Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135342e302f32342d3234203d3e20313336373837.roa
File: 3139342e352e3135342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: CEyb3lX/wUsrgIykwID449tXVp3b88Cv7rt4r7AVdVA=
Subject key identifier: 23:4C:B0:FA:81:05:C6:5C:8A:12:2D:C3:A1:8B:99:51:30:EB:25:A6
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2D707E072F93116E54025CFD40859232A648715D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:09 +0000
ROA not before: Fri 23 Oct 2026 16:25:09 +0000
ROA not after: Fri 22 Oct 2027 16:30:09 +0000
asID: 136787
IP address blocks: 194.5.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:70:7e:07:2f:93:11:6e:54:02:5c:fd:40:85:92:32:a6:48:71:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:09 2026 GMT
Not After : Oct 22 16:30:09 2027 GMT
Subject: CN=234CB0FA8105C65C8A122DC3A18B995130EB25A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:69:7b:94:50:8c:9a:09:37:c7:89:36:8d:
82:51:50:9a:2f:46:c5:b6:c5:a6:0d:94:be:6b:0a:
c0:cd:1a:9a:89:59:a8:f8:18:41:61:72:32:60:df:
07:69:66:b8:92:5b:e8:8d:a0:3f:5b:c3:13:33:89:
0d:8d:05:cb:1d:3c:c4:a3:c1:fe:91:95:4d:f1:f2:
5b:fe:56:ed:81:b9:81:b6:90:77:9d:85:ad:f0:81:
22:74:1b:08:94:8b:ef:ec:41:9b:5c:df:47:85:6e:
b7:32:9e:aa:d4:a1:3d:eb:ae:c9:db:ee:1f:dc:5f:
b6:af:27:32:35:f7:ff:e8:f4:82:3e:14:c6:af:0c:
dc:e9:9f:c6:16:16:1e:65:53:0b:33:e1:d8:59:cd:
4f:a9:6f:bd:2e:9a:46:2d:58:4c:d7:36:92:3d:16:
bb:c6:43:51:4b:bc:f6:e9:7b:18:24:28:ae:32:e4:
16:95:a5:a5:7b:47:78:c3:32:2f:0d:dd:78:d2:ea:
ee:2e:1e:07:1b:4c:17:08:ab:32:d7:0f:d9:b2:81:
80:c9:3d:5d:bc:ff:e7:8c:12:ba:0b:76:38:0f:25:
82:ae:a4:0b:d7:1f:40:a7:25:53:24:1c:fe:9a:1e:
48:e1:d0:42:66:eb:28:2e:d8:d0:d8:f7:c5:ad:45:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4C:B0:FA:81:05:C6:5C:8A:12:2D:C3:A1:8B:99:51:30:EB:25:A6
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.154.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e0:dc:04:fc:44:68:f4:a9:8d:e3:7f:94:36:eb:9a:41:4b:
be:cf:d0:56:de:a9:82:0c:4e:75:4e:48:3c:1e:6a:a3:87:6e:
4c:ed:3b:e9:1b:e2:03:82:d3:e3:d5:ce:84:fb:75:8d:97:90:
d7:d8:17:ed:79:6d:15:2d:4c:59:c1:5d:4d:fc:51:9f:08:17:
6a:90:af:43:92:62:90:30:ee:5e:62:49:d9:06:9a:41:14:c7:
bf:73:1f:c7:70:fd:52:d1:c2:06:f0:b9:64:c3:19:4e:5b:06:
c4:6e:37:46:2e:88:71:c2:5a:02:be:bb:02:b1:9c:d3:db:66:
9b:a6:89:2c:ff:9b:f1:82:4f:b7:6b:98:05:67:bc:58:46:a9:
08:c2:a4:e5:25:ac:11:f1:3a:0e:c2:94:8a:c2:18:19:ac:28:
d6:eb:f6:68:0a:a7:be:ad:a1:0c:27:85:21:24:b6:a3:ab:2f:
71:19:cb:f1:be:6c:a4:09:8c:f1:33:0e:fb:5d:6a:e6:ca:0e:
96:04:7c:4e:9c:3f:a8:00:63:30:f9:bc:51:08:ab:f3:12:53:
42:6a:43:ff:03:cc:69:44:36:42:6b:d4:f0:5e:c4:84:35:36:
02:ed:69:a4:48:9b:62:36:77:5c:b9:12:c5:85:99:ab:b2:32:
96:83:af:99
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIULXB+By+TEW5UAlz9QIWSMqZIcV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MDlaFw0yNzEwMjIxNjMwMDlaMDMxMTAvBgNV
BAMTKDIzNENCMEZBODEwNUM2NUM4QTEyMkRDM0ExOEI5OTUxMzBFQjI1QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWml7lFCMmgk3x4k2jYJRUJov
RsW2xaYNlL5rCsDNGpqJWaj4GEFhcjJg3wdpZriSW+iNoD9bwxMziQ2NBcsdPMSj
wf6RlU3x8lv+Vu2BuYG2kHedha3wgSJ0GwiUi+/sQZtc30eFbrcynqrUoT3rrsnb
7h/cX7avJzI19//o9II+FMavDNzpn8YWFh5lUwsz4dhZzU+pb70umkYtWEzXNpI9
FrvGQ1FLvPbpexgkKK4y5BaVpaV7R3jDMi8N3XjS6u4uHgcbTBcIqzLXD9mygYDJ
PV28/+eMEroLdjgPJYKupAvXH0CnJVMkHP6aHkjh0EJm6ygu2NDY98WtRR77AgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUI0yw+oEFxlyKEi3DoYuZUTDrJaYwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1MmUz
MTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADCBZowDQYJKoZIhvcNAQELBQADggEBAGrg3AT8RGj0qY3jf5Q265pBS77P
0FbeqYIMTnVOSDweaqOHbkztO+kb4gOC0+PVzoT7dY2XkNfYF+15bRUtTFnBXU38
UZ8IF2qQr0OSYpAw7l5iSdkGmkEUx79zH8dw/VLRwgbwuWTDGU5bBsRuN0YuiHHC
WgK+uwKxnNPbZpumiSz/m/GCT7drmAVnvFhGqQjCpOUlrBHxOg7ClIrCGBmsKNbr
9mgKp76toQwnhSEktqOrL3EZy/G+bKQJjPEzDvtdaubKDpYEfE6cP6gAYzD5vFEI
q/MSU0JqQ/8DzGlENkJr1PBexIQ1NgLtaaRIm2I2d1y5EsWFmauyMpaDr5k=
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:53:26 2026 by rpki-client