Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3231302e302f32342d3234203d3e20383334.roa
File: 3139342e3131302e3231302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: apRffh3mPS74XX7uQt7mvISr6wfLHdOG1heGdmCRaPs=
Subject key identifier: D9:C6:E9:78:45:95:BC:ED:80:A7:FE:6C:87:2B:78:2C:E5:85:35:10
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0AF3587FDE97E95BFF401E03E517E7C4D9B646F1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3231302e302f32342d3234203d3e20383334.roa
Signing time: Sat 14 Nov 2026 18:40:44 +0000
ROA not before: Sat 14 Nov 2026 18:35:44 +0000
ROA not after: Sat 13 Nov 2027 18:40:44 +0000
asID: 834
IP address blocks: 194.110.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f3:58:7f:de:97:e9:5b:ff:40:1e:03:e5:17:e7:c4:d9:b6:46:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 14 18:35:44 2026 GMT
Not After : Nov 13 18:40:44 2027 GMT
Subject: CN=D9C6E9784595BCED80A7FE6C872B782CE5853510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:94:4b:c0:a1:03:18:40:57:4e:2a:40:85:
89:c2:8f:34:e7:e8:41:7f:01:71:3b:bc:f8:08:0b:
34:2e:af:ab:22:70:bb:58:8a:d9:e5:1a:72:d2:8e:
1a:e8:69:ab:e6:f0:cd:56:9f:62:15:ef:89:e4:f2:
92:06:c8:4f:31:ce:92:6e:18:15:77:a3:85:94:c4:
80:ac:31:38:08:f7:3c:4b:32:f7:58:27:8c:86:ba:
26:b4:f7:d1:a9:63:31:4d:82:e1:26:7c:6a:4e:90:
d4:5b:b7:aa:6f:59:bb:b5:be:34:ed:f5:51:6d:e4:
77:b4:9c:25:92:97:75:31:a4:4c:82:93:1b:eb:0e:
1c:77:51:20:82:bf:a4:f6:03:31:1f:05:c2:9b:40:
0f:84:18:e2:56:09:91:ca:1b:7f:96:0a:9e:7a:22:
c0:94:f0:57:ce:57:02:e2:50:e5:bb:ec:02:ea:84:
58:2e:86:21:5b:ca:54:df:0d:eb:04:ed:4b:67:65:
f0:26:9a:ca:5b:11:b0:f5:c3:63:76:dc:c8:a9:ef:
c9:4b:63:45:46:8d:65:a8:6c:ae:bc:73:bb:e8:71:
bb:a0:dc:e0:64:fd:95:bb:72:69:71:f0:73:48:ca:
ba:d7:db:0f:45:0f:b1:2a:05:39:60:24:c9:30:51:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:E9:78:45:95:BC:ED:80:A7:FE:6C:87:2B:78:2C:E5:85:35:10
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3231302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.210.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f5:5e:ff:65:c2:71:3f:d5:7e:e1:c7:0f:f0:4c:22:77:f9:
ac:04:7c:e5:a8:8f:66:ed:a5:14:e5:b2:a3:31:5a:e8:3a:2c:
7e:90:5b:0a:dd:36:d4:0a:c4:da:0f:17:02:82:56:ea:c5:1b:
5c:22:00:71:ad:40:a8:20:f0:21:11:92:c7:d2:a0:e3:ec:6f:
2f:7c:73:0e:bb:12:03:7c:fc:10:0b:ea:62:55:0d:21:a7:23:
1a:8f:69:67:64:be:ab:3e:84:2e:18:14:17:3f:76:bc:90:0d:
52:d0:aa:15:27:0d:33:ac:94:6d:e0:90:ce:77:a0:41:83:ad:
eb:32:90:ad:50:51:f8:1d:98:57:be:55:2c:cd:bb:62:f8:07:
fc:f8:7c:ce:df:58:35:97:98:a8:87:2e:f1:f4:8c:f0:2c:02:
f3:57:56:b8:e9:81:23:e9:bd:9a:a7:4e:e6:06:ef:2a:1c:67:
3b:7e:63:24:b0:b0:fd:5d:34:20:ec:46:e6:0a:19:61:53:f9:
58:e8:ae:a4:6f:35:eb:8b:7a:c7:6a:49:87:e3:46:41:56:bd:
52:b9:57:1e:8e:b3:8e:84:f5:b5:58:fe:50:1b:02:f0:e7:08:
e6:69:c4:62:b9:7f:74:27:f8:52:31:a3:f1:e5:d5:21:3b:2d:
02:c1:35:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:22:42 2026 by rpki-client