Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20323132323338.roa
File: 39312e3231342e36342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: gXP0e9DsBfUG6+LJ1XsEvQzccSQMjo4La4Ea/1DG7z4=
Subject key identifier: 4C:22:4F:C1:54:F5:2E:11:7A:4B:4A:EF:83:99:75:46:23:59:70:06
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0407094A4F149D13A2CCFAD6CC0CD34F60C3C99E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 30 Oct 2026 12:31:44 +0000
ROA not before: Fri 30 Oct 2026 12:26:44 +0000
ROA not after: Fri 29 Oct 2027 12:31:44 +0000
asID: 212238
IP address blocks: 91.214.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 16:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:07:09:4a:4f:14:9d:13:a2:cc:fa:d6:cc:0c:d3:4f:60:c3:c9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:44 2026 GMT
Not After : Oct 29 12:31:44 2027 GMT
Subject: CN=4C224FC154F52E117A4B4AEF8399754623597006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:c5:8a:85:2f:30:a6:67:b4:e3:16:10:9d:
00:ad:d0:00:ef:e4:2d:76:d3:f7:a7:4b:09:d6:92:
81:29:bb:e9:ec:97:e9:f2:8a:a5:e5:1e:9c:3c:f8:
ed:7f:ec:d8:68:17:bf:d9:bb:1e:04:29:52:ce:16:
59:89:ed:0d:21:88:99:64:d8:42:75:f7:d2:ed:93:
f4:4f:95:5c:2d:61:e4:86:cb:9f:25:7f:33:f6:99:
c0:e3:dd:24:b6:e2:fa:3d:d5:16:e1:96:f1:09:66:
b0:b3:6e:23:9f:af:48:3c:ba:a2:f5:fb:48:74:23:
52:dc:d3:d2:7a:ed:67:6b:c9:62:62:b5:13:1e:31:
19:c7:89:98:ad:71:33:4d:87:81:85:03:71:70:65:
03:5e:83:c1:a4:cf:22:22:4e:e2:89:b0:77:ee:82:
8d:38:af:a5:fc:0f:77:fe:b6:1e:1a:db:a7:fb:c8:
ef:2f:e1:b5:3e:53:f0:75:4f:92:c9:ae:9b:e2:f9:
c5:7b:3a:8e:37:06:21:1c:44:2c:3c:b6:8d:71:b3:
26:01:7e:00:20:ed:9c:ea:ce:e7:f7:16:8c:44:a5:
89:b7:e2:ea:59:05:53:ac:94:58:33:83:23:fe:ac:
e5:64:a8:c0:82:6b:ad:15:c3:5b:50:16:78:e9:18:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:4F:C1:54:F5:2E:11:7A:4B:4A:EF:83:99:75:46:23:59:70:06
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.64.0/24
Signature Algorithm: sha256WithRSAEncryption
65:43:03:b3:c1:da:c3:4d:18:2a:f8:58:aa:6f:8b:76:09:1a:
16:1e:01:72:bc:3c:aa:3a:c5:7f:08:d2:21:57:a4:0f:54:39:
0a:43:95:2c:52:02:d3:96:44:07:52:c2:87:f8:19:4a:29:50:
a8:a3:d7:10:d2:59:f9:13:72:07:ec:f8:f2:82:b1:79:54:bd:
4c:6a:f2:82:e7:4e:b9:8c:03:7f:07:80:71:66:7b:a4:03:7f:
0e:a5:88:15:54:7d:ee:e4:31:3e:a4:66:4e:d6:ee:72:b8:a9:
37:9b:4e:11:f6:65:86:1b:50:b9:34:84:b6:ac:b4:bf:4b:9b:
7f:05:c4:c0:60:33:3e:72:1a:41:c6:a3:c5:ab:06:29:69:1b:
5c:24:83:44:d1:f9:02:f2:70:0b:7a:46:9b:ba:05:01:a0:78:
f1:26:42:62:ca:bf:7d:85:e1:f1:79:27:c9:92:82:ad:a3:20:
bb:96:e2:b1:9c:40:01:b0:69:97:f6:89:a0:3f:1e:32:25:08:
c9:a4:7d:cf:d5:ee:ae:0e:ae:52:34:10:47:a3:f7:ce:e8:c4:
8b:a0:5b:0e:a9:b5:bb:fb:f8:76:6a:46:61:db:72:9f:a2:61:
79:ef:12:6e:f4:59:59:62:e1:ee:44:a5:30:c5:d8:8e:ef:64:
b1:10:1a:f7
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUBAcJSk8UnROizPrWzAzTT2DDyZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMzAxMjI2NDRaFw0yNzEwMjkxMjMxNDRaMDMxMTAvBgNV
BAMTKDRDMjI0RkMxNTRGNTJFMTE3QTRCNEFFRjgzOTk3NTQ2MjM1OTcwMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYMWKhS8wpme04xYQnQCt0ADv
5C120/enSwnWkoEpu+nsl+nyiqXlHpw8+O1/7NhoF7/Zux4EKVLOFlmJ7Q0hiJlk
2EJ199Ltk/RPlVwtYeSGy58lfzP2mcDj3SS24vo91RbhlvEJZrCzbiOfr0g8uqL1
+0h0I1Lc09J67WdryWJitRMeMRnHiZitcTNNh4GFA3FwZQNeg8GkzyIiTuKJsHfu
go04r6X8D3f+th4a26f7yO8v4bU+U/B1T5LJrpvi+cV7Oo43BiEcRCw8to1xsyYB
fgAg7Zzqzuf3FoxEpYm34upZBVOslFgzgyP+rOVkqMCCa60Vw1tQFnjpGGFFAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUTCJPwVT1LhF6S0rvg5l1RiNZcAYwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMjMxMzQy
ZTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABb1kAwDQYJKoZIhvcNAQELBQADggEBAGVDA7PB2sNNGCr4WKpvi3YJGhYe
AXK8PKo6xX8I0iFXpA9UOQpDlSxSAtOWRAdSwof4GUopUKij1xDSWfkTcgfs+PKC
sXlUvUxq8oLnTrmMA38HgHFme6QDfw6liBVUfe7kMT6kZk7W7nK4qTebThH2ZYYb
ULk0hLastL9Lm38FxMBgMz5yGkHGo8WrBilpG1wkg0TR+QLycAt6Rpu6BQGgePEm
QmLKv32F4fF5J8mSgq2jILuW4rGcQAGwaZf2iaA/HjIlCMmkfc/V7q4OrlI0EEej
987oxIugWw6ptbv7+HZqRmHbcp+iYXnvEm70WVli4e5EpTDF2I7vZLEQGvc=
-----END CERTIFICATE-----
Generated at Wed Nov 4 02:45:50 2026 by rpki-client