Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3133302e302f32342d3234203d3e20383334.roa
File: 3139342e32362e3133302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Dko+RMySYkz7zRUECkQWO4c102wiZ7YyvMz2kEHYeug=
Subject key identifier: 86:BE:1E:98:B4:61:DD:7A:46:D4:6D:74:C2:C6:77:63:A2:68:63:D8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 469511F6BE0618BD643F10F07BF367ACA0F8F900
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3133302e302f32342d3234203d3e20383334.roa
Signing time: Sun 08 Nov 2026 18:50:50 +0000
ROA not before: Sun 08 Nov 2026 18:45:50 +0000
ROA not after: Sun 07 Nov 2027 18:50:50 +0000
asID: 834
IP address blocks: 194.26.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:95:11:f6:be:06:18:bd:64:3f:10:f0:7b:f3:67:ac:a0:f8:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 8 18:45:50 2026 GMT
Not After : Nov 7 18:50:50 2027 GMT
Subject: CN=86BE1E98B461DD7A46D46D74C2C67763A26863D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:38:35:6b:ac:de:7a:c2:48:3d:12:ed:81:2d:
e8:34:0d:a2:5f:31:6b:6e:ac:4e:b9:0e:11:99:b7:
12:4b:0f:cd:02:97:18:57:24:8e:7b:15:5e:2f:dd:
1d:8a:24:0c:43:59:07:9b:50:9a:a9:ed:b6:bc:bc:
68:31:a7:75:6a:23:e0:68:5c:32:11:18:02:8e:95:
c3:78:07:2b:90:8e:c7:77:1a:05:62:47:0d:de:55:
8d:0c:26:41:70:c7:8a:c2:95:f3:b6:54:c5:ac:45:
44:62:f2:30:0e:01:a3:57:c7:40:5c:43:55:10:99:
89:13:c7:9b:cc:12:3f:91:1f:24:17:be:9e:f6:67:
d9:71:a0:67:a3:79:65:b8:e3:71:8c:d8:a9:69:8b:
3b:2f:52:68:9e:d7:4b:06:6d:ab:86:7f:ca:3a:62:
59:be:18:51:ee:ec:8c:df:ae:48:c6:a9:1e:fe:c8:
37:b7:16:93:f2:f0:3a:f2:29:00:7e:e5:71:a9:0a:
e3:a0:94:48:de:d3:e2:3d:92:f8:cd:de:17:5a:8b:
03:dc:f8:4d:c5:e6:09:91:61:b6:d3:a4:bf:69:15:
39:78:97:5d:1f:03:27:8b:50:b5:30:e0:2e:48:51:
f8:d9:1b:75:ee:70:c6:dd:1f:a8:9e:e3:9e:0d:cd:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BE:1E:98:B4:61:DD:7A:46:D4:6D:74:C2:C6:77:63:A2:68:63:D8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3133302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.130.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:9c:34:ae:a7:9c:79:2f:a6:5f:03:31:30:5f:2c:ac:76:65:
34:a7:64:01:22:a4:1f:00:39:50:03:a4:c2:ea:58:fc:99:3d:
0f:83:e8:e4:9b:2b:01:af:15:92:d7:f6:2e:3a:4d:8e:38:70:
e4:f2:d6:95:5d:c8:e0:d3:eb:2a:21:83:7d:16:76:17:2c:49:
40:c6:ea:a5:6a:9c:d2:1a:e2:b8:fd:6a:ff:15:e8:e5:16:18:
2c:73:b4:5f:b0:b3:b1:02:42:44:25:d5:37:fa:ae:18:fb:47:
88:2a:dc:60:90:c4:43:06:8a:84:9a:a0:1f:d6:b4:0e:3c:79:
36:e2:45:9a:ff:52:1c:aa:8c:d1:19:1e:47:51:c2:e2:a2:84:
7e:e6:9b:a3:03:56:24:df:df:76:72:28:ae:4d:83:62:0a:d5:
6a:3a:1d:16:f4:ce:01:24:59:cf:27:13:30:6f:20:ae:33:79:
c7:6f:c9:c1:c2:04:ad:2d:3e:e3:ff:d1:44:c0:ac:7f:e2:f1:
84:4a:84:10:9a:c6:21:98:2f:6f:c0:5a:1e:8a:8d:ab:4b:cb:
50:ed:95:33:38:f3:4b:31:7e:b1:59:ea:2d:22:57:dc:70:46:
e7:82:f1:f7:be:c6:28:03:ab:3b:d8:f6:b5:6b:9a:2d:2b:9d:
24:9b:6b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:50:32 2026 by rpki-client