Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa
File: 3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 1Ss3L0k3Pkf4tycXIO74iAp7rWYV5Iv8D+1tNJxO5O4=
Subject key identifier: 22:09:A6:0E:BD:40:5F:2F:0F:6B:DE:00:80:56:76:13:10:FE:85:F1
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 39B690D1F7291FF2FA17BE1DE4FFF02077EEFA17
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa
Signing time: Fri 23 Oct 2026 16:30:11 +0000
ROA not before: Fri 23 Oct 2026 16:25:11 +0000
ROA not after: Fri 22 Oct 2027 16:30:11 +0000
asID: 51167
IP address blocks: 194.180.176.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 07:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b6:90:d1:f7:29:1f:f2:fa:17:be:1d:e4:ff:f0:20:77:ee:fa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:11 2026 GMT
Not After : Oct 22 16:30:11 2027 GMT
Subject: CN=2209A60EBD405F2F0F6BDE008056761310FE85F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:ee:bc:c1:38:b2:69:dc:a9:5f:f3:38:9a:
8a:ac:71:78:8d:2e:0d:25:be:ea:78:1b:33:a6:fb:
ad:7f:0d:40:d4:9f:ca:5d:83:01:06:04:90:8a:ca:
48:14:9e:ba:0b:72:55:27:ac:96:d3:5d:e8:92:4e:
28:fc:2e:ed:19:3b:30:01:65:fa:cc:68:e3:97:de:
60:10:7d:56:6e:41:ae:c5:bd:85:1a:c5:91:15:d9:
0d:11:2f:d5:90:24:d9:a3:25:80:66:b1:0a:18:b3:
4e:93:67:0a:7f:0b:9f:5e:ad:72:bc:af:08:53:7e:
65:97:a8:09:ec:7f:4d:95:c7:c0:57:b5:4e:3d:1f:
78:5a:9c:4c:9d:2e:57:34:73:17:06:3f:56:9a:d1:
18:94:0e:66:03:15:e3:33:8a:c5:eb:bc:12:ae:f0:
fc:16:c6:21:37:72:7a:20:11:8a:ba:94:86:83:22:
49:7d:58:1c:4d:66:73:65:dd:84:63:60:1a:28:83:
bd:d6:7e:6d:1f:cd:d9:1a:2c:19:1f:c8:89:8e:0d:
ef:52:56:5f:09:c9:fd:d9:a2:67:39:4c:3e:77:31:
92:0f:c1:ba:88:69:53:2f:2b:d5:fb:e8:ad:bb:86:
4a:c4:88:5e:06:36:e8:ca:28:bc:9d:6f:52:f9:0f:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:09:A6:0E:BD:40:5F:2F:0F:6B:DE:00:80:56:76:13:10:FE:85:F1
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.176.0/24
Signature Algorithm: sha256WithRSAEncryption
62:21:de:72:31:3d:9e:68:d2:6b:bd:d6:01:7d:14:44:3f:b7:
93:c6:e4:38:66:b8:41:8c:48:c2:2a:76:2c:04:a6:45:85:50:
76:e6:dc:ee:6c:6c:a7:38:77:f7:a3:16:dd:86:50:f5:6f:03:
1a:41:a9:bb:eb:f8:4c:e9:93:2e:d4:34:a4:4b:49:e8:e2:ad:
b8:14:90:5c:31:04:4f:31:be:02:72:b1:78:9e:85:6f:e4:da:
fe:b9:26:45:51:81:fa:68:ca:af:f8:f5:20:15:30:8b:7f:cc:
b7:ca:7e:fb:f3:71:eb:02:06:63:3a:3f:3f:d3:82:28:6f:08:
16:97:42:41:39:4d:c5:27:26:e2:42:c5:5c:60:ac:04:7e:ef:
61:95:be:d2:a8:42:02:8f:c1:f9:e7:e5:26:19:ac:8d:d6:c0:
53:e3:85:1a:9f:e2:bc:8e:df:f1:ad:e5:fa:c2:0a:3b:cd:f0:
ac:26:df:21:b8:64:a0:db:f5:b9:e2:64:6d:86:93:2f:ac:66:
cd:73:92:27:37:22:4a:0c:7c:5a:aa:64:1d:ed:16:3a:e5:2b:
95:a8:ed:3a:2b:a8:80:c5:3d:5d:07:21:e7:fe:34:7f:fa:0a:
e4:e1:2d:e1:60:29:17:46:d3:df:be:ff:a9:b4:7b:c2:e5:83:
42:cd:13:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 25 00:59:59 2026 by rpki-client