Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e35382e3138382e302f32342d3234203d3e20323136323533.roa
File: 3139332e35382e3138382e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: fHO3UEU7oDHsO5VehVmKkSuCwthKDtNAvjavWw8+vMw=
Subject key identifier: 17:DC:E8:65:17:89:D8:FB:C4:E8:A9:A2:94:B6:80:59:76:93:C7:23
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 43ADFC6AB829F777C27C68CD618586D602E68028
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e35382e3138382e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:01 +0000
ROA not before: Fri 16 Oct 2026 18:44:01 +0000
ROA not after: Fri 15 Oct 2027 18:49:01 +0000
asID: 216253
IP address blocks: 193.58.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ad:fc:6a:b8:29:f7:77:c2:7c:68:cd:61:85:86:d6:02:e6:80:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:01 2026 GMT
Not After : Oct 15 18:49:01 2027 GMT
Subject: CN=17DCE8651789D8FBC4E8A9A294B680597693C723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:a1:52:25:0f:97:e5:7e:89:bf:6a:fe:a8:
29:ba:23:bd:b6:54:94:96:90:79:d0:ab:d5:55:7a:
97:2e:24:b6:f6:65:1f:a2:ee:3c:f1:bd:be:92:4d:
b0:49:b3:a0:14:08:b3:c7:d6:a1:14:0b:43:11:42:
99:94:ac:f3:c8:27:5f:3b:99:2b:f3:2a:fe:99:5f:
c3:8c:81:f8:39:0b:b3:6d:a6:11:56:52:14:6f:9e:
03:0a:2c:fc:1d:75:84:21:aa:90:c7:da:1e:ec:db:
8e:82:42:b5:7b:31:f4:ff:dd:b7:12:c7:a3:ba:5d:
f7:41:70:9c:ea:d1:7f:d2:b5:89:71:3a:44:24:db:
24:7b:2b:46:58:ec:07:66:4f:6b:a6:b3:22:78:3c:
c9:5a:c8:03:f0:21:a3:5b:4b:0a:40:fe:0a:eb:93:
ba:14:23:90:d9:81:97:f8:9c:24:07:27:74:cd:e7:
96:d8:5b:5b:58:5d:02:d1:65:43:53:fc:0b:b2:2e:
ff:01:f2:dd:ee:9f:4f:48:af:3b:cf:b5:f9:be:49:
bb:58:40:39:32:7c:9a:5a:a6:52:b7:f2:91:ba:ae:
f1:23:99:0b:5e:af:77:d4:e4:e3:7a:03:00:d4:ad:
ab:d6:15:12:e5:58:45:af:6e:77:72:fe:03:ca:98:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DC:E8:65:17:89:D8:FB:C4:E8:A9:A2:94:B6:80:59:76:93:C7:23
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e35382e3138382e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.188.0/24
Signature Algorithm: sha256WithRSAEncryption
98:64:78:f7:c7:6f:53:9e:f6:27:d9:32:52:11:80:0f:57:09:
98:c3:f7:c2:7d:f7:80:38:41:94:f2:15:ff:1b:01:1c:8b:6d:
77:2a:6e:eb:c4:4b:61:fe:21:8c:f5:4b:43:0e:29:08:17:02:
07:8f:a3:30:14:52:7e:6f:a6:03:61:72:c6:e3:ca:2a:a7:a1:
a9:f5:63:75:c8:72:b8:09:96:64:18:06:59:9e:d5:85:d3:03:
bc:00:2a:d2:86:90:bf:fe:fd:1a:50:eb:84:1e:b0:84:b2:16:
85:bb:5f:a1:c5:3e:ff:98:8c:20:02:dc:23:6e:a6:ef:24:94:
30:67:4e:8d:34:68:84:c2:f2:fa:42:42:82:32:08:7e:20:3e:
f8:7b:65:47:17:be:b6:41:aa:46:f0:e8:1c:b1:da:a4:01:94:
54:ad:01:0a:27:99:be:0f:94:47:f8:e5:f3:5e:7c:57:7a:28:
2f:99:2b:f9:8a:ff:1b:cd:1a:51:0f:57:09:3c:e8:90:51:51:
41:38:c7:b9:5d:5f:2e:b8:46:f2:9d:fd:ec:38:81:1d:99:35:
b3:b4:3a:95:57:21:5e:e8:56:05:55:b8:81:15:20:5f:18:c6:
64:c9:68:ab:7e:22:f9:c4:e3:f0:e8:e2:31:aa:36:ca:0d:e7:
b8:93:9a:54
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUQ638argp93fCfGjNYYWG1gLmgCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMTYxODQ0MDFaFw0yNzEwMTUxODQ5MDFaMDMxMTAvBgNV
BAMTKDE3RENFODY1MTc4OUQ4RkJDNEU4QTlBMjk0QjY4MDU5NzY5M0M3MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0qFSJQ+X5X6Jv2r+qCm6I722
VJSWkHnQq9VVepcuJLb2ZR+i7jzxvb6STbBJs6AUCLPH1qEUC0MRQpmUrPPIJ187
mSvzKv6ZX8OMgfg5C7NtphFWUhRvngMKLPwddYQhqpDH2h7s246CQrV7MfT/3bcS
x6O6XfdBcJzq0X/StYlxOkQk2yR7K0ZY7AdmT2umsyJ4PMlayAPwIaNbSwpA/grr
k7oUI5DZgZf4nCQHJ3TN55bYW1tYXQLRZUNT/AuyLv8B8t3un09IrzvPtfm+SbtY
QDkyfJpaplK38pG6rvEjmQter3fU5ON6AwDUravWFRLlWEWvbndy/gPKmOYvAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUF9zoZReJ2PvE6KmilLaAWXaTxyMwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTM1Mzgy
ZTMxMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNjMyMzUzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAME6vDANBgkqhkiG9w0BAQsFAAOCAQEAmGR498dvU572J9kyUhGAD1cJ
mMP3wn33gDhBlPIV/xsBHIttdypu68RLYf4hjPVLQw4pCBcCB4+jMBRSfm+mA2Fy
xuPKKqehqfVjdchyuAmWZBgGWZ7VhdMDvAAq0oaQv/79GlDrhB6whLIWhbtfocU+
/5iMIALcI26m7ySUMGdOjTRohMLy+kJCgjIIfiA++HtlRxe+tkGqRvDoHLHapAGU
VK0BCieZvg+UR/jl8158V3ooL5kr+Yr/G80aUQ9XCTzokFFRQTjHuV1fLrhG8p39
7DiBHZk1s7Q6lVchXuhWBVW4gRUgXxjGZMloq34i+cTj8OjiMao2yg3nuJOaVA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:44 2026 by rpki-client