Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38302e302f32342d3234203d3e20313336373837.roa
File: 39322e3131392e38302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: GDd+Jq5QPiQnB1quxU1hdQFMBKH8HJ9YACrUdVCWT7k=
Subject key identifier: B2:04:F0:3B:54:3E:1C:2D:F2:D6:8E:4B:70:A4:C1:C0:22:6F:F0:D9
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1279D04F181EAF20F39EA8F8CD18A99BBA10FBEB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 12:32:20 +0000
ROA not before: Fri 30 Oct 2026 12:27:20 +0000
ROA not after: Fri 29 Oct 2027 12:32:20 +0000
asID: 136787
IP address blocks: 92.119.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 15:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:79:d0:4f:18:1e:af:20:f3:9e:a8:f8:cd:18:a9:9b:ba:10:fb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:27:20 2026 GMT
Not After : Oct 29 12:32:20 2027 GMT
Subject: CN=B204F03B543E1C2DF2D68E4B70A4C1C0226FF0D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:ca:aa:01:7f:08:9c:2d:52:10:fd:7b:ba:
c8:7e:78:d7:9a:fc:8e:47:14:84:0b:22:cf:a3:f3:
03:bd:cd:81:c7:69:fe:14:8b:0e:f1:f2:37:32:83:
44:53:dd:8c:96:1e:f6:dc:59:6e:05:4a:ea:d3:61:
cb:a3:76:3c:15:bd:30:e8:be:32:12:71:cf:80:15:
37:fd:76:53:72:64:f2:94:9c:4f:f2:94:06:a3:9c:
55:4b:0e:ad:d1:82:a0:83:63:b3:63:15:63:30:2a:
a4:b4:98:43:17:1f:8e:05:e4:8e:ae:c9:40:85:a3:
92:5b:b7:07:b3:8d:13:71:6d:30:12:82:55:66:dc:
b9:5c:d4:1e:a8:6d:73:56:e0:f4:bc:f8:0c:5d:41:
65:c4:9b:b8:e1:35:e4:d6:82:39:bf:7d:d3:26:f4:
b4:e0:a1:cf:df:99:33:7c:e9:04:ca:e6:06:a3:e3:
83:74:f4:df:f5:95:1c:ac:6f:b3:62:1b:2a:e0:17:
df:6b:c8:a0:4d:40:c2:af:8a:10:f9:9d:52:fd:28:
d3:49:60:a3:0e:62:9f:16:45:89:43:27:51:b9:6c:
c1:89:5a:6c:76:fd:e6:86:51:70:2c:26:06:d6:01:
63:93:15:62:1e:7f:02:b8:fc:db:a7:06:f2:5f:30:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:04:F0:3B:54:3E:1C:2D:F2:D6:8E:4B:70:A4:C1:C0:22:6F:F0:D9
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.80.0/24
Signature Algorithm: sha256WithRSAEncryption
06:65:6c:3f:09:56:26:ec:38:d3:9a:06:bc:62:ff:74:0d:66:
42:dc:c3:e2:2e:cd:26:a9:e5:54:21:1a:09:e8:62:df:cd:ac:
21:93:9f:fd:1a:bc:d0:cc:8a:2c:dc:97:55:12:25:a9:cc:cc:
0a:26:2f:6f:49:18:61:42:26:90:ea:d1:19:0b:7f:6d:f2:5b:
35:f9:36:83:50:f3:62:ee:d3:f0:47:c1:c3:f6:85:5d:21:fb:
b1:4b:55:b0:65:b1:dd:b4:25:14:33:f5:2f:74:00:19:b2:70:
9a:44:a1:18:81:35:4d:f1:be:84:6d:a5:2e:36:60:11:d5:3e:
e1:44:af:14:16:03:53:63:22:30:4c:fe:00:06:5e:c1:6a:8f:
da:26:45:45:56:bb:97:de:49:9b:3b:e6:9a:36:a4:f7:f8:84:
94:73:29:9a:08:fe:40:26:8e:8d:03:ed:9b:40:02:f4:bd:44:
d7:ae:c5:b6:f4:13:1d:07:d9:1d:fd:dd:50:dc:28:47:43:dd:
8d:85:2d:06:64:f6:1e:f6:47:0b:4a:1d:4c:7a:98:ec:ef:76:
0d:1f:e2:df:6f:38:79:42:ba:b1:64:ab:18:c3:71:5c:e5:44:
21:7d:81:48:e7:cf:e4:2a:9a:a6:3f:3e:55:4f:cc:d3:19:1c:
1b:6e:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 23:18:45 2026 by rpki-client