Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e35382e3139302e302f32342d3234203d3e20323136323533.roa
File: 3139332e35382e3139302e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: ViC2k31ptUJr17IO1CDuh6vdvPljoqcEB1gSMwGSL4c=
Subject key identifier: 43:DD:C8:86:D7:C5:84:21:E0:C2:3E:D0:32:ED:EC:5D:2B:96:87:A7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 33059F5225AD97A60CF2BD19BB0199FD47FBB737
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e35382e3139302e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:04 +0000
ROA not before: Fri 16 Oct 2026 18:44:04 +0000
ROA not after: Fri 15 Oct 2027 18:49:04 +0000
asID: 216253
IP address blocks: 193.58.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:05:9f:52:25:ad:97:a6:0c:f2:bd:19:bb:01:99:fd:47:fb:b7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:04 2026 GMT
Not After : Oct 15 18:49:04 2027 GMT
Subject: CN=43DDC886D7C58421E0C23ED032EDEC5D2B9687A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:b9:05:36:8f:20:5a:05:00:77:42:d2:f7:
55:e5:09:ab:9e:23:f2:b2:8f:3b:83:f9:b8:69:58:
00:7a:ed:94:f6:18:19:00:01:2b:f2:ce:25:21:06:
d7:ee:16:2b:f7:15:07:d3:30:83:ce:97:b2:25:a3:
8f:fc:64:82:ea:53:64:a2:6a:32:c3:04:34:61:53:
6e:f3:8f:de:b9:9c:5f:83:b1:b7:8e:31:ad:c8:d3:
89:08:12:da:eb:66:b4:c4:41:3f:80:53:de:42:73:
30:07:f5:fc:1c:2c:2c:cd:90:08:5c:c1:0b:7b:59:
83:f7:cb:55:7c:66:29:a5:27:f0:5f:29:6b:2b:52:
eb:e7:64:5a:e7:20:e7:3d:37:c8:d9:fa:a5:f6:a3:
12:36:0f:f2:25:42:0f:17:6d:60:29:d2:88:3e:dc:
5d:6b:7c:9a:7e:4d:40:71:44:28:07:5d:4c:f6:a8:
a5:ee:af:0b:19:81:93:9d:55:87:5c:7b:9c:c0:a6:
98:f3:e3:5f:b0:67:eb:ad:86:1c:92:62:92:ac:ea:
2b:87:2a:aa:b4:c3:2f:64:37:bb:42:08:85:90:4b:
0a:e2:54:59:64:6b:2f:b4:f2:32:42:ba:1c:b9:86:
f2:1f:1a:a9:fc:94:71:8e:bb:d0:63:f1:8f:1d:f9:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:C8:86:D7:C5:84:21:E0:C2:3E:D0:32:ED:EC:5D:2B:96:87:A7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e35382e3139302e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.190.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2c:ad:5e:72:3a:31:a2:4e:3e:19:f1:9b:4e:a3:eb:ce:12:
85:a3:68:18:e3:9a:6b:50:73:ff:13:d4:0b:f2:f4:a8:70:9d:
83:1f:9d:5f:90:f3:29:a4:54:83:2e:3e:ee:53:fe:80:e2:20:
85:7e:00:14:e2:c4:9b:79:b3:23:40:d9:97:e8:8d:45:6c:87:
a8:82:84:6f:88:05:e9:25:20:52:a2:2d:aa:9b:16:54:90:59:
a4:ab:7e:58:70:cc:0b:cd:78:4e:14:88:ec:97:59:70:4c:59:
d7:9f:ff:cb:80:60:40:97:a6:c6:33:4a:3f:48:9e:af:e1:ac:
78:5f:5e:0b:52:19:a7:d5:09:dc:e7:f2:bc:6c:89:7e:52:9a:
cf:95:77:3f:04:d8:01:55:56:b9:83:0a:24:db:97:98:34:15:
5d:db:90:7d:57:59:02:f5:e8:cc:5d:d5:72:46:71:cc:f8:21:
6f:e6:0b:c8:f0:c5:1b:2f:3d:6c:45:03:5f:00:81:31:72:1a:
dd:a7:dc:15:36:a0:d6:d6:73:a5:26:e4:33:18:1a:db:b1:9c:
24:75:51:c1:c7:60:2a:21:a3:ca:6b:ac:7f:d5:82:4e:b5:e5:
4b:64:33:5d:7c:2b:ab:6c:38:32:21:5b:2c:e6:7e:54:f9:62:
55:57:b1:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:42 2026 by rpki-client