Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e20343031383537.roa
File: 39322e3131382e36322e302f32342d3234203d3e20343031383537.roa (raw, json)
Hash identifier: qAF+PzdQ3tXbH7l/4EHO9o9bLOzbMjhvNMOX7WjSQZI=
Subject key identifier: 15:83:15:D1:19:8D:15:F3:48:32:29:4D:42:89:4A:79:C8:73:B4:8A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3D9797D032578C91EA32784CC7BEF2647272C115
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e20343031383537.roa
Signing time: Thu 05 Mar 2026 08:20:01 +0000
ROA not before: Thu 05 Mar 2026 08:15:01 +0000
ROA not after: Thu 04 Mar 2027 08:20:01 +0000
asID: 401857
IP address blocks: 92.118.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 09:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:97:97:d0:32:57:8c:91:ea:32:78:4c:c7:be:f2:64:72:72:c1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Mar 5 08:15:01 2026 GMT
Not After : Mar 4 08:20:01 2027 GMT
Subject: CN=158315D1198D15F34832294D42894A79C873B48A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:6e:2c:c3:fc:ef:a6:ee:24:ab:80:24:a7:
17:28:3c:64:a9:44:0d:e7:78:94:24:7e:7e:f8:90:
8a:6b:c8:65:4f:0a:a3:20:fa:3b:9e:ba:29:bc:2e:
41:92:72:0a:13:79:21:30:af:3d:3a:a8:d4:a4:00:
a9:7e:6f:78:d5:24:a6:d0:33:63:9c:41:31:81:9f:
c6:17:14:f1:b5:62:c2:ff:69:85:75:9e:95:f3:05:
ba:60:df:ca:e2:b2:a5:fc:ba:1e:7d:45:c7:75:54:
0b:bb:5a:2c:ed:b4:3a:08:98:0d:9e:31:dd:d2:93:
ec:30:ea:48:fd:a6:a3:3d:bd:48:4b:ee:4c:9d:58:
d2:10:ff:2c:63:ee:59:6f:aa:2d:79:e9:dc:3b:ea:
73:61:d2:45:24:c2:19:a8:c9:9a:c6:36:2c:5e:fa:
de:fe:13:5d:f5:0b:43:7c:e2:69:00:9f:53:81:2c:
9a:2b:cc:56:22:4b:b9:d7:20:bf:b0:72:b0:a4:b2:
18:85:6f:36:37:c8:61:7e:d4:aa:5f:fe:27:44:a2:
77:73:d6:b5:e0:cf:19:d5:19:ba:0c:e9:7d:8c:c7:
67:8e:6a:a5:8e:ec:47:01:a7:fe:0d:cf:b3:4f:87:
37:08:d6:fb:3c:0b:c1:79:0a:3a:9a:ec:2f:e7:10:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:15:D1:19:8D:15:F3:48:32:29:4D:42:89:4A:79:C8:73:B4:8A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e20343031383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.62.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ee:60:5e:19:ed:61:9c:cf:82:8f:e4:2e:77:b9:18:4b:6c:
da:98:45:7e:c5:c2:40:b4:13:8e:64:50:8b:f7:40:18:3c:79:
45:46:9d:0b:83:ef:49:b2:9c:d7:78:3a:26:75:90:b1:10:ea:
9a:f2:ae:2d:6d:03:1c:e4:9e:4e:2b:a3:d8:3a:a2:be:fa:e9:
e6:21:c0:f5:05:fa:1d:1f:40:0d:b0:70:69:f5:c0:f9:e0:98:
2a:15:73:e4:72:41:f9:70:d8:f2:88:72:6b:5c:c3:61:0d:92:
92:8f:e9:f2:a6:0e:cc:53:c9:14:42:67:94:a7:d4:12:04:0d:
5c:1d:bc:ec:f4:1b:d1:7d:dd:5f:0e:0e:3d:f2:21:3d:32:36:
72:ee:a9:5d:c6:97:e7:6f:0c:24:85:6b:ac:61:ca:6e:8a:1f:
96:8e:9a:8d:53:e2:93:35:cb:bc:33:15:21:47:97:22:03:31:
a4:c9:20:84:53:28:74:d5:93:d2:71:4a:30:8c:1d:52:b8:77:
ad:eb:1d:31:45:52:68:1d:f8:8c:ea:78:d5:08:e8:46:4e:e1:
fc:51:0d:1a:6e:bc:0e:0a:70:4c:ae:a2:da:04:ba:30:95:99:
3c:8d:ce:a7:00:3f:33:e5:15:d5:6c:d6:86:06:fe:d7:65:fa:
bf:4c:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:32:41 2026 by rpki-client