Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35332e302f32342d3234203d3e20313336373837.roa
File: 39322e3131382e35332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 8mCZsQ5GOiJ5Tf7oyKE4bovPoGPrQB1oWmPWCLLc/U4=
Subject key identifier: C6:56:4E:62:D6:10:6B:09:C1:0F:47:37:56:88:1C:C2:62:BB:3A:73
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 582E9CD2C5858EABC16EB18AAB8761891F3651B0
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:32 +0000
ROA not before: Fri 23 Oct 2026 16:25:32 +0000
ROA not after: Fri 22 Oct 2027 16:30:32 +0000
asID: 136787
IP address blocks: 92.118.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2e:9c:d2:c5:85:8e:ab:c1:6e:b1:8a:ab:87:61:89:1f:36:51:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:32 2026 GMT
Not After : Oct 22 16:30:32 2027 GMT
Subject: CN=C6564E62D6106B09C10F473756881CC262BB3A73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:4f:11:25:88:7e:15:d3:3a:1a:e2:a3:47:
8f:75:84:b5:b2:b1:8d:66:37:2c:85:dc:dc:98:99:
ce:9f:cd:bb:cc:57:51:87:a9:e6:15:43:04:8e:3f:
7a:80:b6:9c:77:2e:fb:ee:bd:db:43:95:0d:c8:82:
5d:5c:b4:51:8c:ec:58:12:55:cf:cb:84:86:31:1a:
6b:19:53:6b:bc:8c:c4:bf:a9:6e:a9:3e:06:e7:77:
cd:28:18:14:b0:85:ba:16:6a:06:ef:03:d4:39:1e:
7f:bc:1e:e0:12:23:75:43:b9:9f:7f:b8:9d:83:44:
1e:a9:c4:d7:62:d9:fc:c3:f7:d2:37:34:86:74:c0:
41:52:c1:c8:1e:da:97:24:48:8a:92:f4:55:fa:00:
6f:e2:77:8a:5a:91:2a:77:c6:6d:b0:e3:be:8e:49:
37:f7:f2:15:d3:48:be:fb:a0:5b:38:96:e3:bb:06:
b6:c7:e2:ab:34:4b:1e:9e:57:c5:63:cd:5c:87:d3:
d1:e4:2d:55:b0:50:64:5a:ca:85:f7:44:8f:cd:d5:
cf:fe:a8:22:af:91:36:29:b1:2f:b8:5d:60:b9:95:
c3:7c:7c:86:f3:50:d1:1a:29:2c:be:16:ca:1c:52:
0e:f4:8e:80:d1:7f:f1:09:e6:39:c8:9b:ab:20:28:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:56:4E:62:D6:10:6B:09:C1:0F:47:37:56:88:1C:C2:62:BB:3A:73
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.53.0/24
Signature Algorithm: sha256WithRSAEncryption
28:66:62:da:1d:70:77:e6:75:b3:ee:d4:cb:5e:ba:8f:58:a2:
c0:2c:40:72:69:7b:7a:30:58:29:3b:73:42:09:c5:d2:1f:db:
55:01:b5:1d:ff:90:1c:35:ca:2c:24:7c:e5:f9:f9:48:f6:14:
a7:fc:39:d0:09:7c:44:44:69:a2:fc:c3:ec:58:6d:08:2f:36:
c8:61:58:a0:65:77:b9:7f:dd:b1:02:4c:ec:97:13:3f:a6:a9:
b0:a1:5a:79:82:51:a8:8f:4e:bd:36:3a:af:15:ac:d4:dd:93:
b1:de:3e:37:3d:ee:dd:48:3c:55:b5:cd:33:24:d4:f3:d2:04:
94:74:ec:50:0a:60:34:87:3f:c9:23:cc:ea:79:50:45:dc:3c:
32:e7:be:23:78:2b:76:2b:55:7b:df:b6:4a:b7:31:7a:f2:e4:
bd:89:2d:df:8c:0e:4c:aa:d3:ff:9c:44:63:d4:1d:48:3c:6e:
45:31:21:9c:9f:ba:2e:60:e6:49:26:d4:6e:8e:f3:2b:95:af:
85:69:80:ec:d8:d6:6d:b8:b5:8e:a7:ab:00:28:49:6f:a1:44:
f2:a0:50:49:e5:36:40:66:14:9b:cb:93:07:ce:c9:1d:f8:47:
0c:02:8e:e1:20:b3:72:d9:7b:eb:4f:c7:c9:65:47:df:ba:6d:
a9:ee:9c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:55:40 2026 by rpki-client