Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35392e302f32342d3234203d3e203436343332.roa
File: 3139342e3134372e35392e302f32342d3234203d3e203436343332.roa (raw, json)
Hash identifier: IF0eP9WewaUcJbAaIbuTXH9AMUOmGH3AZvioi8/BSxw=
Subject key identifier: 84:D2:E6:A3:FA:CE:36:78:79:B1:AF:83:70:AF:7C:70:3D:A9:78:8F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 50FB8F82FE4E1BD47379CFA83A4027FEF8BA49AE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35392e302f32342d3234203d3e203436343332.roa
Signing time: Fri 24 Apr 2026 11:23:54 +0000
ROA not before: Fri 24 Apr 2026 11:18:54 +0000
ROA not after: Fri 23 Apr 2027 11:23:54 +0000
asID: 46432
IP address blocks: 194.147.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:fb:8f:82:fe:4e:1b:d4:73:79:cf:a8:3a:40:27:fe:f8:ba:49:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Apr 24 11:18:54 2026 GMT
Not After : Apr 23 11:23:54 2027 GMT
Subject: CN=84D2E6A3FACE367879B1AF8370AF7C703DA9788F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:1f:b3:14:6e:b7:55:9a:a8:aa:6e:53:a5:
14:92:1a:61:f7:8e:d5:e3:28:89:35:81:71:95:77:
19:82:6f:6f:a4:3e:7c:24:5b:0a:9a:e7:fc:2b:31:
56:c3:ff:d0:75:17:c6:07:9e:2c:5f:02:fe:e4:c2:
7c:1f:47:cf:c8:3c:bf:b5:00:d0:4b:94:ef:b2:ba:
3c:01:b6:f5:ef:5e:d8:10:08:72:42:e6:59:c8:39:
1d:75:cd:6f:d1:9f:d2:5a:9f:79:33:32:87:1b:e6:
f3:6b:8b:f2:a1:af:51:70:8e:a7:94:ec:15:93:70:
44:9a:d8:97:72:95:4d:64:57:80:c7:97:a6:83:7b:
c7:02:ad:65:5b:56:6b:b3:11:72:41:74:95:55:ff:
ca:42:f1:0e:c1:88:6c:88:a8:50:7c:91:c2:a7:48:
ca:a9:89:c2:37:a4:83:d3:00:69:4d:0b:82:95:62:
2c:78:76:10:dc:00:6c:38:b1:0a:88:69:1d:ff:60:
ad:73:1f:4b:3c:15:7f:2f:06:e7:88:8f:40:11:4b:
fd:1c:b4:4a:2c:e5:80:21:3d:1a:01:03:71:c4:8c:
15:16:21:25:46:c0:be:1b:dd:ee:61:f6:32:01:02:
85:d5:c4:c7:f9:e6:e6:f9:2c:cd:47:ce:78:ee:f3:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D2:E6:A3:FA:CE:36:78:79:B1:AF:83:70:AF:7C:70:3D:A9:78:8F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35392e302f32342d3234203d3e203436343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.59.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:1f:7f:ab:b5:6c:b7:97:66:77:22:f8:18:e3:10:c5:97:d2:
e7:17:ac:49:b0:b8:3b:80:a0:b2:28:f7:27:a1:29:3c:ad:d2:
74:aa:ac:bc:c1:28:81:0b:a7:f6:80:8c:a7:d1:d5:5c:37:0d:
86:42:fe:5e:42:53:59:fc:d0:db:f6:55:8b:d3:f9:3b:01:ab:
bf:e8:74:e7:ae:08:52:b4:23:69:6d:98:db:f3:a0:06:22:34:
c5:00:3b:d2:46:21:be:fa:1d:e6:2b:d4:6e:ae:c1:e6:f8:bc:
d3:c2:fa:46:38:9f:74:a1:07:01:f6:45:1c:a3:bb:c9:bf:20:
cb:ae:60:59:6e:b1:66:40:31:94:9e:28:f0:9d:fc:b8:ee:28:
dc:1e:ac:ba:d0:75:d3:15:f2:28:a8:63:b3:7b:6a:f3:aa:41:
24:1e:02:00:38:3d:d3:92:ad:11:28:96:36:eb:56:d8:4b:ce:
af:a5:b0:16:87:af:bb:2a:91:a3:e1:0b:94:6b:02:8e:82:81:
af:c7:61:6a:1f:a5:aa:3f:47:f5:05:d9:d7:46:d5:59:bf:1f:
14:31:d7:6c:6c:02:0e:9d:ac:d5:db:7e:7a:b3:74:ee:8b:75:
e0:7e:eb:36:71:58:c9:0a:a3:b8:8c:7e:36:72:7c:92:b7:bc:
ef:2e:3f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:50:41 2026 by rpki-client