Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa
File: 3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: EyVzPh2tsh2Demk5kq+irDBVPVrwvMKUs2HZmWUvqcI=
Subject key identifier: ED:BB:45:E4:A5:15:FA:07:D2:BD:F4:83:8D:D9:66:8B:E2:63:6A:45
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0EC891826D64A089631EF4935951BA4CBA950E48
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:25 +0000
ROA not before: Fri 23 Oct 2026 16:25:25 +0000
ROA not after: Fri 22 Oct 2027 16:30:25 +0000
asID: 136787
IP address blocks: 194.53.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c8:91:82:6d:64:a0:89:63:1e:f4:93:59:51:ba:4c:ba:95:0e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:25 2026 GMT
Not After : Oct 22 16:30:25 2027 GMT
Subject: CN=EDBB45E4A515FA07D2BDF4838DD9668BE2636A45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:bd:b2:90:ca:f5:40:be:10:bd:f5:ce:4b:
b7:9d:45:6d:a3:33:7a:c4:48:32:12:84:d1:26:43:
46:75:a5:73:74:77:cd:6b:84:48:1e:4b:c1:6f:04:
b1:40:d4:f5:27:2c:6c:bd:d9:aa:f5:ac:64:89:32:
ca:30:a6:2a:18:46:25:3f:1c:5b:a4:bc:41:2a:c3:
68:3e:f7:b3:4b:e4:6e:0d:97:17:5a:23:86:5f:1a:
40:a1:7a:4f:a8:1b:78:93:21:c5:e7:54:84:91:1e:
7e:48:a7:37:96:68:b8:5e:e5:4e:8c:31:72:73:66:
e5:05:04:82:03:f7:da:ca:06:ef:57:93:7e:e8:43:
09:69:70:ac:a0:80:2b:95:51:06:cc:a5:b2:e4:0b:
d0:04:18:dd:93:95:d8:7b:68:f8:d8:01:a9:92:6b:
12:7c:69:6f:0b:ad:94:fc:62:40:2d:be:5b:d8:f7:
b9:23:47:89:33:4a:e3:ff:ab:3b:6f:5b:81:3c:34:
0c:ed:97:83:2d:af:9c:22:92:79:50:74:34:de:f4:
42:9b:f0:9f:4d:3c:78:2f:38:c1:86:f5:7d:4f:1c:
20:b5:34:85:f5:b1:e1:f4:52:39:78:3a:ca:42:84:
d1:84:5d:84:a4:1f:ee:42:96:09:18:4b:d1:1f:86:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BB:45:E4:A5:15:FA:07:D2:BD:F4:83:8D:D9:66:8B:E2:63:6A:45
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.108.0/24
Signature Algorithm: sha256WithRSAEncryption
08:cb:5b:39:34:1c:f4:af:3d:8a:db:5c:92:67:58:68:91:9e:
e6:1f:6a:c3:9e:b5:81:64:97:40:08:f2:d1:fe:7c:ab:4d:07:
3b:03:e3:10:04:68:45:df:ad:cc:95:33:04:b3:c1:0e:aa:e1:
b4:7c:7b:6c:df:7a:2f:8c:bc:b4:32:49:39:7e:e2:7a:4b:b8:
4a:20:46:59:7b:13:4b:a0:ca:c0:c1:7e:47:94:ae:e7:72:e9:
c4:6d:04:cb:6c:04:f9:91:fd:3b:9a:d5:cb:86:77:96:ab:ce:
20:21:71:18:48:6b:5b:6c:b4:6b:28:44:56:83:1d:ee:1f:d7:
8d:b9:16:d6:3f:32:4d:2d:8e:7e:51:a1:5b:f2:60:2a:bc:f6:
be:8f:12:8f:37:d4:7d:cc:54:f3:b1:8e:4e:d1:e4:c2:e0:ad:
91:9d:79:33:33:27:92:40:b1:6e:26:39:d4:5b:11:26:50:c1:
bf:7d:92:35:cb:d8:be:ba:4a:a2:32:fc:52:76:15:3a:ed:86:
fb:c0:9f:7c:b2:9f:f7:bc:9b:00:66:75:19:46:02:de:3a:3b:
db:12:0f:1f:66:85:42:ed:f9:bd:a6:63:77:39:f8:0b:10:1a:
31:94:de:04:cb:22:96:ca:5d:93:0a:6d:0f:13:19:52:dc:d3:
aa:ab:71:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:19 2026 by rpki-client