Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e35382e3138392e302f32342d3234203d3e20323136323533.roa
File: 3139332e35382e3138392e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: B23hQ1Y1O5zcurZNFNT1DPckWZMjOu4m9KhOQb49SeA=
Subject key identifier: 2F:49:E1:63:F0:4F:5F:C1:54:B7:FA:46:78:B2:D5:1A:CD:6F:19:27
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 20A3F29AD3ACB4CB1509173DAB8534B9B88714FD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e35382e3138392e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:03 +0000
ROA not before: Fri 16 Oct 2026 18:44:03 +0000
ROA not after: Fri 15 Oct 2027 18:49:03 +0000
asID: 216253
IP address blocks: 193.58.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a3:f2:9a:d3:ac:b4:cb:15:09:17:3d:ab:85:34:b9:b8:87:14:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:03 2026 GMT
Not After : Oct 15 18:49:03 2027 GMT
Subject: CN=2F49E163F04F5FC154B7FA4678B2D51ACD6F1927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:61:3c:4e:9e:23:f9:6e:73:a9:fa:d8:38:
69:bb:94:2f:8a:6a:ad:3a:6e:bf:ab:cf:3e:14:7f:
41:bc:6b:4b:58:a5:24:78:b9:43:d3:23:dd:67:ed:
3f:31:06:61:a6:73:f9:3d:f5:29:62:40:90:97:68:
73:42:b8:3a:9c:fe:e3:a3:49:11:ce:e3:81:7a:80:
8b:34:d6:68:89:3b:a5:fd:3b:e2:0e:dc:fa:87:cf:
be:b3:7f:ae:1d:8b:fe:0c:76:ad:3b:d2:8f:90:13:
2d:19:39:d2:49:9d:af:86:2b:96:c0:3f:b1:11:21:
6d:56:3c:7c:3f:16:a7:f6:7c:3f:17:75:e3:01:7d:
eb:c1:45:48:64:56:27:ab:4b:d1:f1:dc:87:e0:a7:
72:0e:1f:d4:38:95:7a:ca:cb:8f:8d:29:57:e9:d0:
67:02:8e:a9:1e:8a:9e:23:30:ee:4f:58:66:cc:66:
7c:4f:97:e4:32:f5:bd:d8:40:c1:cb:e5:d1:5e:0b:
3e:5b:03:d2:ec:86:5a:5b:a3:e7:9e:a5:89:a0:14:
e7:11:7f:23:97:a1:41:c8:2e:aa:e1:27:d8:14:2a:
0a:6b:b9:56:b3:fd:f1:6b:25:10:0a:53:26:04:60:
aa:2a:30:b2:00:e4:dd:40:12:b7:f1:8b:60:7a:52:
14:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:49:E1:63:F0:4F:5F:C1:54:B7:FA:46:78:B2:D5:1A:CD:6F:19:27
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e35382e3138392e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.189.0/24
Signature Algorithm: sha256WithRSAEncryption
48:85:4e:fd:7e:be:ce:f9:97:ab:0a:36:36:b4:96:c9:6e:f5:
aa:23:35:37:3a:ec:08:f0:9e:15:bb:a0:cc:7d:bc:ee:3c:78:
78:50:72:97:d5:19:26:3f:80:c7:21:45:c3:0c:ae:98:72:ee:
fe:22:dc:a6:d8:7a:b4:f4:1a:a1:8d:7f:f2:ab:51:37:80:a6:
e8:1c:74:e1:7d:c1:62:bd:40:f6:1d:40:a6:47:67:38:e1:90:
a5:aa:b4:24:12:80:50:48:32:4a:88:45:55:e5:f0:d9:28:2e:
04:f2:a3:ab:e6:c7:62:d1:57:5a:dc:cd:d4:44:f0:05:a0:85:
2b:54:2c:1f:12:3e:ac:72:03:e4:7b:61:1e:35:e3:8d:21:fe:
cf:73:c6:10:f1:9c:c5:a4:6f:82:98:3c:43:51:e1:0c:2a:20:
96:2d:e3:55:6c:e0:a2:2c:4c:46:d9:73:bc:da:44:a6:09:38:
31:4e:a1:94:0e:c5:74:93:bf:6c:3a:6f:c6:28:36:75:1a:3b:
78:d8:31:c3:61:f5:0d:f5:e3:49:c4:5e:83:1b:65:10:0f:b9:
26:a9:95:8f:b2:8f:21:83:8d:03:58:f2:b0:96:aa:72:05:28:
d0:7d:24:c8:77:02:19:c8:80:47:14:47:11:87:42:7b:53:36:
b6:ac:5a:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:47 2026 by rpki-client