Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35352e302f32342d3234203d3e20313336373837.roa
File: 39322e3131382e35352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: VyppsJgNajtmnyKofDJpyQCiSYQAPEPKEaW4c+E4yGQ=
Subject key identifier: FE:2A:E6:F3:0F:EF:3B:DB:A9:59:BA:46:41:B9:42:A9:5F:C8:29:2E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 50ABF7FD53C2ECDA87C49E5F95BBB29401131883
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:14 +0000
ROA not before: Fri 23 Oct 2026 16:25:14 +0000
ROA not after: Fri 22 Oct 2027 16:30:14 +0000
asID: 136787
IP address blocks: 92.118.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ab:f7:fd:53:c2:ec:da:87:c4:9e:5f:95:bb:b2:94:01:13:18:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:14 2026 GMT
Not After : Oct 22 16:30:14 2027 GMT
Subject: CN=FE2AE6F30FEF3BDBA959BA4641B942A95FC8292E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:94:17:70:b9:3c:07:62:98:48:72:bb:d3:
de:cc:d8:fd:bf:10:e1:e7:a5:ed:28:a8:3c:ce:66:
be:73:d6:38:f4:d7:71:32:ef:63:0d:df:eb:b6:4c:
e3:28:c9:1a:96:12:76:13:64:c3:54:3d:b5:95:08:
f0:2b:b1:39:06:48:3e:25:60:2a:95:78:6a:29:91:
2c:ff:92:d7:f3:0a:86:71:3a:61:37:ec:a7:0a:30:
f7:f6:41:23:a7:f8:55:64:25:af:5a:ee:6e:3e:8f:
b6:c8:18:bf:43:0f:47:5f:bb:bf:cf:c6:ec:51:f2:
d1:e0:8d:1c:32:1e:6d:81:29:ac:9e:50:71:66:39:
a7:cb:e6:16:57:e2:39:84:bc:db:db:d5:8d:59:0e:
a0:73:3c:a2:7c:a7:4e:85:a6:55:b7:05:fe:6e:df:
9a:a2:80:de:ea:56:d4:78:90:c9:f4:f9:ee:c2:5e:
00:48:2c:65:b1:48:f5:43:a4:37:62:e6:d7:06:02:
ce:6d:ca:02:f1:aa:ed:54:ae:bd:eb:40:ed:cb:d1:
1a:08:ee:69:84:b5:f4:e0:91:36:e6:08:a0:91:21:
cc:6d:2c:fd:16:d6:86:ec:84:2e:a1:3b:95:4e:e9:
21:fc:d6:30:4c:b6:17:48:0c:0f:94:19:12:dc:34:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2A:E6:F3:0F:EF:3B:DB:A9:59:BA:46:41:B9:42:A9:5F:C8:29:2E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.55.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:6a:0c:5b:ed:ee:23:c6:18:6a:46:b3:32:8f:6d:00:e0:1f:
17:cc:d2:fb:7e:f4:b6:db:e2:86:60:54:95:c5:a2:e1:3c:6b:
5a:2a:f9:ab:03:60:fb:f9:97:95:9a:c4:45:6a:ad:50:e6:c6:
fa:43:f4:4d:d8:b6:a7:7e:8c:45:c2:22:73:1e:f3:50:b2:d0:
99:d3:d5:ab:1d:21:c4:e0:a6:a9:23:a1:58:c4:f1:4e:1e:bd:
01:15:5b:68:92:46:69:35:9c:cc:2e:6e:bd:af:5d:52:b4:64:
65:8c:87:4a:2a:26:3d:bc:3d:13:19:3b:5d:3f:91:e7:7c:2c:
83:bb:c5:35:ec:83:20:dd:ee:fd:04:0a:1a:9e:90:90:5b:c9:
30:58:b8:dd:65:65:62:31:4c:db:56:aa:2e:56:61:9b:06:33:
4c:b5:69:11:ce:70:78:a4:79:42:46:14:20:71:01:b7:34:e6:
83:84:46:4e:2e:05:b2:3b:64:47:4e:62:8f:53:77:4a:22:f5:
63:32:63:4d:0a:cc:ed:70:73:e3:2d:60:1a:e1:0d:e2:5b:62:
f0:4c:da:aa:d6:62:6f:1e:21:08:70:02:55:f4:8d:f9:9f:59:
03:bc:5b:81:0b:b9:fe:c4:4e:f3:d1:b4:96:6e:55:ac:0a:a1:
23:9c:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:39:36 2026 by rpki-client