Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e32392e302f32342d3234203d3e20313336373837.roa
File: 3139342e36312e32392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 0yAoSNscARp9CCqmySJfOuws7Iy1/O2z6L5e7AKfV1k=
Subject key identifier: 13:F2:EE:36:80:DD:99:24:0A:97:5A:FA:E5:8D:0E:EB:B5:F3:C6:0B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 78CE2BEBE9B39F7014CE0ED69385734FE57DCE37
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e32392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:29 +0000
ROA not before: Fri 23 Oct 2026 16:25:29 +0000
ROA not after: Fri 22 Oct 2027 16:30:29 +0000
asID: 136787
IP address blocks: 194.61.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ce:2b:eb:e9:b3:9f:70:14:ce:0e:d6:93:85:73:4f:e5:7d:ce:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:29 2026 GMT
Not After : Oct 22 16:30:29 2027 GMT
Subject: CN=13F2EE3680DD99240A975AFAE58D0EEBB5F3C60B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:22:76:97:e1:d8:8a:4c:ae:62:9e:2a:de:
23:d1:b2:44:a0:50:b6:41:cf:ce:28:c0:8d:e6:18:
d7:47:29:73:59:9b:06:64:98:e2:7f:f7:b3:95:75:
77:79:7c:d9:a7:0a:b9:eb:8c:0b:c8:bb:54:0b:a4:
5e:fa:62:90:32:d0:f0:70:25:07:55:21:08:22:d5:
2f:bb:28:40:84:e8:5b:2d:17:fb:cd:e9:ca:1e:2f:
0c:00:eb:86:b2:54:a5:99:47:26:69:db:2e:47:c8:
11:8b:98:c9:cb:3f:41:5e:63:7d:b0:8e:5e:47:0e:
44:46:0b:30:86:18:67:55:00:41:3f:dc:1a:44:c8:
23:25:b5:4d:14:4c:84:f9:98:c0:8a:9b:32:35:90:
52:1e:24:51:86:8a:43:20:22:a2:f2:97:62:5d:0c:
8d:bb:3c:ce:18:ef:66:f4:2d:5b:aa:f1:a4:b2:67:
c1:42:75:f1:58:1a:3b:f1:1e:9e:5c:10:f0:06:6c:
ca:71:e9:93:86:a9:a2:c6:60:39:4f:25:b0:ce:c5:
20:55:c2:4d:a4:00:5a:6a:ce:57:0d:29:1a:76:c3:
e4:3c:58:e7:d9:df:eb:66:40:ed:d8:43:70:6d:2e:
5c:20:cd:e3:4b:2f:ce:0d:3c:18:63:1d:4d:7b:89:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F2:EE:36:80:DD:99:24:0A:97:5A:FA:E5:8D:0E:EB:B5:F3:C6:0B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e32392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.29.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a1:bd:bd:c3:b9:ce:e0:f9:33:10:34:0e:f8:a0:e1:a3:6b:
5b:e3:9a:c3:c7:91:92:f5:45:51:21:22:36:90:e4:f9:52:86:
cf:aa:c0:79:47:2b:8d:bd:5b:5b:cb:95:84:88:96:fc:99:35:
bb:67:0e:1e:aa:ce:ce:cd:b4:a0:3e:8f:09:ba:97:ab:e3:38:
3e:65:2f:28:f0:72:23:42:f3:83:b1:8c:a8:c5:74:cb:ad:9b:
bc:b5:ed:97:fd:9e:02:bc:fc:c0:48:bb:e0:c9:29:01:ca:3c:
51:a8:c5:19:c6:85:72:d4:d8:2c:57:b6:f3:de:00:81:5a:3c:
1e:e4:31:09:93:67:18:d5:e0:33:70:34:ea:93:56:b8:05:72:
68:c0:18:b7:1e:f7:df:34:c0:f0:4c:66:08:9d:5a:85:43:0d:
11:0a:5c:c8:a1:bb:51:e2:3b:a8:29:6f:86:72:be:e2:89:34:
e6:23:d6:4b:80:45:80:88:bb:82:0c:d1:5e:13:da:72:b7:bd:
d3:97:92:8b:e4:31:bc:a9:cd:ef:11:a7:0c:11:09:d9:1e:0d:
16:9d:49:a8:15:95:94:a5:3c:f3:9c:8f:f1:e8:41:78:6e:16:
7d:6f:9a:8a:53:f8:39:ca:c9:9a:8c:93:92:db:ad:a4:07:2d:
79:ec:1d:57
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUeM4r6+mzn3AUzg7Wk4VzT+V9zjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MjlaFw0yNzEwMjIxNjMwMjlaMDMxMTAvBgNV
BAMTKDEzRjJFRTM2ODBERDk5MjQwQTk3NUFGQUU1OEQwRUVCQjVGM0M2MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX1SJ2l+HYikyuYp4q3iPRskSg
ULZBz84owI3mGNdHKXNZmwZkmOJ/97OVdXd5fNmnCrnrjAvIu1QLpF76YpAy0PBw
JQdVIQgi1S+7KECE6FstF/vN6coeLwwA64ayVKWZRyZp2y5HyBGLmMnLP0FeY32w
jl5HDkRGCzCGGGdVAEE/3BpEyCMltU0UTIT5mMCKmzI1kFIeJFGGikMgIqLyl2Jd
DI27PM4Y72b0LVuq8aSyZ8FCdfFYGjvxHp5cEPAGbMpx6ZOGqaLGYDlPJbDOxSBV
wk2kAFpqzlcNKRp2w+Q8WOfZ3+tmQO3YQ3BtLlwgzeNLL84NPBhjHU17iYADAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUE/LuNoDdmSQKl1r65Y0O67XzxgswHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM2MzEy
ZTMyMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADCPR0wDQYJKoZIhvcNAQELBQADggEBAHWhvb3Duc7g+TMQNA74oOGja1vj
msPHkZL1RVEhIjaQ5PlShs+qwHlHK429W1vLlYSIlvyZNbtnDh6qzs7NtKA+jwm6
l6vjOD5lLyjwciNC84OxjKjFdMutm7y17Zf9ngK8/MBIu+DJKQHKPFGoxRnGhXLU
2CxXtvPeAIFaPB7kMQmTZxjV4DNwNOqTVrgFcmjAGLce9980wPBMZgidWoVDDREK
XMihu1HiO6gpb4ZyvuKJNOYj1kuARYCIu4IM0V4T2nK3vdOXkovkMbypze8RpwwR
CdkeDRadSagVlZSlPPOcj/HoQXhuFn1vmopT+DnKyZqMk5LbraQHLXnsHVc=
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:37:57 2026 by rpki-client