Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131312e302f32342d3234203d3e20313336373837.roa
File: 3139342e31352e3131312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 3xJ2IjiFqGBM/6F5dR6vHnElshKkCO6jlg1Wz9QlDpY=
Subject key identifier: B4:F3:80:FE:E0:4D:92:FD:2A:91:7A:50:6A:92:51:8D:B4:A1:FB:EC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 33D487DB8564E3F3736D322A342BD917053643DF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:36 +0000
ROA not before: Fri 23 Oct 2026 16:25:36 +0000
ROA not after: Fri 22 Oct 2027 16:30:36 +0000
asID: 136787
IP address blocks: 194.15.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d4:87:db:85:64:e3:f3:73:6d:32:2a:34:2b:d9:17:05:36:43:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:36 2026 GMT
Not After : Oct 22 16:30:36 2027 GMT
Subject: CN=B4F380FEE04D92FD2A917A506A92518DB4A1FBEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:72:9b:71:c6:2c:f5:d2:8a:17:66:7c:8d:
52:fe:be:79:f5:fb:ea:9b:b0:e5:e3:9f:52:e0:df:
8e:8a:63:85:7f:40:63:36:11:31:4b:d4:77:9e:d9:
d0:e3:5e:6d:13:18:94:0b:6f:39:4d:a9:0e:a1:80:
b3:a0:10:e5:60:99:70:09:93:f3:63:e3:9a:5c:56:
d6:23:68:c1:47:ad:98:8a:1c:3f:0e:8a:2a:d7:6d:
9b:40:19:3b:5c:a6:d2:f7:93:f7:59:31:28:13:00:
af:d4:63:ad:e3:58:a3:66:77:d7:b5:1b:cd:28:0e:
98:00:76:13:ec:e9:55:aa:e5:80:0b:f0:b7:a0:d8:
63:f2:a0:fb:14:99:38:f5:5c:0a:3a:c9:8d:11:4d:
71:82:f2:c9:e0:e3:1f:7b:09:b6:9c:b9:d0:2d:4a:
5b:00:9d:90:ba:1f:69:ad:db:7e:50:69:bd:16:d7:
a9:15:f3:64:6f:46:7c:ff:9e:25:c5:bc:2d:43:f7:
7f:49:4c:b4:14:3c:9d:07:49:66:3b:63:87:f1:f2:
a8:cd:3c:ec:7e:b0:72:73:a2:a7:6d:0f:27:23:d8:
10:e2:ee:1f:a5:a0:2d:4f:e2:1a:38:3c:17:bc:6e:
b4:3d:13:8e:94:1c:60:66:c7:de:52:18:68:25:3c:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:80:FE:E0:4D:92:FD:2A:91:7A:50:6A:92:51:8D:B4:A1:FB:EC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.111.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1b:af:e6:36:96:37:77:37:36:0c:61:9a:fc:66:04:17:bf:
59:25:e8:22:f5:70:a3:11:dd:ab:67:63:1e:fe:cf:30:d9:2b:
00:e9:f1:89:94:bb:9c:db:d3:01:59:0b:5f:07:29:f3:47:9a:
eb:5e:4c:ea:0d:ae:e3:15:7a:74:55:94:25:c4:e8:e4:91:44:
28:02:7c:ab:89:e3:af:92:94:e9:ff:60:f0:c7:e1:88:a3:a8:
44:d4:a2:2e:28:6f:f1:44:bb:1f:34:ae:77:9e:d6:da:87:6d:
f1:0b:6b:69:6b:44:5b:2d:9b:00:66:86:10:f9:c8:de:a6:17:
15:39:a3:41:2c:47:fd:67:17:c5:b0:d4:0a:95:38:f4:6b:5d:
51:55:e7:61:0b:5f:70:ac:fc:1b:90:47:6a:50:cf:05:61:0a:
88:07:31:88:45:00:19:69:50:db:65:6d:d4:14:66:82:10:12:
52:e9:17:34:35:48:50:a9:79:ac:7a:bc:4c:9b:c2:27:3e:3b:
63:e8:65:10:ed:8d:8b:c9:1b:95:97:54:0e:b2:fb:e8:9a:fc:
f4:6b:e5:9b:74:ab:10:1b:18:e5:00:07:8c:d2:27:2c:4b:b3:
8c:f2:a5:39:1f:97:fc:6a:7c:ac:08:99:a7:1e:09:5e:b5:53:
90:4d:21:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 28 10:27:54 2026 by rpki-client