Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa
File: 3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa (raw, json)
Hash identifier: G/WccjEnGV0zv4+M1XsrgK5Q4ih73b41CZ5Hrvrl3tE=
Subject key identifier: 7F:8D:B9:2A:5A:79:87:60:EF:92:B7:2D:C3:87:EB:61:87:60:0C:2A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6BFC7AA361DD1FB0688E1D525B4B2E5512657BE4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa
Signing time: Fri 23 Oct 2026 16:30:14 +0000
ROA not before: Fri 23 Oct 2026 16:25:14 +0000
ROA not after: Fri 22 Oct 2027 16:30:14 +0000
asID: 211192
IP address blocks: 194.15.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:fc:7a:a3:61:dd:1f:b0:68:8e:1d:52:5b:4b:2e:55:12:65:7b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:14 2026 GMT
Not After : Oct 22 16:30:14 2027 GMT
Subject: CN=7F8DB92A5A798760EF92B72DC387EB6187600C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:84:79:aa:00:db:76:2d:0c:a9:b6:c9:58:
09:1d:a9:ba:3e:25:24:97:d0:fd:1b:ef:80:83:ff:
87:15:17:3f:9c:c8:c2:77:b0:c1:ea:4e:98:7b:b0:
e7:c6:21:9f:c2:17:c5:0a:39:a4:dc:cb:b0:6d:8c:
12:75:03:5f:6c:f9:fa:5d:15:7a:00:ed:e1:95:51:
e1:50:0f:7e:83:9d:bb:0c:f6:1d:a0:2d:47:c2:9e:
65:6b:f6:da:7b:81:f9:f7:d0:47:df:77:22:b8:1a:
38:0a:b2:67:ff:c5:1f:9c:86:11:ee:ad:cb:cf:98:
ea:c3:e9:1b:7e:1a:2a:88:bd:15:cc:23:0a:8d:fa:
18:2b:02:72:ee:ed:db:9d:01:99:ce:20:e5:87:c7:
74:98:75:18:ab:60:57:b6:1e:90:fc:1e:5c:8f:6f:
14:8a:4d:9f:f7:a8:7c:76:86:a5:c8:6f:e1:4f:c5:
98:51:13:ef:9d:dd:a0:ed:3b:fa:31:fd:55:3f:dd:
2a:36:e1:a9:b0:c5:54:13:c6:fb:f6:af:77:a0:73:
00:5a:6e:d6:ad:ef:71:05:a6:99:dc:3a:51:d1:e1:
f7:1e:7d:66:5b:1a:0b:98:f8:d8:7f:29:e4:ad:33:
b4:0b:d6:8a:db:29:9a:6d:b8:76:fe:50:65:c5:fc:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8D:B9:2A:5A:79:87:60:EF:92:B7:2D:C3:87:EB:61:87:60:0C:2A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.109.0/24
Signature Algorithm: sha256WithRSAEncryption
20:84:2c:70:9c:58:db:66:e2:51:92:ca:f7:1e:c4:00:e2:9f:
83:b9:04:02:a3:3b:39:c7:c6:a6:5e:2e:46:32:e1:72:5a:9a:
5f:14:17:df:f1:2b:93:78:c9:f0:05:35:67:15:fa:2c:10:88:
46:c0:61:ce:3a:3c:56:35:5d:4b:82:3c:06:82:30:f9:f1:e0:
45:53:94:7a:cf:42:c6:7c:72:cb:cc:2d:f4:c4:07:00:41:f7:
ce:13:e9:37:32:61:c8:d7:e4:7b:93:dc:c4:ea:bf:be:68:d6:
8d:48:ef:3e:be:17:a9:80:42:7e:ac:17:7f:16:b1:41:66:d2:
93:27:4e:e0:e3:fa:95:e7:b6:6d:42:e9:db:96:0a:c9:e1:7c:
65:13:c6:bc:a8:09:b7:0e:27:68:60:f4:fe:ab:3a:8f:74:18:
a0:38:76:af:61:2c:87:4e:a5:9f:c5:4a:29:45:da:e6:c9:e8:
2c:60:f2:bd:33:0b:95:13:d5:81:7a:0f:97:71:57:bb:6a:40:
6e:1b:47:0c:30:ff:e8:a8:f9:73:68:a3:b4:78:7e:c9:8e:e5:
f0:f8:5e:3f:c6:78:49:fb:ec:10:07:d8:7f:a9:58:9b:f6:99:
e2:93:89:21:48:fc:b1:ef:f2:c4:05:51:f4:45:c4:d6:04:6c:
d2:c7:67:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 23 22:17:43 2026 by rpki-client