Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32342d3234203d3e203136323736.roa
File: 3139342e3134372e35362e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: n5HIenXIuiSHwIUp2iBuyrDE4dmIJtd33Jea9T45zxU=
Subject key identifier: 6D:6D:BC:5A:8E:91:CB:F8:1F:17:CB:06:44:4D:58:65:E9:34:31:AB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 67B878014B3E7CF42317786DE970D773BF505D1F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32342d3234203d3e203136323736.roa
Signing time: Fri 16 Oct 2026 19:20:27 +0000
ROA not before: Fri 16 Oct 2026 19:15:27 +0000
ROA not after: Fri 15 Oct 2027 19:20:27 +0000
asID: 16276
IP address blocks: 194.147.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b8:78:01:4b:3e:7c:f4:23:17:78:6d:e9:70:d7:73:bf:50:5d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 19:15:27 2026 GMT
Not After : Oct 15 19:20:27 2027 GMT
Subject: CN=6D6DBC5A8E91CBF81F17CB06444D5865E93431AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b0:0d:00:c1:34:09:95:82:5f:18:47:eb:58:
cc:b6:3a:08:1e:de:00:a3:d7:1b:36:3a:60:3b:77:
c1:0d:cf:b9:f5:2d:61:2a:73:0d:0d:81:a7:fb:a3:
e8:e1:da:b6:6b:14:3a:35:3f:2f:b4:d1:5c:2d:35:
2b:26:30:f9:9c:46:0b:52:3d:20:64:1b:16:28:68:
dd:49:8b:39:6c:ad:72:b6:b1:f3:f8:b7:18:42:1f:
75:5b:08:e0:f5:1d:eb:a9:45:cd:61:25:85:66:6a:
19:3e:fa:e8:38:76:50:d3:9c:ca:a0:bc:eb:cb:e7:
f0:fe:81:43:66:93:31:61:7c:29:ce:97:95:cb:d5:
72:ff:ff:51:de:03:64:61:78:86:e9:c3:91:fa:ed:
97:b4:d7:06:71:5c:6f:9b:a7:7f:e0:29:f2:42:84:
81:ea:38:e4:85:4a:bd:ad:9e:93:c4:1d:1c:9d:5d:
15:2b:c4:22:0d:dd:d0:35:f2:ab:8f:36:1b:3a:4b:
d3:28:e1:04:e3:30:1a:68:ec:b8:19:90:a0:52:0c:
42:80:8b:bc:a1:fc:76:e7:fd:8c:02:56:37:0c:df:
8a:87:20:b1:e0:10:e3:df:b6:12:45:f9:90:14:12:
5e:fe:df:85:5d:7f:9f:28:f6:5a:f2:7c:41:e9:ba:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6D:BC:5A:8E:91:CB:F8:1F:17:CB:06:44:4D:58:65:E9:34:31:AB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.56.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:66:cf:c8:8a:e1:18:37:6a:b3:15:9b:38:9f:74:f5:62:a9:
80:6b:1e:6b:16:c9:df:c7:67:3c:7b:76:fd:33:ca:3b:f1:d7:
1d:6b:bb:d5:17:b2:79:23:7d:73:95:b5:53:62:86:e2:af:66:
c1:7d:92:bd:39:61:23:77:b6:b4:82:62:dc:8e:f8:a4:7e:99:
6b:db:cc:cd:08:a5:4d:2c:2a:a3:3a:36:d6:56:4b:2f:47:57:
4b:80:23:03:12:06:13:81:c2:be:e8:c8:08:1f:b5:e3:a5:90:
9c:f6:93:84:20:23:ab:4b:6b:bd:f7:d6:20:60:ed:de:7b:c2:
29:ca:83:23:97:54:98:13:4e:a0:07:5f:0c:ae:bb:00:b1:bf:
fa:ee:f2:7b:5e:b1:39:eb:e3:ec:46:e8:20:a6:3c:63:1b:a0:
52:3a:94:c1:43:aa:53:0c:3a:f4:22:f4:92:c0:d8:15:f0:fc:
88:77:7c:4f:1b:a1:d8:aa:5d:69:b1:34:02:d7:d8:db:89:f5:
cf:04:49:e8:6f:1d:b6:5c:42:96:18:9f:a8:11:65:a2:ed:d2:
89:8b:0f:95:b1:7e:19:32:32:ee:a1:35:e7:7b:a0:87:01:ef:
42:7b:fb:67:17:0a:52:de:89:50:02:1d:73:de:59:37:5d:b3:
65:c9:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 04:23:10 2026 by rpki-client