Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e35382e3139312e302f32342d3234203d3e20323136323533.roa
File: 3139332e35382e3139312e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: JuwVuEjO97emAG3b75zITf5TdQB/Uvpu1N5CI5+Z6e0=
Subject key identifier: E0:4A:C8:B4:37:1D:9A:BD:F1:5F:5E:35:33:1A:06:E8:00:71:96:F3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2D6190A4009E9432A93857756F1536C3F9C52B83
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e35382e3139312e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:05 +0000
ROA not before: Fri 16 Oct 2026 18:44:05 +0000
ROA not after: Fri 15 Oct 2027 18:49:05 +0000
asID: 216253
IP address blocks: 193.58.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:61:90:a4:00:9e:94:32:a9:38:57:75:6f:15:36:c3:f9:c5:2b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:44:05 2026 GMT
Not After : Oct 15 18:49:05 2027 GMT
Subject: CN=E04AC8B4371D9ABDF15F5E35331A06E8007196F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:2e:90:ef:7a:43:d1:07:67:cb:6c:fd:8a:
07:53:a7:65:cc:10:0b:e2:07:e7:91:d2:7e:eb:9f:
e0:b3:b3:de:1a:24:70:94:0e:c5:8a:30:c1:4c:bf:
be:fa:8e:18:5e:39:01:96:8f:48:29:3d:64:bb:21:
30:12:14:a9:e2:1d:19:f2:99:06:5b:fa:e1:2f:b6:
88:53:55:e9:0b:c8:69:c9:7e:3d:13:9c:06:47:b6:
4b:91:ce:e3:f4:ef:60:53:75:22:cd:2c:fc:96:f9:
7a:82:82:41:28:77:ac:70:a4:13:bc:f9:52:5f:f7:
6e:ce:71:27:f2:96:d8:bc:85:46:6a:df:5c:72:6c:
6c:01:bd:a0:27:8f:35:99:0e:06:a3:9b:1d:61:66:
66:d8:ca:48:c8:18:97:52:d9:4f:31:89:cf:39:86:
d9:54:a4:a0:27:70:87:52:df:b1:3e:22:01:a4:0e:
c6:a3:b0:c5:c7:df:69:c6:58:e0:12:d8:e4:e2:2b:
4a:d8:a0:9e:5c:60:9d:ba:1b:d3:a8:7a:83:b0:af:
03:93:03:79:c4:1b:77:ef:27:e4:dc:ae:52:0c:cf:
e1:44:e1:62:85:cb:52:4c:41:91:73:1c:96:31:82:
42:70:ee:2d:b7:08:f0:0e:15:fe:14:01:e5:7c:aa:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4A:C8:B4:37:1D:9A:BD:F1:5F:5E:35:33:1A:06:E8:00:71:96:F3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e35382e3139312e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fa:f8:89:31:96:67:92:86:f2:57:4f:52:6b:79:8a:75:6c:
8e:fd:2e:dd:b8:da:1d:f8:cb:e1:aa:d9:24:9b:67:e7:8c:8b:
a5:7f:51:bc:e6:48:2c:72:49:90:7e:a1:03:9f:bd:98:59:75:
49:db:07:da:17:1b:92:1c:2d:ca:23:46:ea:6c:52:c6:32:ae:
60:43:7f:82:1d:cf:34:15:5a:82:c2:44:45:71:07:d2:4f:d9:
c3:6d:57:94:f8:74:73:52:62:93:1e:9f:4b:b2:01:58:72:5f:
52:bd:9e:42:7b:79:40:71:c3:1e:1d:41:4c:da:53:14:3b:18:
72:ec:17:f6:87:27:57:9e:ac:88:0e:64:17:a6:3b:83:2d:8a:
0f:4b:07:5b:b9:19:8a:70:65:ff:01:04:29:aa:cd:0c:3d:ab:
00:e1:88:92:18:3e:e6:81:57:32:30:24:e8:16:3f:c6:03:63:
44:39:8a:6a:62:2a:96:91:06:20:d7:ad:93:79:ce:29:be:4f:
81:4a:aa:c4:ac:ac:6b:5c:65:07:75:11:c1:c6:65:47:f5:9f:
a0:65:cb:87:e5:45:fc:a3:24:4a:6e:cf:09:9d:0d:7c:74:64:
83:c7:00:85:21:a5:3d:9c:7f:7e:ab:3c:d1:95:c9:bb:de:90:
91:01:09:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:10:34 2026 by rpki-client