Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137372e302f32342d3332203d3e20313431393935.roa
File: 3139342e3138302e3137372e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: JfRfzNUIv76LlFK/saqCTjFcw+bOhZZR+eEDH+uvoDs=
Subject key identifier: 53:38:43:D1:44:A2:B4:89:48:CB:8B:C8:48:27:06:1B:C0:1C:18:5D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5048DF9853A1D3DED5E76DC02DB6289DA80B269F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137372e302f32342d3332203d3e20313431393935.roa
Signing time: Fri 23 Oct 2026 16:30:32 +0000
ROA not before: Fri 23 Oct 2026 16:25:32 +0000
ROA not after: Fri 22 Oct 2027 16:30:32 +0000
asID: 141995
IP address blocks: 194.180.177.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:48:df:98:53:a1:d3:de:d5:e7:6d:c0:2d:b6:28:9d:a8:0b:26:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:32 2026 GMT
Not After : Oct 22 16:30:32 2027 GMT
Subject: CN=533843D144A2B48948CB8BC84827061BC01C185D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:0a:d3:fe:e9:4f:e8:b6:2d:76:8c:ea:41:
b4:df:6f:34:31:6c:58:1b:e4:c7:c5:e6:86:8e:e5:
86:f6:d6:65:75:6c:37:9c:cb:53:b5:f9:1e:b4:5c:
ed:35:64:52:22:6d:15:93:c5:2a:44:66:66:d4:0f:
0e:99:00:d6:6c:e5:b9:71:1d:2a:a4:a1:c6:d3:88:
26:02:79:10:62:19:10:65:36:0e:a3:83:66:fc:16:
99:75:9b:2d:d4:38:da:97:8d:50:39:78:59:d9:58:
b5:cb:0d:03:d2:ba:29:2a:16:ca:28:19:21:b2:3f:
ce:a4:ec:78:20:60:2e:5f:4a:7f:ff:50:70:db:68:
7f:56:3c:ae:0d:d8:da:7e:39:f8:83:94:00:0f:77:
41:61:3f:b0:d7:70:58:55:83:ca:2b:15:a9:3f:4c:
25:48:dd:9d:84:dd:20:82:c6:a6:32:70:94:54:c9:
29:54:ab:fe:8b:b3:06:98:7e:17:08:3e:82:df:6a:
ae:99:40:d1:d6:7a:43:42:a4:3a:cd:16:af:4c:91:
a5:6b:c1:61:0f:ef:ce:8c:bf:5d:86:c8:99:ad:78:
e8:dc:9d:dd:10:a5:c7:ab:cf:8e:ba:6b:51:6d:39:
1c:69:41:54:1f:f0:c0:f0:f4:60:8c:1d:8d:0c:89:
da:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:38:43:D1:44:A2:B4:89:48:CB:8B:C8:48:27:06:1B:C0:1C:18:5D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137372e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.177.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e4:c6:79:98:23:e1:e8:fc:ba:99:76:e7:0b:af:c1:dc:45:
14:4b:00:d1:09:58:b5:65:d3:4d:ae:c9:ce:92:3a:77:24:b2:
df:21:b1:05:4c:c6:91:6b:9b:e8:6c:ac:70:d2:34:05:c8:89:
57:7e:df:7f:9c:c7:64:8d:8e:73:6e:9f:69:42:24:d9:dd:fc:
c2:12:d7:38:c6:98:ad:e2:dd:e3:55:96:2c:d0:cf:de:df:e0:
20:3f:9b:a5:34:87:35:02:d3:7b:66:2d:b2:92:f4:f7:32:99:
24:09:d2:42:82:17:55:a7:32:f4:b4:fa:01:10:98:be:9b:bf:
8a:a6:cf:9a:43:46:81:c6:a5:4f:4c:1c:80:7f:84:96:ae:2c:
1a:3e:63:b5:62:1b:bb:27:fb:16:f8:d7:c8:f3:38:c4:c1:36:
a1:e0:f6:56:a8:c8:16:b0:af:8d:4b:77:32:eb:ce:85:ea:ad:
60:0a:0e:b2:56:45:cc:70:4a:81:ce:f2:2c:fa:16:70:21:f0:
67:d8:05:89:e0:b6:78:25:32:c2:44:1c:eb:15:63:fc:fb:df:
cb:84:19:a3:e6:e0:9c:83:4a:32:50:d4:9b:97:71:c6:b7:75:
b4:72:62:80:61:aa:f7:51:02:1e:6e:5e:3e:2f:ca:c5:64:90:
3c:25:96:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:38:15 2026 by rpki-client