Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32342d3234203d3e203235313938.roa
File: 3139342e3134372e35362e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: 9o9mL6MAiOZrJdas3UCaxwZsrYZQ9dy+ER/8GNaOqdM=
Subject key identifier: 4A:2A:52:A8:66:E1:48:9E:42:F7:DB:59:34:CE:45:BE:E1:DA:01:17
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3C8CBB687DA57DE1091BEFD8D99E75CF6C6FD6C7
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32342d3234203d3e203235313938.roa
Signing time: Wed 02 Sep 2026 18:04:02 +0000
ROA not before: Wed 02 Sep 2026 17:59:02 +0000
ROA not after: Wed 01 Sep 2027 18:04:02 +0000
asID: 25198
IP address blocks: 194.147.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8c:bb:68:7d:a5:7d:e1:09:1b:ef:d8:d9:9e:75:cf:6c:6f:d6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 2 17:59:02 2026 GMT
Not After : Sep 1 18:04:02 2027 GMT
Subject: CN=4A2A52A866E1489E42F7DB5934CE45BEE1DA0117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5a:66:0a:06:fa:c2:a3:13:46:4c:06:ac:bc:
50:46:00:d8:08:a8:a3:32:63:9a:ac:48:1d:d8:10:
77:cc:ef:38:21:60:00:75:05:26:d5:65:e7:f5:29:
20:9f:00:a2:c5:11:a7:9b:1b:5a:29:01:1c:c0:93:
01:f4:ee:07:20:4e:5f:7a:0c:f9:cc:76:99:ec:32:
46:88:76:77:17:63:f7:96:8b:e5:df:d9:92:6d:c2:
4d:92:78:a1:80:bc:d4:25:78:49:69:b1:96:a3:16:
b4:33:04:13:79:75:99:57:ca:ca:00:c9:ae:8d:14:
61:7f:86:e7:dd:24:f0:65:24:94:75:12:18:db:2f:
a3:08:c4:05:47:81:e2:32:74:5d:b5:88:57:bc:46:
03:63:d7:ff:a2:85:73:0f:0b:d1:c4:fd:b3:e3:6a:
5a:df:02:1f:97:68:e5:b2:61:e4:a7:9e:6d:b5:65:
c6:aa:2f:b8:ca:0c:cb:f1:55:52:8e:ad:e9:dd:f1:
dd:b0:58:b8:de:2c:f3:11:60:82:98:c9:57:0d:17:
50:e1:be:e1:99:c0:74:33:d6:b8:7a:85:a6:a9:1d:
da:26:08:41:8e:05:23:45:01:01:15:c3:4e:a8:49:
b4:32:b6:4e:94:08:08:d7:9f:25:33:d8:4b:2c:e8:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:52:A8:66:E1:48:9E:42:F7:DB:59:34:CE:45:BE:E1:DA:01:17
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.56.0/24
Signature Algorithm: sha256WithRSAEncryption
26:8b:ab:59:77:02:73:a5:44:a5:36:bb:8f:de:f5:dc:26:91:
c8:29:35:2d:03:ce:87:c0:a0:ac:27:6d:9b:e3:f0:45:d9:09:
53:ce:c6:10:5d:ab:63:66:9b:a1:a4:30:3b:5f:4d:f3:0b:6d:
47:85:3d:06:f1:76:4c:28:e4:08:8a:ea:8e:83:95:78:8c:d5:
cf:77:8d:19:2c:72:f5:a5:dd:cd:42:85:1e:4b:f7:f7:2f:b5:
fd:8d:cf:67:eb:ce:95:05:24:01:cb:06:c0:ab:e5:6a:41:23:
9d:e7:79:68:46:1b:d5:b9:88:ff:dc:37:f7:56:c1:00:64:25:
14:59:6b:b3:a5:db:5e:58:9d:1d:71:38:3d:d0:49:3b:d8:53:
51:7d:e9:dc:43:1d:ca:b3:b9:84:e7:d2:4a:91:f9:ca:a2:29:
c1:02:48:33:85:ac:d8:bf:02:b3:1b:be:7e:c1:8f:b6:7e:4b:
b4:a0:6b:d6:d5:f6:55:b5:1b:3e:2c:2b:e0:1a:44:0d:31:29:
e7:54:ca:17:5e:0a:93:90:ff:f3:87:56:6a:fc:a0:8a:52:46:
fe:78:ff:7e:a7:68:d6:f4:7c:7f:d2:34:fc:f1:bd:13:c1:64:
d6:78:03:40:53:c6:70:6a:4d:84:3b:b1:bb:de:15:95:39:d7:
ec:f0:8c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:59 2026 by rpki-client