Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3134332e302f32342d3234203d3e20313437323831.roa
File: 3139342e3131302e3134332e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: hb7GKQyUBbKOLIbUw/bB5i3zxTJbn/FqrHEExSR9K70=
Subject key identifier: C1:61:28:98:B0:EA:48:71:DC:4E:E1:15:99:A6:09:F3:97:B0:1C:8E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7FC321A1BCFBAAC950D00A051026C2EAB635E214
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3134332e302f32342d3234203d3e20313437323831.roa
Signing time: Thu 08 Oct 2026 11:35:08 +0000
ROA not before: Thu 08 Oct 2026 11:30:08 +0000
ROA not after: Thu 07 Oct 2027 11:35:08 +0000
asID: 147281
IP address blocks: 194.110.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 15:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c3:21:a1:bc:fb:aa:c9:50:d0:0a:05:10:26:c2:ea:b6:35:e2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 8 11:30:08 2026 GMT
Not After : Oct 7 11:35:08 2027 GMT
Subject: CN=C1612898B0EA4871DC4EE11599A609F397B01C8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:01:80:ba:36:f8:7e:28:b7:3c:18:dd:05:b7:
e0:49:74:1b:29:d2:e4:50:6d:82:e9:4b:37:a2:5e:
83:e9:ef:b2:af:7e:ee:a0:a7:6c:5e:06:1a:ef:22:
b2:f5:17:98:cb:ba:47:d5:a0:cc:ee:3d:1d:b9:eb:
e6:6d:65:1f:db:ec:10:1b:7a:0c:02:97:0d:dd:df:
f1:6e:25:8a:b8:09:44:cf:f0:54:a7:85:09:a2:82:
0c:1b:97:75:6c:ed:3d:6e:8d:a8:29:e1:f9:a5:44:
a4:d3:c7:a9:43:dc:c8:0a:19:bf:e7:a0:34:be:30:
b1:1a:6d:a0:60:ff:91:56:af:5d:53:4f:c2:20:89:
11:2d:1a:37:b6:63:b2:25:66:74:d0:88:d5:64:61:
0b:3c:c2:c2:96:10:40:23:fd:6d:06:3d:66:90:1d:
c5:eb:6d:cf:e5:12:c9:85:bb:22:18:3e:28:88:e5:
99:bd:ac:66:5c:84:d7:97:5b:e3:02:96:30:6e:ce:
5b:42:1a:9e:c9:1b:0a:c0:f9:c1:b7:61:87:e2:a4:
74:e4:dc:8c:3f:90:0f:9c:b9:55:92:73:67:71:4f:
d6:64:7f:26:83:c6:43:b3:ca:f0:18:05:32:a2:98:
72:3d:a5:66:b3:49:5b:63:be:b2:43:37:ed:d4:db:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:28:98:B0:EA:48:71:DC:4E:E1:15:99:A6:09:F3:97:B0:1C:8E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3134332e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.143.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2d:81:ae:5e:e6:ea:73:ca:57:81:41:50:96:c7:71:8e:1b:
80:cb:27:22:8b:8e:3f:67:cd:a1:da:1d:f1:a3:ad:1c:ab:e0:
f2:b1:cf:34:77:2d:c1:c0:2a:7d:0e:ec:00:b5:9f:2f:83:a0:
26:df:12:ad:ff:27:b7:3b:69:f4:0d:f2:bb:06:eb:bc:88:b7:
eb:ed:07:a8:e6:ff:45:bc:bc:35:67:93:a4:67:fe:e3:29:fd:
0d:99:2f:eb:59:c6:97:0b:45:34:b4:8b:38:31:34:77:d8:25:
74:98:98:23:9f:9d:cd:b6:88:0d:f9:55:20:85:20:4c:47:f9:
40:9c:f6:4a:7f:ee:29:5b:fb:51:4a:9d:b7:f2:7d:58:c3:9a:
1b:41:bf:54:24:36:52:d5:55:98:60:77:ce:09:f7:97:be:76:
71:2b:b5:44:33:7e:4e:6d:bb:20:1e:5f:ce:31:d6:b0:e8:12:
82:0f:ca:31:1b:f7:c5:53:38:7c:d7:56:bf:b4:81:82:87:9f:
7a:c9:9a:17:45:85:4c:a1:a9:5e:8f:7b:b3:5c:65:cd:ac:3a:
91:c4:ea:2a:76:6a:aa:ab:1c:be:5f:ed:b9:ac:03:d6:ab:f5:
18:70:f5:2e:00:02:84:28:00:41:78:6b:f1:86:39:36:a4:fc:
90:b2:ae:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:52:25 2026 by rpki-client