5:fb:39:6f:f4:de:45:1b:78:e8:ec:29:3a:96:
dd:30:72:b0:62:fb:38:cd:bc:3d:23:1e:8e:97:22:
2a:79:4a:bf:ef:95:17:2c:5f:85:f4:0a:57:0a:ab:
6b:6f:2e:e8:c4:c9:71:8b:d2:80:77:f4:e7:e7:db:
30:35:59:da:04:1c:47:8a:eb:d2:fe:72:ee:7b:58:
24:7a:b0:a1:c1:a6:23:e2:c4:18:98:6c:c7:3f:8a:
d6:d3:32:43:47:a0:1d:f8:86:56:e1:b3:d7:cb:c4:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9A:BC:74:6C:55:32:E9:A1:CA:31:A7:F5:31:93:65:15:E1:41:21
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.243.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b0:8d:4a:bc:f4:3c:2e:f5:21:bc:d6:18:42:95:2a:5a:e7:
7e:d6:3f:bb:f6:44:6e:08:3c:ae:a1:54:a2:c3:62:96:27:2c:
b9:e5:3f:ce:59:dc:f0:24:c1:11:3e:6b:71:c2:d7:d8:c9:04:
61:11:1e:81:0d:ce:07:8c:71:98:79:42:89:27:df:d3:e1:03:
6d:0c:37:c5:a2:0c:79:f9:f6:b9:58:e5:13:dd:84:0f:68:cf:
24:4c:78:4e:b2:46:71:70:28:40:94:16:86:09:30:5c:43:6c:
13:c5:62:f2:9f:35:5e:f7:52:db:ed:78:9d:e4:58:b8:bb:4d:
87:9e:e4:49:59:c2:1d:80:b5:9f:5f:ab:e5:64:54:23:0a:76:
0f:b4:b6:0d:95:ea:ee:8b:38:66:c0:67:30:48:a9:8e:7b:a3:
98:11:3d:89:7a:28:72:46:06:a3:2a:be:4f:d5:b3:e5:5e:20:
0f:24:49:88:94:93:37:c3:3c:ee:4b:5b:86:61:c2:d1:f8:bb:
9a:c3:3d:35:31:10:8a:88:60:12:0c:0b:1a:c2:55:fb:f9:bf:
07:0e:5f:22:11:e0:2e:19:88:cb:7e:3c:0a:8c:dd:bb:72:7b:
0a:e3:3e:17:61:6e:af:96:ac:09:ee:ff:72:e4:15:99:96:b1:
d5:39:9a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:41:00 2026 by rpki-client