Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131342e302f32342d3234203d3e20313336373837.roa
File: 39342e3130312e3131342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: F3RcgDnh7B21+Hfil+VHOp/7CCjxBHQTCxc4k+d6emc=
Subject key identifier: CD:64:7F:6F:9D:9C:9B:2F:8B:1C:89:5C:2A:79:67:B4:69:7A:57:43
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6B653A07E93F20D344928C32ED07FE0271BF7A6F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:15 +0000
ROA not before: Fri 23 Oct 2026 16:25:15 +0000
ROA not after: Fri 22 Oct 2027 16:30:15 +0000
asID: 136787
IP address blocks: 94.101.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:65:3a:07:e9:3f:20:d3:44:92:8c:32:ed:07:fe:02:71:bf:7a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:15 2026 GMT
Not After : Oct 22 16:30:15 2027 GMT
Subject: CN=CD647F6F9D9C9B2F8B1C895C2A7967B4697A5743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:39:d1:3f:9c:ca:66:d1:8f:c8:ad:ec:6b:
83:be:03:29:3d:e9:12:11:08:9d:7c:85:e7:67:00:
43:21:ec:7c:99:31:06:92:9a:46:db:81:00:82:c0:
5e:57:67:c7:6b:35:4b:04:da:2b:6f:8d:8f:3d:fc:
a3:4a:fc:b9:33:c4:1c:51:19:60:9a:c4:92:c4:80:
13:50:af:eb:37:49:01:80:8e:60:7c:8e:de:26:61:
d9:ce:be:1d:7d:84:28:fb:f7:ab:a9:2b:26:37:ce:
0e:bf:7d:0b:0b:b9:c4:80:f6:3f:63:b8:d8:0a:cb:
97:af:36:44:10:40:3e:56:49:fc:ed:25:fb:6e:7e:
6a:40:96:5d:d1:c2:af:ff:1c:cb:dc:ec:4a:1f:94:
a7:53:83:2c:46:ae:c9:31:3f:85:e7:ae:6c:bd:aa:
3f:b7:71:2a:b0:8d:12:8d:a6:dc:0a:05:12:d7:9e:
58:03:c9:57:cf:cf:37:7d:99:4a:5f:e3:ea:dd:9f:
a2:54:ad:54:9c:97:84:fc:28:96:91:84:79:2f:53:
c7:0f:ca:d8:c2:5b:73:31:0d:2e:77:a1:6c:29:c8:
76:9d:b5:a3:b5:2f:11:cf:66:e6:0b:8f:1b:c2:1a:
b1:27:45:9f:96:ea:bf:7d:e1:8d:de:d3:5b:ea:f6:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:64:7F:6F:9D:9C:9B:2F:8B:1C:89:5C:2A:79:67:B4:69:7A:57:43
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:55:36:5b:f0:87:76:26:88:0d:77:51:86:f9:2d:bb:46:43:
12:c0:62:0a:5b:c4:36:4c:54:67:b0:4b:47:f2:d4:d8:6b:7f:
eb:db:c5:eb:e8:00:2b:a5:83:50:21:43:99:15:6f:9d:6e:6d:
94:67:fc:91:3c:51:ad:6f:ce:55:63:5d:0a:55:51:15:15:35:
cd:02:44:1e:84:07:f9:3d:12:88:dc:d9:72:d2:1f:b0:23:1f:
7c:70:ec:cf:17:b6:0e:34:cd:38:5d:f4:f3:34:40:b0:b3:02:
18:0f:c2:1e:98:b8:ea:be:2b:55:0e:9a:8e:2e:d2:cf:14:cc:
e2:fc:c8:fd:05:6c:df:63:70:50:18:2f:9e:9e:82:03:e7:a9:
28:d1:8c:0d:dd:15:da:16:a1:85:af:f5:4b:00:97:a7:56:9d:
bf:d7:33:67:2f:e5:0a:d8:d5:5e:cf:ab:7f:2b:4d:c7:5f:45:
c7:8d:58:aa:46:5a:52:79:4d:ef:a8:99:6c:7b:9d:75:ef:03:
e4:85:36:9a:84:17:21:b3:54:9d:84:0d:60:7a:97:43:87:22:
e8:04:33:cd:6e:c9:cb:fb:2e:7e:93:8b:2c:ab:85:ea:77:14:
c3:27:24:59:08:e7:f3:9c:8d:2d:94:00:5d:df:81:a4:20:aa:
0d:1c:ea:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:35:46 2026 by rpki-client