Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3134332e302f32342d3234203d3e20313532373236.roa
File: 3139342e3131302e3134332e302f32342d3234203d3e20313532373236.roa (raw, json)
Hash identifier: y8VUyUEJhM4JV/cjp0ZYOLvfciqk6EXGGGEcjEY+zzA=
Subject key identifier: 1F:2B:BD:1A:74:2C:B5:83:3B:68:BE:64:A6:13:D0:25:3B:7A:73:B4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1FFA8685CBE5C8CE8AB6C68460BAE3DDB8041AF7
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3134332e302f32342d3234203d3e20313532373236.roa
Signing time: Mon 12 Oct 2026 13:43:21 +0000
ROA not before: Mon 12 Oct 2026 13:38:21 +0000
ROA not after: Mon 11 Oct 2027 13:43:21 +0000
asID: 152726
IP address blocks: 194.110.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:fa:86:85:cb:e5:c8:ce:8a:b6:c6:84:60:ba:e3:dd:b8:04:1a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 12 13:38:21 2026 GMT
Not After : Oct 11 13:43:21 2027 GMT
Subject: CN=1F2BBD1A742CB5833B68BE64A613D0253B7A73B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:57:71:06:1d:21:51:dc:d5:35:99:12:44:7e:
b5:be:fe:64:53:f8:e7:88:d4:fd:5b:ef:8c:f6:42:
77:12:ee:36:86:10:93:08:58:dc:b7:9f:9e:96:4d:
3c:30:73:d1:0f:f0:2e:26:34:04:39:07:6d:4b:bf:
50:8a:d9:5e:42:11:94:ab:af:d3:41:1d:92:49:ae:
e8:2d:9b:c0:f6:00:f7:a2:bb:10:7f:a0:20:30:a1:
1f:a9:21:f6:fd:8b:ff:e3:88:6f:12:24:a7:81:42:
42:05:0f:08:49:a4:35:30:74:e5:b0:85:01:86:9d:
93:4f:e0:d1:79:4a:7d:a3:5d:57:d2:28:aa:8a:73:
30:e3:16:71:a4:d8:d6:80:99:fa:3c:ca:34:ec:71:
ee:c8:bd:1e:12:aa:31:4c:a9:a0:1b:b9:c0:a9:69:
16:08:56:c9:1f:31:31:e2:7f:88:29:24:08:a5:8e:
cf:a1:65:d1:af:d4:10:4e:f4:74:93:56:8d:1a:d4:
fe:c9:0c:83:52:a8:f3:66:eb:26:3a:98:d1:88:07:
43:b2:21:cf:04:58:54:71:39:f9:70:57:15:6f:6b:
a3:f1:bf:60:f5:f1:a7:fa:82:5c:7b:4d:b9:f2:0d:
af:cd:02:18:d5:fd:9c:4b:e3:1c:e5:86:7b:49:ba:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2B:BD:1A:74:2C:B5:83:3B:68:BE:64:A6:13:D0:25:3B:7A:73:B4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3134332e302f32342d3234203d3e20313532373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.143.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:8f:9d:6e:62:b2:be:d0:93:33:42:15:fa:cb:de:12:79:74:
96:4a:86:70:74:23:4a:e1:46:5e:5b:ef:ca:63:54:96:f6:8e:
a5:75:3a:b2:b3:ce:71:5a:d4:ab:cd:7c:90:3a:fa:c0:86:b2:
7d:94:a5:98:78:2b:5b:5b:22:32:d7:23:74:2f:ab:b0:9a:2a:
59:d9:ae:e5:ad:b1:69:33:21:49:58:c8:8a:b3:e8:a8:e0:8b:
e9:bd:04:93:b2:2e:09:e2:34:d0:f1:01:d4:32:20:eb:1a:af:
3b:5c:73:2d:9b:7d:07:be:1b:1f:98:8f:50:31:b6:e6:b4:bb:
e7:ba:14:4f:fe:57:c7:db:b7:12:5c:02:27:7e:32:83:31:59:
c4:82:52:04:e6:0b:87:cb:83:9e:f7:31:b4:5b:92:c7:be:18:
4b:f6:e7:21:6c:e2:3b:1a:28:ff:10:83:91:0f:40:ce:8c:eb:
02:43:79:aa:c5:07:40:0e:24:5d:d9:8f:ae:d6:d7:7d:ef:66:
43:b8:3e:7a:a1:7c:c5:63:f5:0e:2b:d0:18:9e:50:b6:2f:7d:
d4:74:17:f9:9e:fe:b3:d8:e3:e1:57:97:96:4e:30:37:38:52:
44:7f:fb:07:05:95:7d:73:50:33:2a:dc:0c:73:ef:c4:63:98:
f2:a0:66:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:19 2026 by rpki-client