Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3139332e302f32342d3234203d3e20323034313730.roa
File: 3139342e3131302e3139332e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 5nYzalwexfzqMoD0T8VOxBNwwwyRY/BkOtdPsQYhYxE=
Subject key identifier: F1:C1:19:1A:60:EA:7F:8B:C2:74:CE:2C:A6:E7:B5:B1:F7:85:81:3A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 49F69672FB2AE4EE188454495C49A28EA5EE9148
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3139332e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 23 Oct 2026 16:30:40 +0000
ROA not before: Fri 23 Oct 2026 16:25:40 +0000
ROA not after: Fri 22 Oct 2027 16:30:40 +0000
asID: 204170
IP address blocks: 194.110.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f6:96:72:fb:2a:e4:ee:18:84:54:49:5c:49:a2:8e:a5:ee:91:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:40 2026 GMT
Not After : Oct 22 16:30:40 2027 GMT
Subject: CN=F1C1191A60EA7F8BC274CE2CA6E7B5B1F785813A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:b1:69:8c:46:c6:8f:d0:bb:d6:d2:5c:d3:
21:f9:13:f9:3c:73:b5:3a:d5:a1:45:1d:d4:4f:4b:
0f:a9:c0:60:6d:6c:dd:97:03:0c:d0:6d:55:8e:c5:
db:a6:5c:93:82:c7:37:da:4e:f9:2f:84:4c:aa:ae:
7d:d3:ab:50:27:0f:d1:01:d4:36:d0:17:10:bb:4d:
82:89:4a:98:5d:5a:66:c5:75:ba:61:d1:54:e6:e1:
54:a3:af:8a:c7:58:fc:a7:25:af:30:91:16:d9:c2:
38:f8:d7:3a:e1:a7:ab:b3:5c:fa:ee:f5:a7:a4:55:
6f:27:c5:3d:3e:70:e6:28:8f:d1:3d:9d:c1:3d:a5:
32:98:53:ac:86:90:c5:33:28:d0:8c:35:13:a7:32:
a3:4f:65:b1:b1:9c:7f:3d:d3:ab:ac:a8:e3:6b:2b:
2a:eb:2a:1e:b6:e0:68:3c:e0:81:ba:6d:49:21:5f:
72:0b:27:ec:2e:73:13:23:b5:45:84:c7:b6:1b:3a:
9b:f5:88:0f:a7:08:a6:ee:c4:af:ac:06:37:d7:2f:
8a:af:b5:bd:fa:cd:f9:27:54:95:0f:5b:9a:63:70:
90:78:2d:bd:00:ac:6c:26:bd:fd:4b:86:f3:e7:54:
a7:8a:d6:32:0f:bc:58:6e:2f:06:03:98:ff:65:ff:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C1:19:1A:60:EA:7F:8B:C2:74:CE:2C:A6:E7:B5:B1:F7:85:81:3A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3139332e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.193.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f2:af:6a:af:e4:c9:5b:fb:a9:ff:53:de:59:07:f4:d3:5f:
b0:5e:a2:7c:7a:58:18:4f:fe:f5:de:f8:86:27:6c:f0:e4:ba:
fd:c9:22:ef:b5:ff:75:5a:8a:1e:1e:ef:15:b7:b0:a3:5c:f7:
74:ad:e6:2b:84:d6:de:f9:29:94:7c:60:39:fb:da:3b:f4:93:
f0:8b:6d:41:2d:da:d3:c4:59:67:a1:90:52:2b:61:d0:eb:92:
69:ae:2a:91:41:0e:43:19:73:6d:07:4e:d7:e1:a0:81:90:41:
9f:86:9d:df:e3:4f:f1:6a:eb:fb:61:e3:48:7d:29:3c:05:37:
0d:df:2e:0d:95:c7:2d:e6:93:5a:ea:59:da:75:75:d9:87:bf:
78:6a:ca:72:67:f7:44:cb:96:68:e6:0e:27:4d:68:1d:01:2f:
dc:dc:f2:71:d4:af:c5:9d:ac:86:5d:90:5e:29:ce:ce:56:90:
ac:b5:5e:3c:99:55:f5:37:df:f1:ea:70:7c:0c:8a:ac:84:58:
09:5d:2f:e6:f5:c1:f6:29:bf:97:96:a9:1a:b4:b0:36:b5:ae:
04:f5:75:6d:73:e6:12:f7:e5:fa:79:66:1f:8f:74:d6:35:b4:
e7:92:d3:61:59:ab:7e:74:3f:f6:5b:83:4d:ff:f5:90:96:d1:
7f:49:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:58:38 2026 by rpki-client