Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35342e302f32342d3234203d3e20313336373837.roa
File: 39322e3131382e35342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: QJDeKHRyKWJ9XR3aRIzv4PrCWWJZd4QtXI2D5DgUGzs=
Subject key identifier: DA:81:1F:D9:19:C8:AE:98:37:39:D0:45:EF:08:FB:DC:B7:82:CA:E4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3464FC25FCB9E3F6A222EE37FFFC0A70A5EF220C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:12 +0000
ROA not before: Fri 23 Oct 2026 16:25:12 +0000
ROA not after: Fri 22 Oct 2027 16:30:12 +0000
asID: 136787
IP address blocks: 92.118.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:64:fc:25:fc:b9:e3:f6:a2:22:ee:37:ff:fc:0a:70:a5:ef:22:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:12 2026 GMT
Not After : Oct 22 16:30:12 2027 GMT
Subject: CN=DA811FD919C8AE983739D045EF08FBDCB782CAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:78:cc:f1:32:87:2a:b2:a8:30:9f:aa:7c:
d4:25:84:e7:73:f4:fb:aa:4e:ee:ef:e4:1c:31:e8:
43:04:44:ef:ee:b9:90:2c:e4:6e:10:c4:2d:53:17:
de:f6:88:6f:d6:88:c8:2f:0c:b2:ad:9d:5c:84:42:
74:89:9c:07:05:69:f7:d6:6d:10:25:29:e3:09:f8:
ac:e0:93:e9:e2:6b:7b:a2:37:6d:6f:28:1a:1d:d0:
95:ac:29:e3:17:48:1b:56:2f:8a:72:f7:5d:4f:35:
5c:22:b2:6f:88:34:4d:16:27:23:c5:ea:6f:6b:16:
c0:37:e7:67:7f:5c:72:cf:b7:58:f2:44:2e:7e:26:
c5:7c:59:49:c2:07:dc:e5:d1:ac:4e:2b:f9:5b:fd:
77:ca:6a:02:00:07:e5:36:d0:67:24:66:2f:80:2d:
7a:8e:91:8b:b6:d2:90:c7:c5:5b:ae:aa:85:26:8b:
f5:18:6a:be:8e:13:80:c3:7b:4a:2c:96:83:29:0f:
06:b5:e8:1d:74:0d:06:23:33:27:47:85:46:44:a2:
1c:6a:18:0e:a8:0f:01:3f:e5:15:51:5b:80:5a:ef:
bb:3d:d9:9e:28:e2:45:76:af:8f:5f:c5:62:f9:f4:
91:de:78:16:b3:ad:94:4d:85:9e:34:f8:1a:e7:e5:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:81:1F:D9:19:C8:AE:98:37:39:D0:45:EF:08:FB:DC:B7:82:CA:E4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:54:0e:5b:41:51:f0:1b:fd:e8:67:86:cf:4d:82:f5:1c:3e:
cd:22:97:4d:47:37:85:6d:86:cf:2d:ee:ea:23:4b:63:16:7f:
f6:30:ff:92:4e:8f:00:a9:7d:25:9d:e3:8c:74:08:da:bb:df:
a4:6f:94:40:03:9e:57:b4:db:1b:2f:3c:eb:02:e2:29:f2:c5:
7f:43:76:32:12:38:61:47:81:8f:14:e8:15:76:08:83:1c:5c:
a4:98:b4:f1:b8:82:6f:2f:43:52:b1:39:b8:5a:8e:6f:8a:b7:
64:42:ec:2f:1b:84:2f:ff:e3:a6:64:7f:fd:da:d8:80:b2:e4:
3b:94:e2:f8:02:fb:04:cc:46:b8:ef:37:13:f2:2f:43:3e:06:
ea:7e:5c:2a:ed:de:34:bd:d1:61:40:26:f1:bb:c4:5a:8f:44:
3a:6d:38:c2:7b:df:cc:37:b7:21:04:1e:c0:18:62:06:ad:68:
fa:70:87:86:ee:b1:0e:2c:29:5c:e1:b7:04:40:8b:42:95:f9:
6b:b0:b7:8d:6d:8b:6f:61:d1:91:f5:e3:82:f1:7e:22:36:e1:
e6:6e:2c:6d:ed:7e:94:77:5b:98:a6:b7:cb:1c:dd:c1:74:d5:
98:bd:f1:8c:b6:4c:6c:3f:26:8a:27:0a:de:1a:bc:fe:8f:a7:
c0:19:83:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:14:13 2026 by rpki-client