Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e352e302f32342d3234203d3e203437353833.roa
File: 3231332e3139302e352e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: boPLx0snbBkM4MMKv0RYuC7tX9mr9nPJcV5XTZhUFJU=
Subject key identifier: D2:D3:D5:BE:03:1B:8F:6B:B4:DB:04:52:56:D6:E0:04:3A:67:34:4C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 05536F8C9AD0E1C06FA06B4A0A2E4F5D478480FD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e352e302f32342d3234203d3e203437353833.roa
Signing time: Fri 23 Oct 2026 16:30:41 +0000
ROA not before: Fri 23 Oct 2026 16:25:41 +0000
ROA not after: Fri 22 Oct 2027 16:30:41 +0000
asID: 47583
IP address blocks: 213.190.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:53:6f:8c:9a:d0:e1:c0:6f:a0:6b:4a:0a:2e:4f:5d:47:84:80:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:41 2026 GMT
Not After : Oct 22 16:30:41 2027 GMT
Subject: CN=D2D3D5BE031B8F6BB4DB045256D6E0043A67344C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:04:70:de:50:6f:0a:83:e1:67:8b:f0:49:
10:39:59:26:c2:54:56:44:61:49:d5:32:34:74:d2:
1e:0a:6d:83:c7:36:f3:5c:0a:1b:45:2d:6f:84:0a:
49:36:72:79:e3:69:70:ee:b4:0a:d4:d6:75:8b:2f:
4b:ac:ff:27:bd:1a:a0:da:98:9d:b2:9b:ca:eb:6b:
23:76:9e:02:cd:bc:d0:46:be:45:f1:74:31:8f:e1:
30:70:93:b8:51:f5:a3:64:52:b1:2c:fa:8f:32:77:
ab:3a:c7:4e:08:4f:fe:b2:41:2e:55:1a:37:bb:2e:
54:7f:5d:e5:ba:60:2e:13:8d:4d:27:64:06:48:47:
bd:84:2e:ed:e6:d1:bd:bf:99:73:ae:4c:f0:a9:e9:
55:e7:c8:98:d9:cf:c9:ed:a6:87:e6:76:a0:f0:6f:
4e:17:5d:da:15:ff:cc:64:35:2b:e9:4e:79:e8:ad:
4b:61:77:c8:e4:35:2f:b7:8a:94:94:0c:8b:2c:3a:
2b:47:82:51:ee:2a:9c:ea:c7:0d:53:91:0a:d1:6a:
4b:87:e2:a2:b8:c4:bd:64:ea:37:27:42:ed:0e:c9:
5e:26:3e:40:7a:8b:b2:c7:9c:8d:b9:ae:ae:e3:a0:
b8:48:89:83:c5:8c:f3:a9:e0:95:e7:c4:80:ee:7c:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D3:D5:BE:03:1B:8F:6B:B4:DB:04:52:56:D6:E0:04:3A:67:34:4C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e352e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:81:12:d8:cd:75:8d:32:8c:6d:4a:f6:0e:95:c2:22:4d:00:
42:14:69:2c:5e:cf:10:f5:01:e9:71:c9:38:e2:f4:b1:2b:1e:
18:c5:87:55:f7:af:aa:38:b6:1f:35:60:e1:9b:dc:d5:1d:ac:
fc:0f:fb:2e:42:7c:11:9e:85:62:fc:a6:6e:3f:fc:96:31:52:
52:6f:8d:32:60:b5:e7:e5:cf:36:9c:43:97:4a:9d:61:f1:08:
54:3c:74:d8:86:d4:86:db:26:08:09:78:0c:18:2e:36:82:ec:
80:3d:fa:fb:18:0b:23:31:d4:cc:e1:c3:0e:2c:dd:0f:11:36:
0b:b0:c6:b4:b7:01:fd:01:84:1d:69:e7:61:fb:27:d0:ca:0e:
d7:75:38:07:f5:eb:9c:01:ff:80:0d:56:f5:34:1e:48:54:70:
6f:36:29:31:e7:17:f7:8f:66:42:5b:08:89:72:1a:d1:ee:6e:
ee:72:d7:f6:a3:51:95:56:fa:af:36:58:65:59:97:bc:fb:05:
04:e4:88:b4:ba:6e:20:ca:27:dc:b5:93:07:43:c5:52:ac:99:
15:c5:f2:df:e1:3f:78:7e:c0:8a:49:29:ac:9d:3f:ea:8d:3f:
bf:4b:90:9e:fd:3e:24:84:34:df:77:ae:83:1a:f5:48:a3:4e:
17:89:c5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:13:09 2026 by rpki-client