Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3133302e302f32342d3234203d3e20313532373236.roa
File: 3139342e32362e3133302e302f32342d3234203d3e20313532373236.roa (raw, json)
Hash identifier: xVxb3NfDqRV95CgH+WVn4hw0cnygobvDRWyiwbZHzSE=
Subject key identifier: 9F:2B:FE:08:D5:4B:0F:F2:88:CB:DF:EE:DA:DA:10:CA:02:B0:8B:16
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2F5146C7EC4AC10C5D5EB7778D55F49DCC641F95
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3133302e302f32342d3234203d3e20313532373236.roa
Signing time: Mon 12 Oct 2026 13:43:19 +0000
ROA not before: Mon 12 Oct 2026 13:38:19 +0000
ROA not after: Mon 11 Oct 2027 13:43:19 +0000
asID: 152726
IP address blocks: 194.26.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:51:46:c7:ec:4a:c1:0c:5d:5e:b7:77:8d:55:f4:9d:cc:64:1f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 12 13:38:19 2026 GMT
Not After : Oct 11 13:43:19 2027 GMT
Subject: CN=9F2BFE08D54B0FF288CBDFEEDADA10CA02B08B16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:26:f8:f1:11:43:ee:99:73:eb:52:52:2a:
eb:57:3f:e2:c0:b0:d3:ac:52:df:4b:86:2b:5d:d7:
1d:57:b2:f5:4a:c1:cd:74:e7:93:a9:12:34:a9:d8:
f1:96:5a:2f:a0:25:8a:e6:93:bc:3c:78:2b:62:18:
98:1d:db:b2:51:8f:94:fe:7e:d6:cd:2e:d9:f5:ba:
80:1e:7b:30:73:e0:19:66:41:16:ce:c2:76:29:fc:
69:60:b6:29:30:e9:03:08:fd:37:8e:59:8c:43:93:
0f:ae:19:b9:e8:11:23:53:74:b7:2b:6e:a5:9b:be:
61:0e:f0:d4:f0:34:13:5b:1e:65:f9:61:bd:34:e1:
bd:6a:ed:ca:43:40:ce:3e:c4:b0:5c:09:c0:bc:3a:
63:85:37:f0:a1:55:a7:2d:d9:e4:6b:8b:21:50:57:
04:89:40:21:4f:69:a8:ec:63:5d:bf:11:f3:7f:ad:
4b:74:05:24:4b:1e:7a:43:b6:2d:9d:af:45:fa:27:
81:f5:0e:8c:1e:5a:22:70:9f:ae:3c:83:90:63:09:
fd:a8:99:9c:32:bb:4d:24:ba:32:a2:0e:b4:0f:02:
57:c4:47:be:2e:fb:b9:6c:7c:dd:19:95:9c:d3:09:
f7:04:fb:99:42:11:88:76:94:ed:eb:ad:c0:de:ad:
a5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2B:FE:08:D5:4B:0F:F2:88:CB:DF:EE:DA:DA:10:CA:02:B0:8B:16
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3133302e302f32342d3234203d3e20313532373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.130.0/24
Signature Algorithm: sha256WithRSAEncryption
51:08:48:5c:ec:10:b1:85:b4:41:ca:cd:47:23:cb:95:9b:d2:
e2:b8:ca:de:84:ea:f9:16:81:46:58:1b:03:a9:f0:8a:05:3c:
29:83:96:68:ae:0c:49:d4:47:18:10:71:74:d9:76:da:ef:b3:
98:76:45:52:df:e1:56:9c:9d:3d:67:75:1d:60:aa:e6:ef:33:
2a:bc:27:f8:0c:4d:df:62:d7:a4:cf:c5:1b:2a:4a:fa:59:58:
13:38:56:f6:38:23:d4:1b:44:af:85:a7:b1:1c:40:d1:56:df:
42:f9:63:b1:39:b9:98:6b:0a:c3:0c:4f:3e:98:06:83:8f:14:
e2:f1:cd:47:17:7f:42:c9:f0:8d:e2:04:f0:52:9b:50:57:81:
eb:84:ba:54:04:ce:ef:eb:fa:3d:bb:79:b2:d2:e7:1e:97:59:
ca:05:d4:a6:b7:47:10:d9:17:82:9d:24:73:51:9d:04:1d:cb:
57:f0:31:7f:c8:72:de:a1:89:ed:4e:6c:aa:a5:4e:39:3f:61:
68:a4:4d:ba:4b:34:9c:87:e2:94:a7:0d:84:23:4c:77:fe:25:
04:e4:74:67:6c:38:80:85:3d:a3:8e:4f:a2:ed:b1:1a:bb:24:
bb:b1:f7:64:dd:cd:5d:70:8c:1e:7f:a4:3f:ce:24:88:19:91:
6f:b7:65:cd
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUL1FGx+xKwQxdXrd3jVX0ncxkH5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMTIxMzM4MTlaFw0yNzEwMTExMzQzMTlaMDMxMTAvBgNV
BAMTKDlGMkJGRTA4RDU0QjBGRjI4OENCREZFRURBREExMENBMDJCMDhCMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJASb48RFD7plz61JSKutXP+LA
sNOsUt9Lhitd1x1XsvVKwc1055OpEjSp2PGWWi+gJYrmk7w8eCtiGJgd27JRj5T+
ftbNLtn1uoAeezBz4BlmQRbOwnYp/Glgtikw6QMI/TeOWYxDkw+uGbnoESNTdLcr
bqWbvmEO8NTwNBNbHmX5Yb004b1q7cpDQM4+xLBcCcC8OmOFN/ChVact2eRriyFQ
VwSJQCFPaajsY12/EfN/rUt0BSRLHnpDti2dr0X6J4H1DoweWiJwn648g5BjCf2o
mZwyu00kujKiDrQPAlfER74u+7lsfN0ZlZzTCfcE+5lCEYh2lO3rrcDeraWLAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUnyv+CNVLD/KIy9/u2toQygKwixYwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMyMzYy
ZTMxMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzIzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMIagjANBgkqhkiG9w0BAQsFAAOCAQEAUQhIXOwQsYW0QcrNRyPLlZvS
4rjK3oTq+RaBRlgbA6nwigU8KYOWaK4MSdRHGBBxdNl22u+zmHZFUt/hVpydPWd1
HWCq5u8zKrwn+AxN32LXpM/FGypK+llYEzhW9jgj1BtEr4WnsRxA0VbfQvljsTm5
mGsKwwxPPpgGg48U4vHNRxd/QsnwjeIE8FKbUFeB64S6VATO7+v6Pbt5stLnHpdZ
ygXUprdHENkXgp0kc1GdBB3LV/Axf8hy3qGJ7U5sqqVOOT9haKRNuks0nIfilKcN
hCNMd/4lBOR0Z2w4gIU9o45Pou2xGrsku7H3ZN3NXXCMHn+kP84kiBmRb7dlzQ==
-----END CERTIFICATE-----
Generated at Fri Oct 23 07:28:20 2026 by rpki-client