Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3230302e302f32342d3234203d3e20333937343233.roa
File: 3139342e3131302e3230302e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier: 1BNEMnPLNYtSTSAeHlOl4w+qAAw+wFMX0ua/5JRgcE4=
Subject key identifier: DB:01:A0:BF:7F:D7:4E:9D:E6:96:18:FD:EA:55:57:53:7A:A4:FA:C1
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7A56476CF64154645340FAE88085E21468B06CDF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3230302e302f32342d3234203d3e20333937343233.roa
Signing time: Mon 12 Oct 2026 09:46:01 +0000
ROA not before: Mon 12 Oct 2026 09:41:01 +0000
ROA not after: Mon 11 Oct 2027 09:46:01 +0000
asID: 397423
IP address blocks: 194.110.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:56:47:6c:f6:41:54:64:53:40:fa:e8:80:85:e2:14:68:b0:6c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 12 09:41:01 2026 GMT
Not After : Oct 11 09:46:01 2027 GMT
Subject: CN=DB01A0BF7FD74E9DE69618FDEA5557537AA4FAC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:8c:6c:d4:3e:1d:91:db:21:a1:ea:3a:1b:
98:d6:e2:7a:82:04:3d:e4:2b:1d:d6:13:93:27:35:
36:19:fd:e5:ef:1e:e1:c7:61:fd:e0:87:6c:68:6a:
74:7b:77:1f:60:99:c5:97:b5:3d:06:b4:26:5e:e0:
4d:a3:e8:0a:22:85:55:72:0b:77:5f:e8:7a:7c:12:
74:55:2e:b1:fc:9a:ac:7c:93:db:13:52:c8:b9:52:
be:20:52:c1:3c:81:58:ce:2e:22:3f:6c:cc:3f:a7:
c5:86:ac:a1:8b:e4:75:78:4f:6f:4e:87:43:6e:ef:
d8:bd:e4:f9:81:82:8f:01:70:fd:3b:4d:7f:97:25:
3e:6b:58:9f:a2:8e:0b:e2:0b:3e:a2:cd:bc:93:51:
63:46:55:6d:55:87:8a:84:cb:a7:e5:56:c8:fd:e7:
73:fe:fa:ba:26:58:b8:a8:58:64:49:b5:84:82:ae:
e6:74:de:63:6c:66:39:80:ca:f5:92:9c:13:63:4c:
18:49:2f:5d:4c:ee:d8:46:6a:b1:d4:b9:14:9c:57:
0f:d9:73:e5:8c:44:55:d0:53:98:60:c0:3b:0c:f9:
48:5a:dc:06:7c:84:24:5e:e9:6d:e2:72:42:9f:fd:
ab:27:32:aa:3a:14:6e:ee:d1:0a:f8:61:1f:3f:32:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:01:A0:BF:7F:D7:4E:9D:E6:96:18:FD:EA:55:57:53:7A:A4:FA:C1
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3230302e302f32342d3234203d3e20333937343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:74:9a:5e:93:3b:4b:b9:fd:6d:27:c0:69:0c:4c:14:9b:d9:
fb:7a:3a:02:4c:cd:1c:3f:2d:8f:6f:27:24:20:42:82:fd:9d:
3d:69:e6:61:98:73:0d:38:67:e2:88:fd:f2:53:98:98:9f:fd:
b5:a1:aa:b6:0c:aa:8a:59:5e:4b:b4:3c:92:e6:24:35:ba:80:
b2:bd:c5:8a:b9:67:83:21:d4:24:0a:ea:51:ce:29:d7:c2:c5:
52:7e:10:e5:99:7e:b8:b0:df:e9:bd:6e:b3:29:0a:eb:25:d0:
a3:13:25:2a:9a:db:56:7b:2c:ce:73:e0:c9:e4:9f:be:c1:0f:
22:b1:f1:f5:b9:b5:da:6b:2c:0c:78:e6:9f:0d:7f:24:6a:8c:
56:df:6a:eb:31:fc:6f:66:aa:a0:71:e8:d3:a9:d3:7e:e0:74:
6a:07:cf:02:91:8a:07:11:06:0b:f1:3e:42:0d:62:a7:f7:53:
f5:b1:8b:e0:d9:15:14:0c:24:84:cf:cd:19:ae:db:eb:fa:4c:
9a:e2:6a:79:e9:34:40:0e:b5:d6:c2:b8:3e:e0:1e:ec:a8:5c:
c6:19:68:21:62:25:b9:93:8e:fd:4c:08:6e:b8:d4:c1:c9:61:
1a:fb:2f:26:fb:d6:fc:7a:50:28:26:10:0f:3e:e6:9e:ba:4a:
61:ac:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:39:22 2026 by rpki-client