Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3131302e302f32342d3234203d3e20313336373837.roa
File: 3139342e35332e3131302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: RaEuMeVhyeMJBoj7qtKrqyCeA3dKXPHsWr5iGLq/YiU=
Subject key identifier: C5:F1:BF:D1:DF:7E:35:4C:D9:AB:8F:47:3A:75:2D:BC:29:59:D1:78
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6BB457694C266D826071029FBE16EC28839201BE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3131302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:28 +0000
ROA not before: Fri 23 Oct 2026 16:25:28 +0000
ROA not after: Fri 22 Oct 2027 16:30:28 +0000
asID: 136787
IP address blocks: 194.53.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b4:57:69:4c:26:6d:82:60:71:02:9f:be:16:ec:28:83:92:01:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:28 2026 GMT
Not After : Oct 22 16:30:28 2027 GMT
Subject: CN=C5F1BFD1DF7E354CD9AB8F473A752DBC2959D178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:0a:8d:59:fe:a7:17:21:48:19:a7:9c:3c:
5f:93:6e:7f:0a:bd:7d:1c:3b:20:ba:02:bf:9b:2b:
6f:37:8f:61:93:4d:32:d1:7b:07:eb:2c:b0:e3:3f:
2e:90:04:eb:98:69:b2:0e:fa:b7:ea:a0:b0:39:bb:
04:59:cc:2e:94:d9:6d:54:2d:6e:27:c2:26:a6:ee:
e9:31:83:37:a9:6d:ed:d2:21:fa:67:ca:05:ba:fb:
95:d5:7b:e2:08:1e:77:85:c3:cf:bf:65:68:3f:56:
f9:13:5a:81:d3:93:15:64:ca:8f:7d:07:44:2b:41:
25:5e:b1:8f:f3:36:7b:77:33:09:32:ea:25:39:9b:
11:e0:d0:6f:02:bd:9f:8c:a6:b4:a3:fe:35:a6:31:
c4:19:3a:18:04:12:99:ac:65:fb:bd:ca:cf:08:ff:
39:79:66:49:b4:07:68:08:85:cb:7b:ed:2c:d7:00:
4a:71:8c:d4:e0:d4:8f:22:bb:d6:9d:63:1d:f8:df:
dd:14:72:9b:a6:9d:63:07:03:c2:2b:3e:ae:f8:78:
37:5e:56:7a:9e:91:53:91:07:93:c1:ae:08:5a:6c:
e4:bc:4a:71:b4:f0:47:03:05:a6:f0:13:33:e7:4d:
9d:d0:8f:28:f3:21:96:c9:87:e2:cc:1d:20:bf:ea:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F1:BF:D1:DF:7E:35:4C:D9:AB:8F:47:3A:75:2D:BC:29:59:D1:78
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3131302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.110.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:5d:e3:68:19:5d:3f:e5:a1:0e:93:98:f0:09:7b:ad:62:23:
e8:78:37:4b:e6:89:08:46:ef:a4:92:f1:3f:34:b2:c7:64:c3:
5f:a2:3c:b6:df:4e:29:33:81:02:2a:9f:93:d1:f5:7f:93:f2:
c0:7a:e2:32:39:c0:41:6a:6b:98:66:ca:8f:df:7f:1f:7c:e7:
97:38:bb:39:81:23:d6:ca:15:c9:4f:28:7c:12:fd:b1:00:c6:
b6:f6:4f:f2:54:a0:4b:3c:aa:e9:ee:6d:30:99:35:8d:2f:3b:
e2:30:03:a1:21:cf:09:c4:12:59:9e:17:63:fd:db:2b:4f:ec:
b7:fb:37:54:5e:77:ac:55:33:0f:d1:f1:d2:01:23:0c:04:d2:
ef:72:45:04:8b:8b:c0:a6:05:20:68:55:f2:84:cc:cd:66:7d:
10:fe:07:45:92:9f:48:99:cd:a9:b3:23:81:95:23:88:2d:82:
69:f9:91:c5:f8:21:b2:5b:df:6a:05:67:ca:75:9b:bd:cd:75:
ce:81:9c:41:93:15:d5:0d:37:57:ba:6c:03:fe:f0:84:ff:9e:
1d:03:5b:91:d3:60:7c:4e:ef:df:04:36:f9:59:e5:13:e8:5e:
4a:e5:55:59:02:41:e7:5f:9d:fa:98:35:fa:9a:46:6c:63:75:
69:fa:2a:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 05:53:53 2026 by rpki-client