Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130382e302f32342d3234203d3e20313336373837.roa
File: 3139342e31352e3130382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ol6pgMxMejg/yQ0Y5ndU3Pn3uIu9Dff53BS5joeF/qU=
Subject key identifier: CA:41:26:26:83:30:00:56:8D:94:9D:D7:06:61:8D:F4:15:BF:17:0E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 676C6DF468108FD482321BDCADB5E5070BBB58B4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:10 +0000
ROA not before: Fri 23 Oct 2026 16:25:10 +0000
ROA not after: Fri 22 Oct 2027 16:30:10 +0000
asID: 136787
IP address blocks: 194.15.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:6c:6d:f4:68:10:8f:d4:82:32:1b:dc:ad:b5:e5:07:0b:bb:58:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:10 2026 GMT
Not After : Oct 22 16:30:10 2027 GMT
Subject: CN=CA412626833000568D949DD706618DF415BF170E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f1:c0:7f:cf:cc:27:ea:f2:63:a2:2d:5c:92:
44:e5:31:a2:91:c5:19:1c:1d:5e:53:02:6e:92:70:
ab:ad:9e:6e:7c:28:6e:c2:99:30:1b:87:0f:46:5f:
f8:e6:68:fb:26:69:c9:ad:18:64:ca:e1:fb:e7:84:
b9:2f:15:44:b7:bb:0c:21:56:05:c6:92:c5:46:35:
67:d0:da:9e:76:a1:05:2e:26:53:89:b9:54:4a:0f:
64:f3:39:fc:70:c3:78:41:01:f4:e0:2b:50:a2:6b:
99:9a:cb:64:33:26:f1:26:62:87:3d:fc:a8:c1:3a:
86:e2:bb:30:10:7f:79:7a:78:c0:a7:a0:2d:4b:ee:
eb:fc:2a:1c:80:4f:f6:50:4b:2f:74:f6:ef:76:d5:
9e:09:8a:df:89:bd:1d:18:1c:ac:37:8c:88:95:c8:
77:49:dd:6b:8b:90:dc:71:98:f3:c0:e0:e4:49:b8:
e0:ca:56:ec:da:84:f5:1a:70:0f:42:ca:45:9d:11:
88:e3:a9:5b:93:d2:63:96:3c:bc:a2:9a:7e:41:04:
5f:6e:fc:ff:a4:45:06:50:6d:75:5c:73:1e:79:e6:
db:df:ba:02:34:0e:c0:e6:be:14:4a:5e:f9:24:6f:
60:bb:82:a5:0d:e1:ec:e7:7c:ae:0a:46:44:3f:70:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:41:26:26:83:30:00:56:8D:94:9D:D7:06:61:8D:F4:15:BF:17:0E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d6:e7:8b:d6:52:13:d2:ef:cf:c1:c4:e4:45:d2:d3:55:b2:
02:64:cf:77:96:74:5b:bd:57:45:85:e3:be:88:ea:f8:2d:33:
55:b5:a7:ef:bc:68:c2:e5:94:e2:2d:1f:eb:50:68:12:37:5e:
d8:1e:94:27:cd:61:22:ac:07:a2:6c:c5:84:b1:17:58:fe:7e:
94:64:f8:72:29:36:bf:f8:74:58:da:ca:1b:6f:c0:a1:5e:26:
38:59:ce:37:2d:85:41:3b:53:7c:d4:2c:9f:e0:00:eb:10:88:
b5:ed:54:10:3e:4b:87:15:b5:fc:d7:c0:eb:ed:40:38:e7:c6:
50:f5:6f:0f:50:a8:d8:ae:d2:45:fa:a9:1f:3e:56:2c:ad:c2:
8f:ab:87:7f:ff:a2:18:1a:be:fa:3d:01:b5:65:d0:bf:06:82:
0e:f4:f1:ed:12:44:ab:e2:d4:89:8d:ed:f2:45:fd:46:a1:4c:
18:4e:e4:d4:13:8c:f9:91:4f:09:a3:09:5f:da:80:dc:51:1c:
c0:75:32:a3:a4:11:0f:c1:c9:30:07:f5:0e:96:ff:e0:f7:86:
66:c2:36:3d:5f:ed:a9:1c:3a:39:85:d1:21:ca:90:ec:2e:ad:
de:a5:8d:22:46:96:ba:9f:f8:ce:1f:d0:ba:66:db:4d:e1:a6:
e0:8f:9c:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:54:24 2026 by rpki-client