Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
File: 39312e3139362e36392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 9ZRnmrkhWWBlOOfSFdAojbcdzy+4/RX2rKbVepFCY2A=
Subject key identifier: 4A:A4:6A:DA:DD:6D:D4:CE:A6:94:D2:6D:B8:C1:B9:93:B2:FE:87:76
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 28FBA15682974F07D0E741873E204F5D48CA2F5A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:20 +0000
ROA not before: Fri 23 Oct 2026 16:25:20 +0000
ROA not after: Fri 22 Oct 2027 16:30:20 +0000
asID: 136787
IP address blocks: 91.196.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:fb:a1:56:82:97:4f:07:d0:e7:41:87:3e:20:4f:5d:48:ca:2f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:20 2026 GMT
Not After : Oct 22 16:30:20 2027 GMT
Subject: CN=4AA46ADADD6DD4CEA694D26DB8C1B993B2FE8776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:6f:73:ad:79:8c:89:06:33:c8:31:a1:65:
55:75:c1:27:82:3d:c7:02:b0:7d:13:1a:b6:25:ad:
d0:6b:94:e9:eb:64:f6:f8:a0:7d:2b:42:32:2f:87:
aa:e0:c9:3e:67:35:67:86:1e:d1:7f:15:19:a0:5e:
d9:40:17:e4:d9:1a:44:dc:57:35:77:d5:27:96:cf:
97:b0:30:88:fe:53:47:db:ac:47:c8:e5:9c:a3:5d:
ad:0a:ba:dd:6b:f7:94:c9:ad:b2:4d:fa:6d:3b:aa:
b6:e6:16:07:88:51:d7:c5:cf:5a:60:1a:76:bd:72:
04:72:3d:aa:df:0b:63:85:65:2f:0a:09:0a:ec:c5:
73:14:87:a1:97:c7:d3:ba:87:e1:8d:ac:d4:f0:f3:
6b:7a:9c:1e:bd:9d:a4:d1:31:00:cc:da:a6:ab:d1:
10:1e:14:87:66:8b:2e:1a:ff:ca:ec:49:97:c2:8b:
d7:3b:06:64:a8:5c:07:41:97:42:ab:47:43:ee:ed:
c5:f3:0a:1d:67:a5:85:b1:64:b3:1f:a6:ac:c5:5c:
e9:ba:ac:f0:b1:18:7b:a7:f7:04:24:27:20:e1:ef:
0e:fa:fa:b4:13:72:b2:3f:0d:2b:a6:09:3e:07:24:
b3:d5:fe:f7:7f:ce:94:d8:9b:3d:c5:de:75:5f:57:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A4:6A:DA:DD:6D:D4:CE:A6:94:D2:6D:B8:C1:B9:93:B2:FE:87:76
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.69.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:0b:d8:ab:85:4e:bd:fb:8a:1e:62:44:e0:60:1c:20:6b:cc:
ef:bb:68:38:37:39:cb:62:95:5a:d0:14:37:12:ce:1a:22:c4:
61:ae:88:a8:3e:cf:d3:fd:5f:87:bb:b1:c5:ab:19:18:f4:3c:
ab:a0:7a:95:cf:86:2b:e8:b5:4e:32:02:de:4d:d5:1b:3c:c9:
ea:51:d2:8d:90:c8:a0:c0:a8:6f:05:f2:d3:7d:14:09:12:3f:
a2:34:19:42:16:a5:b9:c0:13:21:bf:9d:55:79:58:75:1c:4d:
7c:7d:6e:91:2e:cc:50:89:08:2a:f4:9c:9f:59:db:56:65:5e:
82:6f:c7:47:58:5d:d6:0d:52:f2:26:01:77:d7:0c:bb:74:41:
c6:ea:89:e8:94:de:74:17:9e:54:22:18:10:30:83:d5:ff:b5:
8d:f6:14:c1:71:f1:c1:39:6e:e3:99:68:4f:dc:78:87:a5:34:
24:05:37:c4:9b:e8:76:e7:93:d7:a7:f0:be:bc:1b:32:1d:0f:
f4:91:5e:9a:d6:41:a5:7e:2d:15:8d:94:07:c1:18:38:63:24:
89:cd:65:26:da:05:a9:4a:00:3b:5b:2a:18:c7:bc:63:4e:25:
b5:f4:02:18:28:0d:8d:01:4d:61:99:57:91:61:13:74:a7:23:
e8:9f:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:15:08 2026 by rpki-client