Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3134332e302f32342d3234203d3e20383334.roa
File: 3139342e3131302e3134332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KFA8N3pxwZxwcyTA2LbIS65/AYSQlFxn2v8DmPKaPi4=
Subject key identifier: 7D:D2:FB:52:14:46:F5:63:72:21:7B:F2:98:E0:F8:A1:03:48:46:F0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 036B49D50FDCDD042B451E9AD46400A40C2D5A33
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3134332e302f32342d3234203d3e20383334.roa
Signing time: Sun 08 Nov 2026 18:50:51 +0000
ROA not before: Sun 08 Nov 2026 18:45:51 +0000
ROA not after: Sun 07 Nov 2027 18:50:51 +0000
asID: 834
IP address blocks: 194.110.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6b:49:d5:0f:dc:dd:04:2b:45:1e:9a:d4:64:00:a4:0c:2d:5a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 8 18:45:51 2026 GMT
Not After : Nov 7 18:50:51 2027 GMT
Subject: CN=7DD2FB521446F56372217BF298E0F8A1034846F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:25:30:16:ca:db:cb:91:df:18:b1:5d:c9:
b2:1f:72:03:92:52:32:a2:21:9e:85:61:e9:bc:bf:
ca:e7:f2:b8:32:85:8c:ce:47:ac:b5:6b:f6:66:bc:
2e:53:41:9e:2c:39:eb:a9:d8:d1:11:4c:2c:49:e9:
cd:69:ea:16:94:02:66:a9:50:12:3f:5a:85:f8:65:
bd:a8:45:1e:26:0a:cc:e9:c2:cc:87:70:9c:8c:a5:
b3:66:ce:bb:96:ff:c6:cb:08:3b:3c:dd:14:bd:54:
a2:98:3b:4a:97:c0:7c:11:a3:0f:8d:90:fa:aa:89:
f4:4e:13:76:bd:26:2e:6f:59:2a:39:d9:54:e3:a6:
d8:b1:5d:6e:58:77:f9:7b:3e:f3:0f:ec:05:09:c5:
ce:06:51:45:b7:1a:95:e4:31:60:75:5c:68:ae:a9:
9c:23:de:9c:95:a3:2e:8d:ee:0b:f9:29:1c:90:d1:
83:f9:d6:5c:4c:95:71:39:7f:07:a5:92:83:23:7a:
14:6b:6b:dc:72:0f:d4:c2:4e:e1:5a:84:9d:c4:43:
9c:ec:8c:58:42:ce:c4:e3:66:6a:ed:c0:65:ab:87:
96:9a:15:4f:5a:12:62:cc:9e:05:4b:20:ba:7f:9a:
78:59:6d:59:ee:15:4d:91:86:5e:d6:f4:55:a2:13:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:FB:52:14:46:F5:63:72:21:7B:F2:98:E0:F8:A1:03:48:46:F0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3134332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.143.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:30:f3:95:2c:ed:37:7f:8f:be:09:52:d4:70:57:bc:4c:97:
04:01:c8:7d:6d:96:4e:90:98:37:ce:e1:1d:8c:a7:f3:1e:59:
18:54:c3:49:7a:39:7e:b5:97:9b:81:b2:0d:73:99:f6:3a:85:
9c:72:07:46:04:4b:ef:fb:e5:7c:11:92:94:ca:f4:db:26:6e:
11:56:78:4c:4a:fd:f6:31:cf:96:e7:8e:28:e9:c4:63:1f:2b:
b6:49:63:f8:cb:d4:e1:cc:d8:16:8e:72:1a:12:2b:68:59:97:
47:6e:be:28:dc:58:e3:ad:82:cf:63:6d:19:75:d1:66:f0:47:
6a:bf:a6:6e:70:fb:81:b6:dc:5e:80:32:e3:2c:3b:c9:23:3b:
d0:dd:81:fb:11:49:50:d5:18:21:42:43:00:eb:1c:19:1b:f2:
bf:66:5d:fb:4c:d2:74:8f:d4:5c:4e:4f:ad:92:f8:da:c9:8e:
ed:c8:2c:36:e2:47:03:a4:90:43:96:56:26:01:9b:02:5d:f1:
4d:2b:73:e4:cc:d5:fa:ef:f0:73:86:5f:e2:78:94:9f:c2:8f:
0d:95:95:cf:8b:f5:1a:99:db:f4:b1:87:0e:3f:43:84:73:5d:
c2:89:7e:9c:a2:07:be:84:09:2f:00:93:50:36:59:56:a0:b2:
e7:ec:cc:b2
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUA2tJ1Q/c3QQrRR6a1GQApAwtWjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjExMDgxODQ1NTFaFw0yNzExMDcxODUwNTFaMDMxMTAvBgNV
BAMTKDdERDJGQjUyMTQ0NkY1NjM3MjIxN0JGMjk4RTBGOEExMDM0ODQ2RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpLyUwFsrby5HfGLFdybIfcgOS
UjKiIZ6FYem8v8rn8rgyhYzOR6y1a/ZmvC5TQZ4sOeup2NERTCxJ6c1p6haUAmap
UBI/WoX4Zb2oRR4mCszpwsyHcJyMpbNmzruW/8bLCDs83RS9VKKYO0qXwHwRow+N
kPqqifROE3a9Ji5vWSo52VTjptixXW5Yd/l7PvMP7AUJxc4GUUW3GpXkMWB1XGiu
qZwj3pyVoy6N7gv5KRyQ0YP51lxMlXE5fwelkoMjehRra9xyD9TCTuFahJ3EQ5zs
jFhCzsTjZmrtwGWrh5aaFU9aEmLMngVLILp/mnhZbVnuFU2Rhl7W9FWiExA9AgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUfdL7UhRG9WNyIXvymOD4oQNIRvAwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzEz
MDJlMzEzNDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAwm6PMA0GCSqGSIb3DQEBCwUAA4IBAQBKMPOVLO03f4++CVLUcFe8TJcEAch9
bZZOkJg3zuEdjKfzHlkYVMNJejl+tZebgbINc5n2OoWccgdGBEvv++V8EZKUyvTb
Jm4RVnhMSv32Mc+W544o6cRjHyu2SWP4y9ThzNgWjnIaEitoWZdHbr4o3FjjrYLP
Y20ZddFm8Edqv6ZucPuBttxegDLjLDvJIzvQ3YH7EUlQ1RghQkMA6xwZG/K/Zl37
TNJ0j9RcTk+tkvjayY7tyCw24kcDpJBDllYmAZsCXfFNK3PkzNX67/Bzhl/ieJSf
wo8NlZXPi/Uamdv0sYcOP0OEc13CiX6coge+hAkvAJNQNllWoLLn7Myy
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:50:00 2026 by rpki-client