Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131302e302f32342d3332203d3e203531313637.roa
File: 3139342e31352e3131302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: PmWEBWbFdovLA0tsymAuotyL07VhmHhv5JU2DOWGAqM=
Subject key identifier: 91:6B:CE:7B:CE:0C:0B:67:EF:27:D8:3A:74:70:63:E8:CC:05:FC:24
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3933795F294A560F9F69735262FC2604547DE128
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131302e302f32342d3332203d3e203531313637.roa
Signing time: Fri 23 Oct 2026 16:30:24 +0000
ROA not before: Fri 23 Oct 2026 16:25:24 +0000
ROA not after: Fri 22 Oct 2027 16:30:24 +0000
asID: 51167
IP address blocks: 194.15.110.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:33:79:5f:29:4a:56:0f:9f:69:73:52:62:fc:26:04:54:7d:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:24 2026 GMT
Not After : Oct 22 16:30:24 2027 GMT
Subject: CN=916BCE7BCE0C0B67EF27D83A747063E8CC05FC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:06:2b:9c:81:e5:11:94:16:ea:40:6e:8c:
bd:3d:c1:d8:28:04:94:df:62:f7:ef:ad:a4:0b:e1:
cc:09:cd:2e:79:5f:fe:d5:3b:95:39:92:32:b4:92:
e2:00:b2:bc:c7:aa:94:fa:c4:7b:11:68:e2:b8:ec:
a8:3c:87:dc:ef:fb:f8:88:7e:f9:f4:3b:81:76:15:
e6:d4:33:35:79:95:78:18:fd:c1:8e:6b:3e:1b:c5:
77:2a:9d:a4:06:fc:fd:7d:df:d0:e6:69:81:82:7e:
d4:96:ca:d4:ee:8b:0a:23:87:56:83:66:c8:66:ea:
65:fb:35:06:c6:91:9d:37:a1:99:db:da:38:8b:1b:
3b:b1:3b:81:df:78:aa:82:9a:51:87:89:b3:5c:2a:
c7:8b:0a:bf:69:bb:20:60:ce:36:06:5d:46:c5:f5:
36:61:9a:a9:6b:5d:6b:5c:4f:37:0c:eb:18:ba:3c:
cc:f3:aa:b3:35:01:e0:65:7b:e2:05:e8:49:30:78:
81:83:d6:a8:75:07:9a:bf:d6:a4:93:fb:51:76:cd:
73:ea:01:40:ac:c6:18:ff:1d:a5:3a:e7:f5:a8:88:
da:a9:6c:82:3c:91:db:05:23:c6:eb:ff:c8:bf:13:
67:b1:30:e2:68:a1:19:2b:02:2a:a3:85:0d:51:b2:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6B:CE:7B:CE:0C:0B:67:EF:27:D8:3A:74:70:63:E8:CC:05:FC:24
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.110.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:df:3e:70:6d:7e:c1:1d:7b:75:6c:4b:58:36:2b:60:e2:2c:
17:2d:eb:9d:95:fe:3a:b1:58:39:f0:11:08:34:9c:a3:b9:c7:
4f:bc:ff:eb:70:b0:0c:f8:d9:ce:c6:4b:c9:ca:4e:ec:45:aa:
62:6a:94:81:f5:51:2b:41:17:70:1b:ee:96:98:be:fc:5d:a7:
54:95:ee:a6:2b:00:22:07:2f:43:85:10:12:f5:16:8f:b0:5e:
a8:8c:66:ee:37:64:f5:6b:7b:b8:bd:3e:c0:f3:07:ec:66:78:
4b:00:bf:2a:6b:4e:d0:54:f7:40:43:74:63:05:30:27:c2:b2:
cc:33:1d:e1:b1:75:cb:47:83:50:56:34:5a:cd:84:bd:b3:83:
5c:40:a8:4a:c2:b5:0b:92:ad:c4:27:83:c0:fd:61:91:61:f9:
e9:e3:0a:12:35:9c:e1:e1:8d:c5:33:dc:62:5a:a7:73:d3:b3:
2c:e0:a8:d8:55:7b:f5:cc:f3:4c:5b:d5:b9:c9:f5:13:cb:08:
93:bc:ac:c3:4b:d2:57:52:50:7a:fe:10:c5:ec:8a:fd:13:1a:
97:44:ff:14:91:68:9e:19:07:0a:ff:40:86:bc:6d:64:38:4e:
34:a2:6e:00:b7:c3:d0:04:4e:8d:80:0a:29:41:d0:e9:57:2f:
6f:09:bc:0c
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUOTN5XylKVg+faXNSYvwmBFR94SgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MjRaFw0yNzEwMjIxNjMwMjRaMDMxMTAvBgNV
BAMTKDkxNkJDRTdCQ0UwQzBCNjdFRjI3RDgzQTc0NzA2M0U4Q0MwNUZDMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXQYrnIHlEZQW6kBujL09wdgo
BJTfYvfvraQL4cwJzS55X/7VO5U5kjK0kuIAsrzHqpT6xHsRaOK47Kg8h9zv+/iI
fvn0O4F2FebUMzV5lXgY/cGOaz4bxXcqnaQG/P1939DmaYGCftSWytTuiwojh1aD
Zshm6mX7NQbGkZ03oZnb2jiLGzuxO4HfeKqCmlGHibNcKseLCr9puyBgzjYGXUbF
9TZhmqlrXWtcTzcM6xi6PMzzqrM1AeBle+IF6EkweIGD1qh1B5q/1qST+1F2zXPq
AUCsxhj/HaU65/WoiNqpbII8kdsFI8br/8i/E2exMOJooRkrAiqjhQ1Rsg+tAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUkWvOe84MC2fvJ9g6dHBj6MwF/CQwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzUy
ZTMxMzEzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADCD24wDQYJKoZIhvcNAQELBQADggEBAODfPnBtfsEde3VsS1g2K2DiLBct
652V/jqxWDnwEQg0nKO5x0+8/+twsAz42c7GS8nKTuxFqmJqlIH1UStBF3Ab7paY
vvxdp1SV7qYrACIHL0OFEBL1Fo+wXqiMZu43ZPVre7i9PsDzB+xmeEsAvyprTtBU
90BDdGMFMCfCsswzHeGxdctHg1BWNFrNhL2zg1xAqErCtQuSrcQng8D9YZFh+enj
ChI1nOHhjcUz3GJap3PTsyzgqNhVe/XM80xb1bnJ9RPLCJO8rMNL0ldSUHr+EMXs
iv0TGpdE/xSRaJ4ZBwr/QIa8bWQ4TjSibgC3w9AETo2ACilB0OlXL28JvAw=
-----END CERTIFICATE-----
Generated at Sat Oct 24 08:27:28 2026 by rpki-client