Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3131312e302f32342d3234203d3e20313336373837.roa
File: 3139342e35332e3131312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: iXWhtu+zVjvOjzT4nnuht6HCI3ZlOoQuBJtVKEt9ydw=
Subject key identifier: 34:3F:AD:B4:4E:32:8D:95:DD:6B:E4:2A:67:90:23:00:CD:92:66:E0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4F0AAD05F1090D3D5255147A1922EBEBFBF5048B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3131312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:13 +0000
ROA not before: Fri 23 Oct 2026 16:25:13 +0000
ROA not after: Fri 22 Oct 2027 16:30:13 +0000
asID: 136787
IP address blocks: 194.53.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0a:ad:05:f1:09:0d:3d:52:55:14:7a:19:22:eb:eb:fb:f5:04:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:13 2026 GMT
Not After : Oct 22 16:30:13 2027 GMT
Subject: CN=343FADB44E328D95DD6BE42A67902300CD9266E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:6e:07:cd:ab:6d:9c:2c:ee:97:ca:91:a6:
eb:f2:88:7d:dd:f6:1f:ce:48:75:a4:0d:5f:b7:ee:
82:8a:d3:36:a0:b5:b6:30:b3:45:43:c3:ee:e0:78:
8d:37:84:a8:7b:bf:27:98:0e:0d:44:e5:e8:b5:90:
c3:df:84:c2:98:15:76:ff:0d:40:b8:c3:7a:21:ea:
b9:77:39:63:da:6a:f6:77:45:37:fa:88:4b:45:76:
1c:7c:3c:80:b6:c4:6e:22:ab:0e:b1:f1:67:89:84:
1e:94:a5:b3:ab:03:1e:c7:56:6d:45:42:da:f4:cd:
a5:43:a0:36:da:58:95:90:69:3a:a5:af:46:e4:19:
5e:d6:a4:a2:7b:cf:d9:91:76:06:e1:8d:75:6b:05:
64:07:b5:ea:6d:cd:63:9c:30:0e:89:1f:57:73:b4:
23:f2:0a:d3:8d:97:89:0f:03:72:8f:27:65:a4:ec:
c9:f1:20:04:1f:cf:9f:63:07:79:49:dd:af:1e:18:
49:12:15:4b:9a:52:e6:79:fc:2f:c4:ce:88:14:b1:
c6:df:4f:25:e3:7a:ff:c7:92:97:eb:16:0f:cc:fe:
5c:e5:17:ad:a1:6e:59:dc:84:62:da:a6:5e:6a:a8:
14:ce:ff:d9:af:62:2f:86:6c:ab:26:8d:f5:d5:78:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3F:AD:B4:4E:32:8D:95:DD:6B:E4:2A:67:90:23:00:CD:92:66:E0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3131312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.111.0/24
Signature Algorithm: sha256WithRSAEncryption
af:4a:f7:fb:62:be:ee:e4:6d:21:e8:41:d4:01:d9:d6:f0:33:
db:b8:f1:7a:94:cd:17:87:e9:3f:0f:60:d2:15:33:5b:d5:86:
ca:c1:9d:6f:6f:40:fc:47:07:3b:ba:dc:53:9f:dc:39:af:de:
04:e9:98:37:b9:a0:25:f1:b5:3e:e1:39:aa:55:4b:e2:2b:f1:
34:1c:ca:65:22:fd:9d:b9:84:8e:f1:c6:05:d0:ed:12:b5:3b:
36:71:27:c2:7d:37:4c:17:c0:26:73:bc:15:9a:3c:16:a6:e6:
30:0a:11:95:76:1b:c6:5f:86:05:38:2b:75:85:27:77:8c:83:
f1:93:45:33:56:f6:5d:bb:ba:35:dc:8f:ed:6c:51:da:27:fb:
3b:dc:42:fa:ba:26:0f:0c:c5:ea:a2:66:c4:76:c2:b2:b3:4e:
f3:97:74:43:4b:95:58:47:63:37:af:d1:df:15:ee:19:43:c9:
1b:19:c5:0a:56:a6:1c:84:db:76:31:ea:6a:5a:2c:eb:86:3f:
2f:17:c6:51:83:c9:a3:a9:85:ac:3b:01:cc:7d:e4:26:51:b5:
56:fa:e2:b7:88:30:4e:ec:65:e6:b9:75:0f:0d:8e:8c:ef:af:
a7:d9:d8:c8:f6:ac:ca:07:ca:a4:9d:d5:a6:3b:f6:d9:c2:b5:
65:f2:3e:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:45:20 2026 by rpki-client