Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36352e302f32342d3234203d3e20323132323338.roa
File: 39312e3231342e36352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 0M8t2pILETof2zAxtH8F6kYrKfyuNWPjyIe6ND0rWOM=
Subject key identifier: A4:54:B8:BC:0B:6F:66:30:CB:A0:84:87:0E:E2:B0:53:B1:07:73:88
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 04DC0D808D02F83907D23FE1219BB3C24C490F33
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36352e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 30 Oct 2026 12:31:49 +0000
ROA not before: Fri 30 Oct 2026 12:26:49 +0000
ROA not after: Fri 29 Oct 2027 12:31:49 +0000
asID: 212238
IP address blocks: 91.214.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:dc:0d:80:8d:02:f8:39:07:d2:3f:e1:21:9b:b3:c2:4c:49:0f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:49 2026 GMT
Not After : Oct 29 12:31:49 2027 GMT
Subject: CN=A454B8BC0B6F6630CBA084870EE2B053B1077388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:cb:a1:2a:c4:2b:cd:f9:9f:a9:1b:93:0e:
b0:7e:82:77:5f:d2:f6:80:6e:e3:69:07:e7:25:76:
bd:53:08:d3:16:d9:11:5c:db:07:c9:72:0c:0b:f0:
3e:28:94:a2:a0:13:8b:db:88:10:42:f7:a0:0a:7e:
8b:7e:59:5f:01:7c:fd:d7:5a:74:17:51:78:2a:0e:
4a:7f:cb:d6:4f:18:d6:38:76:1f:ec:e7:73:f7:6f:
4a:c9:03:fb:47:13:81:fe:1c:c9:61:3b:7e:54:f8:
26:8c:9f:27:37:f3:0e:20:4f:41:68:b1:f4:53:38:
ba:eb:12:6f:4f:fd:19:b5:bc:20:94:00:cc:ed:10:
e1:e4:a3:f7:e0:50:70:33:45:98:4a:cb:4c:06:e4:
41:98:05:bc:64:c1:f0:15:a0:59:80:ed:f1:ea:94:
ac:83:07:23:79:5a:84:ea:c6:57:33:71:39:f3:97:
4d:a0:98:b3:f3:4e:cb:35:b0:ab:0e:78:32:95:ef:
ed:de:24:06:a5:56:db:de:94:55:fe:23:c6:f0:31:
96:ee:83:68:1d:63:5c:75:d4:d3:2c:3d:09:35:45:
2d:63:11:cf:e9:59:98:ef:b6:a4:07:a7:d5:1f:50:
d7:70:c2:53:9b:ec:6f:8d:ee:67:1f:4d:a9:ad:21:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:54:B8:BC:0B:6F:66:30:CB:A0:84:87:0E:E2:B0:53:B1:07:73:88
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.65.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:29:3f:36:66:ab:ae:37:29:18:22:09:6c:a9:df:66:4f:4c:
05:a2:f4:c1:b3:6e:e4:80:65:54:d9:5f:e3:ff:aa:d9:d4:ed:
6a:bc:2a:f1:fa:e1:3c:24:84:8c:54:4b:a1:35:8e:aa:f1:3f:
5a:7b:1f:7b:de:93:da:06:e8:41:f2:f5:c7:18:d3:79:92:44:
fd:93:75:0e:d9:cf:32:d0:f6:d4:fd:99:24:36:5d:bc:d0:76:
04:91:77:8e:70:42:80:24:8d:67:33:cf:f7:97:34:74:9b:89:
26:a7:72:65:a2:61:8b:de:8d:34:e7:c1:86:aa:5a:14:d1:bf:
97:e5:05:8c:ff:40:af:55:98:d8:4f:d3:5a:a7:87:ed:86:6e:
90:a6:b3:fc:e1:46:c5:ee:99:2c:79:f1:39:ff:c5:91:bf:c1:
4e:8f:cc:fb:3f:90:cf:6b:38:b7:9a:10:46:0e:40:19:b1:40:
8e:3f:2a:82:ac:62:66:6f:cf:58:34:e2:5e:08:de:ac:18:9a:
e0:6b:34:57:1c:1d:6f:ed:34:ea:24:8c:1a:1c:5a:4a:c3:56:
f8:54:5d:4e:b6:58:bc:44:4e:94:f0:94:a7:50:be:15:78:89:
b0:88:c1:00:5c:f9:ae:32:e6:fe:28:09:fa:2a:97:5e:97:9c:
ab:1c:8a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:55:50 2026 by rpki-client