Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3133302e302f32342d3234203d3e20313437323831.roa
File: 3139342e32362e3133302e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: uKIf4EiczMmVXWnLJXjaFrk8U6a4GUopcstWZH/pyZc=
Subject key identifier: 5E:17:18:B6:14:96:D0:CA:34:33:3B:F0:02:B5:6A:8E:B2:61:CC:49
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 24A03D017A6590A16F6DFFB880765A5076DA8269
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3133302e302f32342d3234203d3e20313437323831.roa
Signing time: Thu 08 Oct 2026 11:35:07 +0000
ROA not before: Thu 08 Oct 2026 11:30:07 +0000
ROA not after: Thu 07 Oct 2027 11:35:07 +0000
asID: 147281
IP address blocks: 194.26.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 15:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a0:3d:01:7a:65:90:a1:6f:6d:ff:b8:80:76:5a:50:76:da:82:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 8 11:30:07 2026 GMT
Not After : Oct 7 11:35:07 2027 GMT
Subject: CN=5E1718B61496D0CA34333BF002B56A8EB261CC49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:d3:b8:c4:61:00:91:71:f0:f3:61:08:8e:
77:2b:79:f4:ca:86:b3:f3:b8:87:b6:5b:55:dc:6a:
2e:00:8a:aa:56:59:4a:32:f7:ad:0d:39:0f:e9:45:
b8:da:52:32:c3:6c:1d:64:5d:ee:34:53:de:c4:ad:
2e:ae:87:59:80:85:39:8b:dc:0d:49:2c:b5:6d:d2:
3b:62:8b:4a:48:5b:9b:44:0e:bc:df:80:bf:e5:78:
3f:19:b9:40:d1:2d:1e:ac:0e:ba:55:e6:64:7e:53:
de:ac:71:8e:42:31:5d:ec:2b:c7:0a:11:38:ff:25:
43:32:5f:5e:a7:08:f0:8a:21:b6:d4:04:8d:48:06:
c8:49:a5:02:01:da:0f:90:98:e5:38:c8:1f:04:42:
55:57:1a:e6:41:73:9d:a3:02:a0:e8:94:53:12:85:
e0:45:77:9e:61:b1:12:05:a4:44:89:55:d8:4e:e8:
db:ce:e1:2c:af:8b:eb:d6:a9:a2:19:52:60:eb:4f:
fd:47:8f:6c:39:8e:df:31:de:a3:6f:8d:1b:32:fe:
53:c7:11:8f:6c:24:d8:e1:af:5c:3d:55:56:7b:46:
52:4b:0f:ea:0f:2e:7b:d1:15:dd:ee:fe:ff:5c:ba:
fe:aa:4f:da:1a:bb:7b:82:4e:34:5a:d7:6c:b8:f5:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:17:18:B6:14:96:D0:CA:34:33:3B:F0:02:B5:6A:8E:B2:61:CC:49
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3133302e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.130.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:62:33:67:c1:7c:c5:91:dd:58:c4:21:2e:3f:fc:ee:d3:65:
36:4e:bf:3a:96:30:db:69:5e:10:f7:49:1d:9a:fe:2f:28:ee:
ab:21:9e:db:a3:76:ca:a0:a5:41:4b:83:95:08:47:d3:4b:50:
b6:29:43:6e:e5:b9:f3:7c:45:15:8c:7f:4d:26:5d:d8:db:a1:
13:c8:fa:bd:ee:69:18:9a:df:27:d1:3b:42:01:7f:2d:0f:ee:
21:41:49:a7:a0:17:fc:1a:fc:d5:ad:bb:8b:30:8d:7a:a0:df:
a3:29:ba:97:ca:32:3e:c8:62:a5:9a:be:88:c9:53:20:02:f5:
29:46:c5:bb:a9:55:24:0f:e1:02:3c:7c:f9:3c:de:a3:d3:75:
43:3f:76:21:2f:35:e3:18:f7:a4:7d:04:7e:ae:e5:6e:a1:9e:
08:ec:b7:a1:aa:33:6e:00:48:53:c9:d4:88:a6:03:69:9f:1f:
23:95:1a:6b:61:7f:f1:05:00:55:d0:9c:cb:82:d9:16:d2:13:
be:00:be:dd:ce:e8:7c:95:69:57:e4:1e:91:58:8f:dd:de:cd:
5e:17:29:37:ee:e9:44:03:80:56:1e:a4:38:d6:0b:1a:22:1f:
f7:7c:3c:43:fd:42:57:87:3c:73:f1:bd:d1:ed:93:c6:07:ef:
92:3c:6f:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 12 07:52:20 2026 by rpki-client