Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135352e302f32342d3234203d3e20313336373837.roa
File: 3139342e352e3135352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: xjYyPKHLL/e3rtFQosCdDFXklC9AjOFxADw42hU3gS0=
Subject key identifier: 6F:91:89:D2:83:FB:25:16:F4:3B:8B:7C:76:40:66:9D:91:6D:F2:4A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 67AAA65BE43388FF9DF69FDB72BC38AC0273B98D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:42 +0000
ROA not before: Fri 23 Oct 2026 16:25:42 +0000
ROA not after: Fri 22 Oct 2027 16:30:42 +0000
asID: 136787
IP address blocks: 194.5.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:aa:a6:5b:e4:33:88:ff:9d:f6:9f:db:72:bc:38:ac:02:73:b9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:42 2026 GMT
Not After : Oct 22 16:30:42 2027 GMT
Subject: CN=6F9189D283FB2516F43B8B7C7640669D916DF24A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:80:d9:a0:65:d5:c9:2f:49:bf:06:f9:22:
89:1e:30:4f:16:7f:20:bf:b7:96:44:19:bd:50:77:
f1:c2:1e:ef:62:fd:d6:0e:70:50:f8:0b:63:37:93:
f9:56:cb:05:17:cb:6d:a4:86:ed:41:b7:87:bf:99:
13:d7:4a:e9:d9:92:3f:71:55:27:72:2d:e2:d3:c5:
15:e8:7d:53:f1:80:a5:16:9b:72:b8:ed:f0:3c:2b:
f4:41:75:d0:d4:cf:38:d8:6a:4b:9c:60:f5:0d:9a:
a8:07:9a:cb:5b:ec:0c:19:a2:27:e4:64:79:b1:56:
1a:e1:75:32:3c:24:67:ad:19:ba:e9:f3:4e:6c:65:
10:b3:94:f2:10:e8:e2:dc:31:11:83:62:86:e8:d3:
6e:5b:5e:fe:4b:41:9e:be:36:8c:2e:15:54:b7:62:
9b:56:c8:e3:a1:43:cc:26:aa:b1:f1:98:19:11:95:
83:e5:0b:24:d3:9b:b7:0a:b4:67:76:33:77:6b:47:
f5:ec:4f:81:cf:f5:4d:b4:95:fe:fc:38:f2:9a:8c:
d6:e3:ac:9d:0d:0d:21:66:19:03:c4:df:05:b9:ba:
a7:19:54:92:c8:ba:23:7b:54:4c:7d:6d:de:20:8f:
b5:93:c2:40:a9:08:43:d4:43:d1:53:8b:49:56:77:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:91:89:D2:83:FB:25:16:F4:3B:8B:7C:76:40:66:9D:91:6D:F2:4A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.155.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:7d:7d:bc:47:76:38:54:8d:fb:27:7c:84:d1:65:10:15:80:
85:76:05:8f:23:00:e8:7c:39:e6:9c:ff:0e:87:b6:2a:46:93:
ee:c1:4d:5c:82:e6:6a:ac:da:6f:2a:92:91:c7:0c:7c:b9:d8:
c7:e8:07:30:f1:20:2c:9d:83:a8:16:e8:21:29:74:ec:ed:04:
5c:d0:dd:15:35:80:4d:7b:82:26:1e:8a:a6:8d:30:45:4f:d2:
5e:bf:ab:9c:b8:bb:b9:82:10:2b:40:80:78:49:ae:fa:7f:6a:
ff:52:94:61:60:80:c6:0a:06:c3:bc:23:26:2d:31:c7:e3:dd:
c1:83:76:09:4b:d1:18:83:5c:a2:38:70:c7:2a:73:da:d0:37:
bd:d7:e5:92:54:0a:b9:4e:76:f5:c8:60:e7:fd:68:7e:a5:7c:
15:e8:13:e1:28:04:3f:ff:6f:cb:82:43:ac:ec:c4:0d:f4:37:
5b:0d:54:38:be:b1:51:80:c3:ed:f6:7e:ff:7e:1c:39:ec:13:
b8:59:4e:73:83:81:ec:b3:f3:87:38:40:86:34:36:24:46:d6:
34:44:77:55:3b:39:b5:4d:9f:f1:f1:d6:91:66:c0:bb:56:40:
52:40:b5:e1:7c:da:fc:f0:73:22:a9:d0:d6:e1:94:dd:18:52:
23:0c:96:f8
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUZ6qmW+QziP+d9p/bcrw4rAJzuY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1NDJaFw0yNzEwMjIxNjMwNDJaMDMxMTAvBgNV
BAMTKDZGOTE4OUQyODNGQjI1MTZGNDNCOEI3Qzc2NDA2NjlEOTE2REYyNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVlYDZoGXVyS9Jvwb5IokeME8W
fyC/t5ZEGb1Qd/HCHu9i/dYOcFD4C2M3k/lWywUXy22khu1Bt4e/mRPXSunZkj9x
VSdyLeLTxRXofVPxgKUWm3K47fA8K/RBddDUzzjYakucYPUNmqgHmstb7AwZoifk
ZHmxVhrhdTI8JGetGbrp805sZRCzlPIQ6OLcMRGDYobo025bXv5LQZ6+NowuFVS3
YptWyOOhQ8wmqrHxmBkRlYPlCyTTm7cKtGd2M3drR/XsT4HP9U20lf78OPKajNbj
rJ0NDSFmGQPE3wW5uqcZVJLIuiN7VEx9bd4gj7WTwkCpCEPUQ9FTi0lWd9PBAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUb5GJ0oP7JRb0O4t8dkBmnZFt8kowHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1MmUz
MTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADCBZswDQYJKoZIhvcNAQELBQADggEBAI59fbxHdjhUjfsnfITRZRAVgIV2
BY8jAOh8Oeac/w6HtipGk+7BTVyC5mqs2m8qkpHHDHy52MfoBzDxICydg6gW6CEp
dOztBFzQ3RU1gE17giYeiqaNMEVP0l6/q5y4u7mCECtAgHhJrvp/av9SlGFggMYK
BsO8IyYtMcfj3cGDdglL0RiDXKI4cMcqc9rQN73X5ZJUCrlOdvXIYOf9aH6lfBXo
E+EoBD//b8uCQ6zsxA30N1sNVDi+sVGAw+32fv9+HDnsE7hZTnODgeyz84c4QIY0
NiRG1jREd1U7ObVNn/Hx1pFmwLtWQFJAteF82vzwcyKp0NbhlN0YUiMMlvg=
-----END CERTIFICATE-----
Generated at Mon Oct 26 10:56:56 2026 by rpki-client