Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233352e302f32342d3234203d3e20323132323338.roa
File: 3139342e33342e3233352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 6oBIISpD8yUOFJXxlrZrygpEfNue7WcxnH5efdi8DvY=
Subject key identifier: 4A:ED:45:4D:9B:24:29:40:EF:AE:AC:CD:58:00:76:5C:3B:2D:91:5F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1AA4603545C72727E764E2716E8A92581592DEDE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233352e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 09:27:23 +0000
ROA not before: Thu 30 Jul 2026 09:22:23 +0000
ROA not after: Thu 29 Jul 2027 09:27:23 +0000
asID: 212238
IP address blocks: 194.34.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a4:60:35:45:c7:27:27:e7:64:e2:71:6e:8a:92:58:15:92:de:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 30 09:22:23 2026 GMT
Not After : Jul 29 09:27:23 2027 GMT
Subject: CN=4AED454D9B242940EFAEACCD5800765C3B2D915F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:54:b4:c2:e6:9b:c5:a3:71:1c:1c:4e:52:
d3:87:c9:2b:d8:76:4a:c1:88:f8:d2:37:6c:c6:82:
80:2f:d9:e4:1a:d0:e2:7f:c0:96:e9:94:a6:40:9d:
e6:82:1d:d1:0c:00:41:b7:6c:ea:2d:fc:04:c0:a2:
9c:4c:8f:8e:d7:b3:f9:18:cc:71:55:8b:b9:f0:2d:
3e:62:6f:00:d9:7c:e8:48:07:a9:a1:bf:e9:4f:e0:
24:d0:0b:ea:f3:b8:b7:06:8f:23:43:20:01:d7:73:
a3:fa:ee:12:29:b8:b5:18:12:ef:e6:bc:df:bb:13:
ef:0a:c9:ae:c0:20:c2:6e:53:af:67:97:67:d3:7e:
e5:3d:99:cd:0a:d7:f0:50:5d:3a:5f:c8:ef:99:d5:
76:d9:66:0d:2c:73:4f:d5:37:6b:fa:bb:06:e9:20:
d1:86:b2:7b:72:1c:c7:39:6b:66:d7:cf:96:d5:d6:
74:ed:0f:b8:5e:e7:0f:9c:28:3f:9a:60:58:bd:29:
ec:86:c5:34:ee:fb:66:5d:7b:f1:ad:ee:37:c1:7b:
53:58:2e:47:93:63:e0:c3:6c:d7:33:3a:88:e3:14:
21:20:fe:a6:da:5c:ef:a3:88:bd:26:a9:40:66:57:
54:46:04:96:14:9d:8d:a3:aa:f1:57:8f:eb:5b:e4:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:ED:45:4D:9B:24:29:40:EF:AE:AC:CD:58:00:76:5C:3B:2D:91:5F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.235.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f3:ec:e2:37:d8:77:0f:c8:d5:24:4c:e7:82:f5:69:9e:50:
b4:61:a9:4d:1e:9b:9a:c9:c8:fd:95:38:d7:bc:65:99:ae:9c:
4c:fb:a8:0f:74:5c:eb:42:74:05:24:55:11:03:1d:d0:69:11:
60:ef:15:45:81:0f:06:a1:5e:79:e2:d4:82:27:6a:20:b9:b8:
60:e4:88:87:86:96:89:eb:87:ea:7e:43:d1:61:1b:38:8c:94:
b9:96:25:94:3a:5c:f8:78:f0:ee:b0:b9:ed:ea:f9:98:bb:a3:
27:4d:84:e0:66:71:20:5b:c6:2c:43:a8:e0:13:0f:b5:1a:6e:
82:d9:3e:d9:57:1a:1e:dc:c3:f8:1b:29:6a:17:97:56:9a:2b:
60:f5:ad:2a:9f:92:cc:e9:64:aa:41:50:4f:27:be:a9:a7:4a:
7e:72:b2:a1:fc:14:73:45:cb:d8:df:ef:d4:24:43:fe:86:3f:
bc:38:46:83:c6:6a:de:02:4e:be:e0:87:c4:ab:9b:44:c8:1b:
d3:1e:5b:44:c4:66:a0:db:f9:f9:7d:f2:b3:99:44:f5:3d:29:
07:f5:a0:2f:c8:8a:68:51:13:06:5b:ac:3b:24:e5:a1:c7:b9:
0d:ca:01:51:4a:6f:63:ea:ab:4a:26:a8:d2:15:01:06:a1:7e:
a0:dd:c5:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:36:50 2026 by rpki-client