Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38362e302f32342d3234203d3e20323033333830.roa
File: 3139342e36302e38362e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: xgGmaOo68QtzI0DDGaWLp+3oLifQmA+QhW5Wo4KqgD0=
Subject key identifier: A2:B8:9D:5D:65:46:B5:73:6D:E6:FB:A4:F8:9C:7A:1E:25:85:54:97
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2D10EAFD59EF0ACF6FE5E0BFBE045C3D1BFCF4DA
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38362e302f32342d3234203d3e20323033333830.roa
Signing time: Wed 08 Jul 2026 10:26:05 +0000
ROA not before: Wed 08 Jul 2026 10:21:05 +0000
ROA not after: Wed 07 Jul 2027 10:26:05 +0000
asID: 203380
IP address blocks: 194.60.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 06:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:10:ea:fd:59:ef:0a:cf:6f:e5:e0:bf:be:04:5c:3d:1b:fc:f4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 8 10:21:05 2026 GMT
Not After : Jul 7 10:26:05 2027 GMT
Subject: CN=A2B89D5D6546B5736DE6FBA4F89C7A1E25855497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:52:94:80:3c:63:ad:ea:fb:47:b9:7e:06:
da:4a:02:9b:88:13:2c:cb:8e:d4:74:81:e6:f1:19:
2c:33:36:43:db:10:11:8f:f6:43:05:c7:2d:16:a4:
c1:7e:e7:c2:db:87:08:9e:be:22:ab:36:4b:f7:2b:
ca:43:9d:db:7f:4d:8a:96:ae:d8:d4:28:89:a8:0b:
1d:9d:1c:56:32:61:66:fd:0b:e6:7c:73:51:68:7c:
81:3e:d3:f6:9d:e0:9b:22:51:27:0f:28:fe:8a:1e:
a2:2f:1c:d8:4a:8f:12:c1:11:a7:1f:94:cc:f4:09:
26:fe:87:e8:b8:33:66:94:a1:51:0f:63:e3:c4:79:
22:7c:98:4a:83:e9:4a:80:16:ef:8f:e5:8b:9e:82:
ed:24:37:2b:18:c2:ae:45:23:d4:57:dd:41:49:84:
b0:02:41:2d:6e:16:a5:95:bb:20:81:01:fa:a3:a4:
c7:d0:af:1e:a0:6f:cd:15:eb:59:45:99:75:13:35:
b5:98:6c:fe:b1:0b:45:2f:76:05:5f:69:06:05:ea:
e7:27:d6:c6:eb:50:f6:78:35:94:21:b3:d9:6f:60:
59:a4:11:63:0b:27:a5:88:bc:4b:6c:0c:1d:54:0e:
4a:82:30:c6:16:04:46:b0:b5:5f:ab:85:70:9a:e7:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:9D:5D:65:46:B5:73:6D:E6:FB:A4:F8:9C:7A:1E:25:85:54:97
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38362e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b5:5a:93:7b:1f:00:76:32:88:f4:7a:24:c6:c4:00:72:c3:
b6:9c:f9:f8:cf:3a:3b:17:cc:40:68:6c:80:6c:6a:63:93:35:
32:04:b9:fd:30:ac:2c:e1:8a:5e:ce:40:d8:cb:52:94:57:60:
85:14:05:55:1e:f5:84:91:e0:3a:70:ef:61:1c:3b:55:c5:cb:
0c:95:03:8c:44:41:cb:c4:51:0a:80:ac:83:b2:21:af:97:94:
9e:8a:9f:a4:72:b5:9b:93:24:58:02:0a:d6:42:33:69:25:0a:
52:cc:69:b5:f4:a6:0a:5c:63:eb:b1:da:1c:b9:7c:fe:30:6d:
bd:8e:ff:96:02:81:00:4a:22:7a:32:2e:b2:e2:ac:fc:f1:10:
24:dd:20:ad:aa:3f:b0:74:c3:20:56:b0:83:33:97:24:57:eb:
d4:a6:88:bb:aa:8c:88:14:51:87:fe:e3:7f:3f:77:ef:f5:48:
2b:54:67:09:8a:1d:61:6d:4d:b3:28:c4:11:f8:f6:0d:f1:d5:
81:82:75:c5:39:56:a2:27:68:b9:e1:b6:f5:a4:af:46:6e:f2:
42:76:79:22:cf:8d:60:b0:c7:d3:3f:e3:3f:3d:9c:08:62:dc:
7a:69:bb:16:50:e4:ab:0e:b3:34:04:40:29:a5:3e:b8:1a:14:
2e:6e:e7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:52:55 2026 by rpki-client