Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa
File: 3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: jUtrkIlRuwfOKFyMu5y4h6JOPTWqW0mKQxdh3AdEZi0=
Subject key identifier: C7:D9:3C:04:A7:D1:57:81:0B:24:5C:B9:91:94:CD:CD:9B:E9:15:76
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7418E6CA0EE2177D4077BCF30BD5D8AD87C984B2
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:29 +0000
ROA not before: Fri 23 Oct 2026 16:25:29 +0000
ROA not after: Fri 22 Oct 2027 16:30:29 +0000
asID: 136787
IP address blocks: 194.53.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:18:e6:ca:0e:e2:17:7d:40:77:bc:f3:0b:d5:d8:ad:87:c9:84:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:29 2026 GMT
Not After : Oct 22 16:30:29 2027 GMT
Subject: CN=C7D93C04A7D157810B245CB99194CDCD9BE91576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6d:71:2f:71:63:e1:f6:1c:2f:5e:1e:f3:a2:
58:47:47:9f:a2:ef:81:e9:09:cd:71:87:9a:6f:80:
84:e1:18:ba:d2:bb:bf:40:90:14:a3:ba:53:6e:15:
2d:57:52:d0:87:db:a2:3e:4e:8e:14:c8:3a:fe:a6:
40:ca:1b:f4:31:5e:78:ea:d4:4d:6b:6a:f5:21:62:
3d:74:ca:3d:48:f2:8c:a1:a5:67:3d:07:2b:07:a1:
b7:4c:bf:f2:54:66:0e:e8:d2:fc:51:bf:86:f2:f2:
ca:26:e3:ef:fb:43:bd:b2:8d:4b:a3:37:36:74:55:
b5:7d:5f:11:15:26:45:2e:b5:60:1e:20:ee:d6:32:
f5:2e:0a:bb:0c:34:c3:37:86:21:ae:eb:37:b5:50:
e0:34:66:78:5a:ad:68:84:96:20:cf:18:21:43:ec:
4e:ba:80:89:69:2b:6b:85:ce:74:0b:65:00:96:d0:
22:7a:9d:f6:5a:36:db:45:9a:1f:23:f5:34:a7:07:
a7:b5:5d:20:04:29:fd:7c:95:63:86:a9:86:89:f1:
de:05:e3:5e:5d:67:e5:bd:96:7a:db:86:6a:0f:39:
30:f0:e1:b0:5b:2a:c7:5a:ab:15:1e:94:44:72:40:
e5:b7:79:e0:75:b3:55:9d:ca:30:ff:44:f7:19:95:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D9:3C:04:A7:D1:57:81:0B:24:5C:B9:91:94:CD:CD:9B:E9:15:76
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.109.0/24
Signature Algorithm: sha256WithRSAEncryption
52:75:12:38:c2:4b:5f:91:e8:4a:d8:27:76:19:74:65:6d:6a:
4d:11:58:6e:80:45:fa:3b:99:60:de:1a:57:d4:f4:87:94:eb:
2d:d7:7a:7e:55:f7:71:1f:d1:2e:59:f7:98:88:b0:58:69:0f:
27:d8:83:3d:52:38:58:cf:06:0d:46:97:57:73:e0:2a:0d:f6:
46:26:dc:fd:9c:04:51:4f:ed:22:89:15:a8:e2:db:1f:ad:cd:
ba:1b:2d:34:82:8a:55:37:91:53:cd:b1:c0:cf:3d:fb:41:26:
88:da:67:41:2e:e6:0b:2d:ec:ca:43:9f:0d:29:21:d9:ec:2d:
41:1f:12:c5:4a:d0:46:dc:fd:29:c2:63:1b:e7:c8:3e:c7:1b:
eb:2c:66:38:4e:62:ec:0f:c5:0a:32:a9:79:19:1d:34:2a:a5:
bd:2b:dd:75:26:cc:90:49:ef:58:47:d0:6d:91:9f:69:e9:32:
f1:12:38:34:19:35:f4:28:54:d0:c8:07:16:e9:2e:b0:04:89:
02:55:76:9d:83:af:72:d7:a0:9c:1d:20:a7:4d:54:2e:2e:be:
df:96:28:aa:73:37:2e:03:81:d8:79:7f:5a:46:ff:57:b0:4a:
43:c7:a3:ee:9d:b3:0d:49:cd:a5:10:a2:c4:a4:fc:3e:3d:90:
37:78:72:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:12:40 2026 by rpki-client