Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3231302e302f32342d3234203d3e20313437323831.roa
File: 3139342e3131302e3231302e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: F9Ncvps8L0r61Lzqarz122isrAE5U97F0QXNuxk9YWU=
Subject key identifier: 31:C4:69:AF:AA:4E:F4:64:7A:66:D4:4D:3A:B7:D5:F8:FB:3A:D8:1D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 742CB58763B2E8FF03CF415793CE6197D749E218
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3231302e302f32342d3234203d3e20313437323831.roa
Signing time: Tue 13 Oct 2026 20:11:45 +0000
ROA not before: Tue 13 Oct 2026 20:06:45 +0000
ROA not after: Tue 12 Oct 2027 20:11:45 +0000
asID: 147281
IP address blocks: 194.110.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:2c:b5:87:63:b2:e8:ff:03:cf:41:57:93:ce:61:97:d7:49:e2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 13 20:06:45 2026 GMT
Not After : Oct 12 20:11:45 2027 GMT
Subject: CN=31C469AFAA4EF4647A66D44D3AB7D5F8FB3AD81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:11:48:a3:6d:15:f1:ab:1f:fe:e7:12:58:
5a:b3:78:2a:69:1f:36:dc:df:fa:84:58:af:e9:4d:
52:1c:00:f9:45:e4:25:8d:d5:f5:d6:57:e7:ff:23:
e4:9a:6c:c0:0a:1d:72:10:cf:34:0e:77:6d:a6:8e:
3e:3e:2c:3a:48:52:0c:ec:90:3b:18:23:ad:7c:11:
83:58:92:71:e2:c5:9a:1e:c4:35:ac:18:c5:db:61:
6c:7e:61:d5:4d:18:51:45:45:4d:21:c3:49:b8:86:
af:ec:e0:8c:29:17:af:95:9d:05:b0:3a:e8:19:2d:
8a:c6:ae:fb:54:94:dc:c4:06:da:66:44:57:03:45:
f0:7e:26:04:98:2e:0a:ca:20:2e:37:47:7c:25:da:
a4:87:b4:97:d3:61:df:e3:b9:01:34:42:96:64:07:
fd:ba:7a:6b:09:e3:8d:5d:11:a3:ec:5c:79:b3:01:
13:f7:82:ba:d9:8e:54:c9:df:2d:93:39:7f:36:8a:
06:22:8f:3a:2d:d7:08:88:8a:d7:fb:43:c4:b1:a6:
ba:1c:e7:25:d2:27:33:2a:a6:b8:57:e2:81:57:fb:
32:51:55:30:4f:43:ce:d0:4b:a1:fb:45:18:8c:bb:
be:ba:bf:d9:04:4e:45:8b:b8:2d:df:bc:51:6d:57:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C4:69:AF:AA:4E:F4:64:7A:66:D4:4D:3A:B7:D5:F8:FB:3A:D8:1D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3231302e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e6:3a:48:2b:46:42:d7:11:0c:7f:09:6a:aa:75:b8:a7:14:
e1:71:f4:9c:6d:7e:e3:0d:fa:be:f3:5f:b4:c6:cc:39:a0:79:
d4:b2:9f:f8:f5:6b:f9:82:03:fe:f1:a7:4d:4c:36:bb:95:22:
57:be:9f:52:16:62:44:f2:7c:d3:61:1a:2f:85:57:a9:7a:1e:
1a:4d:fb:88:bf:9d:2c:24:98:6f:88:72:bd:5d:0d:24:d5:40:
56:99:78:95:20:45:96:dc:b8:39:93:c5:7a:41:fa:b9:a1:88:
d9:f7:f6:17:ec:95:59:a6:6e:4c:2f:07:6b:fd:d4:84:67:71:
c5:c6:a4:f0:49:51:08:bb:fc:69:b3:a4:4d:f9:29:1b:b5:a8:
fc:8c:9b:3c:36:d2:cc:f1:4a:a0:82:aa:96:41:d9:5b:21:d9:
3f:81:9d:2e:36:94:00:aa:a9:68:b6:b6:5d:1a:2e:a2:15:49:
83:ce:69:21:c9:5f:fd:39:ae:1e:c1:62:5a:bd:0c:eb:ee:7a:
65:14:c3:64:3a:cf:be:7d:a0:76:89:46:a2:ae:6b:74:e5:02:
0d:00:ad:8c:14:6c:96:78:98:11:b6:c0:19:9b:94:78:7b:ea:
4e:11:8b:39:57:3e:8c:7c:de:1a:9d:6c:48:d8:1d:84:29:d4:
b2:b9:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:27:17 2026 by rpki-client