Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa
File: 3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: HO21D6YwQLRVhOAFQVz0Q8AoJFZ32bo90s119N1tZUc=
Subject key identifier: D0:F9:4A:18:F8:8D:CE:04:CB:50:E3:05:AB:BC:43:B7:DF:5E:1B:BD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6C5E7E0F731579CF046023771DFC8402138B1B87
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:38 +0000
ROA not before: Fri 23 Oct 2026 16:25:38 +0000
ROA not after: Fri 22 Oct 2027 16:30:38 +0000
asID: 136787
IP address blocks: 194.180.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5e:7e:0f:73:15:79:cf:04:60:23:77:1d:fc:84:02:13:8b:1b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:38 2026 GMT
Not After : Oct 22 16:30:38 2027 GMT
Subject: CN=D0F94A18F88DCE04CB50E305ABBC43B7DF5E1BBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:58:d0:53:34:35:75:c6:d9:c9:40:36:0e:
c6:dd:e8:6f:a6:92:08:42:3c:b9:d6:ed:20:b1:35:
c3:c3:b0:09:92:48:02:97:07:77:75:fa:2f:f1:30:
fe:49:cc:5d:db:57:18:73:40:51:50:54:70:2b:35:
44:ef:e3:2b:e7:2d:2a:57:c2:b9:cb:21:6f:59:9e:
28:1e:72:4c:4c:0e:16:17:c1:75:98:6b:f9:1f:90:
fe:e0:83:17:71:47:da:e9:8b:48:6c:ee:d3:67:00:
6e:63:3b:2e:b4:a8:b8:5c:95:3c:68:2d:22:30:85:
16:9d:4d:56:0c:49:51:79:67:eb:71:8e:05:54:3b:
56:dc:1b:39:28:81:a4:72:84:7b:e3:69:ba:dc:2a:
1b:f5:04:4f:b9:3f:32:bb:28:e5:6c:6a:6c:fb:0b:
58:e5:0f:06:4a:ec:38:17:af:30:8f:3c:57:2f:88:
8d:c9:50:e3:d6:1b:f5:f3:6d:59:f8:e9:9e:cc:48:
9c:22:4d:b7:e0:d1:90:04:06:c5:2b:ea:97:86:ff:
5e:5a:92:80:ec:f5:00:e7:51:26:c4:9e:a9:b4:48:
ac:52:7f:3b:d4:59:48:d0:8c:47:af:36:69:17:b5:
b1:fc:91:d7:04:85:28:07:69:cd:9c:da:6c:d4:f7:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F9:4A:18:F8:8D:CE:04:CB:50:E3:05:AB:BC:43:B7:DF:5E:1B:BD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.179.0/24
Signature Algorithm: sha256WithRSAEncryption
37:39:10:51:12:d3:ea:b0:21:04:4a:8a:ca:0a:31:20:ff:50:
80:74:18:df:91:ef:78:b5:06:d6:4d:57:07:b7:f9:a0:52:c4:
ea:06:61:cd:27:77:63:b9:fb:ac:87:70:3f:39:8c:2c:ec:8c:
2f:94:a8:31:40:90:a6:da:65:fc:f7:cb:a2:49:24:50:d8:05:
2e:33:0a:ec:47:b6:c7:d6:fa:08:77:4a:c2:a3:2f:5a:7e:6a:
2a:11:09:24:13:87:fa:97:f8:21:00:c3:2b:68:cd:a1:47:d9:
44:c8:fa:2f:81:c7:96:be:12:a7:ee:7a:52:ad:61:5e:e4:4a:
ed:34:c5:67:f6:f5:d3:6f:f9:c5:68:f0:17:db:82:dc:d7:0b:
19:2c:5b:00:85:fb:81:96:cb:d1:84:06:40:41:d7:c2:21:88:
69:85:7e:71:6e:19:84:fb:ca:1f:31:46:ee:1f:54:e3:06:d9:
7b:58:57:ee:29:ab:10:ea:89:4b:00:7f:9a:93:1c:6c:d8:ba:
65:4b:f3:88:85:43:8f:2a:be:cf:a1:68:e0:d3:13:eb:93:01:
13:b2:85:a6:76:1a:23:26:82:b6:87:91:6c:dc:3d:c0:50:63:
b0:f2:e7:ab:e4:e7:ca:ce:6e:cd:62:d9:0d:ca:c9:17:54:12:
a2:fe:b0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:57:25 2026 by rpki-client