Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e33302e302f32342d3234203d3e20313336373837.roa
File: 3139342e36312e33302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: mRPQ02Uqub0VKXAuNN/1hoYijJ+scfdzYW2DsS8vlwo=
Subject key identifier: 43:CE:CD:C9:35:92:96:36:70:8B:D8:90:FA:F9:6C:60:97:05:FF:A3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 39B50536F55F1CF6D25FCD7004C256B40825AFD4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e33302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:42 +0000
ROA not before: Fri 23 Oct 2026 16:25:42 +0000
ROA not after: Fri 22 Oct 2027 16:30:42 +0000
asID: 136787
IP address blocks: 194.61.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 11:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b5:05:36:f5:5f:1c:f6:d2:5f:cd:70:04:c2:56:b4:08:25:af:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:42 2026 GMT
Not After : Oct 22 16:30:42 2027 GMT
Subject: CN=43CECDC935929636708BD890FAF96C609705FFA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:88:ce:a7:33:c6:05:2f:a8:4f:7b:61:7f:
a7:85:77:e9:ec:75:9d:1b:e6:51:02:c6:36:e9:76:
2d:62:99:2f:42:3d:7e:24:51:ea:82:f7:ac:6f:ed:
7b:0d:f1:85:34:06:06:4e:a7:a7:4f:7d:1d:4e:a4:
70:e3:64:1b:fc:e8:83:62:31:f3:9e:5e:a2:33:db:
ea:55:34:c9:1c:85:ee:44:b6:c3:ab:6f:af:55:d7:
58:80:41:db:96:91:84:a0:f8:4e:3a:2e:cd:8c:d5:
21:a4:4c:1e:f3:de:91:0e:d0:d3:6b:29:86:0e:dc:
c4:77:1d:57:7e:5f:38:b6:7b:e0:15:92:26:40:ad:
1c:64:17:e6:75:bb:8e:e6:0c:59:97:85:fa:e5:74:
a9:20:fa:c2:fe:9f:5d:30:87:5f:66:ef:0c:ee:3d:
77:7e:a7:d5:19:42:c0:e9:f0:2a:41:0d:c9:a4:85:
ae:f2:86:16:16:a9:b6:3b:ad:77:8d:06:74:d8:0c:
a3:8f:0e:59:60:ff:89:19:b2:ad:19:4e:98:17:19:
dd:ec:b2:ac:ad:c2:75:cc:0e:44:e1:80:13:49:4f:
e6:55:e1:16:8f:74:0b:e7:ad:26:1a:e6:81:b5:71:
c5:10:69:54:76:2c:1b:c5:ca:2f:8e:4d:ff:67:75:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CE:CD:C9:35:92:96:36:70:8B:D8:90:FA:F9:6C:60:97:05:FF:A3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e33302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.30.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:39:70:30:a1:fd:09:87:19:aa:ee:ec:fd:6d:c8:78:75:71:
69:80:27:1a:66:e1:e0:d6:8c:c4:f5:e0:78:06:c7:06:a6:ab:
36:8d:83:f3:21:2b:1c:c2:23:86:aa:bb:68:ad:e7:c5:6a:3d:
2d:66:d9:8a:19:24:1f:fc:10:60:1d:9a:c8:3c:8a:6b:a6:50:
f0:34:6f:01:6b:82:51:29:b7:86:fb:59:04:f9:b3:0b:97:dc:
72:29:57:a7:59:9e:1f:c5:55:4d:ef:85:12:ff:0b:d6:d3:e7:
23:d4:b5:5e:56:89:f6:2c:21:58:c1:7e:c7:1c:a9:ca:6f:df:
bf:b3:73:92:83:fc:4e:ad:a1:8a:f2:34:8f:e0:17:86:e1:d3:
3b:84:48:34:cd:df:13:83:13:0f:a6:3e:a5:e9:01:6e:ec:2f:
97:92:17:f7:27:b8:a2:16:e1:5c:19:b6:2b:43:24:72:45:9a:
90:2e:ef:af:8b:da:90:a2:60:07:88:a0:89:c3:8c:42:64:39:
08:c4:ef:f1:7d:5c:bd:84:0f:07:71:0b:54:1e:55:ff:38:b3:
71:ba:f6:0d:1c:73:b6:8e:5a:0b:0f:7e:d9:f7:b7:a1:45:9c:
e9:3a:a6:b5:19:5c:09:7a:32:4d:d9:64:87:59:87:75:f0:54:
02:c0:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:53:32 2026 by rpki-client