Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e33312e302f32342d3332203d3e20313431393935.roa
File: 3139342e36312e33312e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: k00e8VbcdtwwSOjQHMYIu4KhrPDJdb4FPcDNhlU9LCM=
Subject key identifier: 7C:D5:48:E7:28:29:88:49:F8:4C:09:F9:81:51:3D:8A:29:8C:6D:95
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 79C2A76AA9ABB59584138FC2AA46170ADAA4B7D4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e33312e302f32342d3332203d3e20313431393935.roa
Signing time: Fri 23 Oct 2026 16:30:15 +0000
ROA not before: Fri 23 Oct 2026 16:25:15 +0000
ROA not after: Fri 22 Oct 2027 16:30:15 +0000
asID: 141995
IP address blocks: 194.61.31.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c2:a7:6a:a9:ab:b5:95:84:13:8f:c2:aa:46:17:0a:da:a4:b7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:15 2026 GMT
Not After : Oct 22 16:30:15 2027 GMT
Subject: CN=7CD548E728298849F84C09F981513D8A298C6D95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:a0:58:ee:64:d6:6a:17:53:3c:5d:73:6e:
4f:8f:cc:54:55:cb:b3:9f:e5:96:0c:ac:da:cc:13:
3d:16:c6:88:54:bc:f0:fb:79:d4:3e:1a:44:b6:82:
18:df:ad:6e:f6:cc:9c:a8:51:6a:4b:97:08:96:6b:
fe:b0:d7:2b:24:b2:71:5b:94:90:c5:7b:b3:53:06:
43:f2:d1:4f:14:ec:92:b0:44:8d:d6:39:d3:57:d4:
b5:40:48:a0:5c:b1:cb:c1:19:93:bf:94:d7:99:73:
a6:de:86:9f:b4:02:e3:9f:54:05:48:ca:6a:18:1d:
a7:ee:f2:59:e8:b9:d2:93:4c:b0:fd:a5:e9:f6:04:
2a:c3:87:e0:ac:bf:f1:3f:b5:39:78:5e:66:21:a6:
3c:71:32:7f:24:8d:56:8e:74:0e:8b:41:a2:b2:43:
7f:d2:d3:e6:f1:60:b6:5d:61:fc:1d:95:97:31:c5:
84:74:1e:72:af:e2:f1:92:0a:be:0e:9c:09:23:69:
41:63:9c:47:3a:ed:b7:0f:51:c9:4d:6a:8b:a5:d6:
a2:57:56:d0:04:3f:ee:eb:ab:64:2b:fc:d4:42:f4:
e2:c7:b6:47:ef:b3:39:12:d3:43:3b:fa:64:02:cf:
f4:c2:d8:54:cb:a6:68:d2:63:86:cd:e9:6b:05:b5:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D5:48:E7:28:29:88:49:F8:4C:09:F9:81:51:3D:8A:29:8C:6D:95
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e33312e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:07:19:00:21:60:de:1c:b0:d6:fd:77:5a:e4:f9:97:c7:c6:
bb:37:81:ed:72:16:b9:c9:14:af:66:03:3b:f1:92:f3:85:c1:
a1:44:16:06:ea:23:26:06:af:4c:62:6e:85:00:d5:9b:54:90:
3d:7b:70:4c:9e:47:91:5d:2e:d9:ab:c1:f8:4d:dc:53:46:74:
ae:5f:83:0b:24:ea:71:3d:2c:1b:61:46:b5:02:1a:e8:5b:ae:
ae:86:b5:5b:71:c4:37:e7:7f:aa:2f:5e:bf:e8:a1:f0:1d:56:
03:70:40:08:7d:45:31:92:9a:12:cd:c0:cd:27:1b:91:90:bb:
04:0f:e9:4a:ec:d4:d4:d3:6b:1f:e4:6a:db:96:31:5a:e5:e3:
80:fb:d7:ce:16:80:a7:c3:c3:ed:a0:7b:2f:03:13:e2:55:de:
b2:cc:dc:c8:d6:08:c3:0e:79:0e:a8:0e:7c:6a:92:ac:de:e0:
63:ac:e5:9f:80:02:28:6b:e3:2e:cd:3d:71:3a:62:32:64:17:
a9:be:f1:19:fa:30:fc:4f:c2:09:9a:27:6a:33:ac:3f:4a:13:
7d:7e:77:10:68:f7:75:93:48:6b:17:47:ad:11:c5:8c:65:1c:
aa:0b:c8:36:77:01:af:50:c1:ec:3f:9b:c5:8d:73:e3:38:28:
ad:60:a2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:24:09 2026 by rpki-client