Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39332e3137372e39362e302f32322d3234203d3e20323034313730.roa
File: 39332e3137372e39362e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: gRYduCFSPGcCEHe4UvdF0735PEJYwLQ3HwrbWjYr4Iw=
Subject key identifier: D0:12:D7:66:52:B9:4A:09:FE:24:05:0D:D2:D1:26:27:D7:7E:43:DF
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 55DC5B18F6FB1409EB74C5DC053BC1422146BDC6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39332e3137372e39362e302f32322d3234203d3e20323034313730.roa
Signing time: Fri 23 Oct 2026 16:30:14 +0000
ROA not before: Fri 23 Oct 2026 16:25:14 +0000
ROA not after: Fri 22 Oct 2027 16:30:14 +0000
asID: 204170
IP address blocks: 93.177.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:dc:5b:18:f6:fb:14:09:eb:74:c5:dc:05:3b:c1:42:21:46:bd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:14 2026 GMT
Not After : Oct 22 16:30:14 2027 GMT
Subject: CN=D012D76652B94A09FE24050DD2D12627D77E43DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:93:87:ef:8e:57:63:85:0d:23:94:fa:71:
cf:49:aa:de:f3:a8:3e:cd:85:f0:6f:4b:73:7d:c5:
a5:07:41:a4:f6:82:cb:59:6e:02:36:c0:25:39:5c:
1e:60:63:b1:f1:01:3b:54:2a:bf:7c:06:ca:57:8f:
d6:c3:c5:14:2e:30:3f:82:24:94:9d:8b:9a:29:1e:
e1:dc:df:14:5d:12:12:09:38:bb:ea:2e:6e:9b:b7:
c8:e1:93:be:03:cc:42:e9:a7:a1:e5:1a:45:bb:b6:
58:87:3e:26:7d:ea:9b:1e:17:8f:e5:69:88:c2:cf:
6f:93:c5:fc:3a:21:78:80:55:9b:9b:9b:fa:37:24:
d1:af:c8:e6:c4:d3:2c:68:62:c6:f3:5e:d2:d4:60:
6e:31:f2:10:9d:a7:fd:8d:95:6f:8e:5d:2a:6f:db:
ad:99:e0:05:35:3d:a0:9b:71:d4:3c:08:21:93:9b:
9e:3a:5c:d8:45:2a:3e:69:8c:83:b8:d0:3a:0e:a3:
75:e8:64:0a:f9:b9:6a:b2:29:5e:4e:b1:27:1f:87:
3c:fe:ca:19:d8:cc:37:b0:71:92:2b:bc:f3:76:cb:
b6:5a:2f:3c:55:ae:f7:88:b9:76:24:aa:46:5b:48:
c8:ce:85:49:17:72:c6:29:2a:51:d6:61:ce:5e:c5:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:12:D7:66:52:B9:4A:09:FE:24:05:0D:D2:D1:26:27:D7:7E:43:DF
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39332e3137372e39362e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.96.0/22
Signature Algorithm: sha256WithRSAEncryption
70:43:a7:bd:d6:59:8a:f3:be:81:cc:65:eb:85:f0:9e:a3:c0:
8d:ee:5f:a7:30:2c:44:f9:98:ba:5c:d4:a8:17:19:66:17:ab:
9b:c6:02:0b:69:22:8c:b2:6a:66:66:49:11:92:09:df:e7:95:
74:22:36:9f:0a:89:54:2a:e3:d5:f1:29:88:61:52:2e:90:fb:
2a:a6:f9:36:67:f4:04:ca:40:6c:b2:c0:f3:c3:50:49:7f:3d:
35:26:61:d3:88:10:da:a3:1f:8e:70:de:60:c7:da:40:a0:7f:
5e:5b:48:13:d2:38:bc:32:5c:fc:32:dc:f6:2e:a3:ea:6b:21:
b4:5b:8d:e9:47:9c:24:e4:e3:48:d5:47:2c:e4:c4:b5:07:f6:
fb:1b:ab:f7:29:6c:6b:ba:37:0f:f3:e2:34:41:71:a9:7c:1e:
33:4d:4d:a2:00:a2:6c:e8:dd:c6:70:f1:8f:1e:3c:cb:9e:eb:
73:86:a9:b3:dc:c8:38:fc:42:2c:eb:ea:6d:ff:b7:0e:30:2e:
99:7b:2e:fd:5b:c4:7b:81:e7:99:d0:34:1a:d4:32:21:ea:00:
75:b1:53:f8:87:89:74:b3:95:0f:62:89:f4:d4:3f:34:ab:df:
d8:67:13:1e:4e:64:a4:5d:f8:d8:74:d7:ec:71:26:6f:e6:26:
80:2a:1d:dc
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUVdxbGPb7FAnrdMXcBTvBQiFGvcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MTRaFw0yNzEwMjIxNjMwMTRaMDMxMTAvBgNV
BAMTKEQwMTJENzY2NTJCOTRBMDlGRTI0MDUwREQyRDEyNjI3RDc3RTQzREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNpOH745XY4UNI5T6cc9Jqt7z
qD7NhfBvS3N9xaUHQaT2gstZbgI2wCU5XB5gY7HxATtUKr98BspXj9bDxRQuMD+C
JJSdi5opHuHc3xRdEhIJOLvqLm6bt8jhk74DzELpp6HlGkW7tliHPiZ96pseF4/l
aYjCz2+Txfw6IXiAVZubm/o3JNGvyObE0yxoYsbzXtLUYG4x8hCdp/2NlW+OXSpv
262Z4AU1PaCbcdQ8CCGTm546XNhFKj5pjIO40DoOo3XoZAr5uWqyKV5OsScfhzz+
yhnYzDewcZIrvPN2y7ZaLzxVrveIuXYkqkZbSMjOhUkXcsYpKlHWYc5exe1BAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU0BLXZlK5Sgn+JAUN0tEmJ9d+Q98wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMzMmUzMTM3Mzcy
ZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMwMzQzMTM3MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJdsWAwDQYJKoZIhvcNAQELBQADggEBAHBDp73WWYrzvoHMZeuF8J6jwI3u
X6cwLET5mLpc1KgXGWYXq5vGAgtpIoyyamZmSRGSCd/nlXQiNp8KiVQq49XxKYhh
Ui6Q+yqm+TZn9ATKQGyywPPDUEl/PTUmYdOIENqjH45w3mDH2kCgf15bSBPSOLwy
XPwy3PYuo+prIbRbjelHnCTk40jVRyzkxLUH9vsbq/cpbGu6Nw/z4jRBcal8HjNN
TaIAomzo3cZw8Y8ePMue63OGqbPcyDj8Qizr6m3/tw4wLpl7Lv1bxHuB55nQNBrU
MiHqAHWxU/iHiXSzlQ9iifTUPzSr39hnEx5OZKRd+Nh01+xxJm/mJoAqHdw=
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:50:26 2026 by rpki-client