Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134362e31392e38382e302f32342d3234203d3e20313336373837.roa
File: 3134362e31392e38382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: koJ3J7ADh1ta3qw4XCpQX7nov+ygZSYrGK4wegDlLiM=
Subject key identifier: EC:E8:3B:4B:E9:E5:B9:41:DB:77:F8:AD:97:90:9E:23:54:24:4A:A4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 14BF928E39926D84F99EDF4ED5323A22CD797E75
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134362e31392e38382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 25 Sep 2026 08:29:23 +0000
ROA not before: Fri 25 Sep 2026 08:24:23 +0000
ROA not after: Fri 24 Sep 2027 08:29:23 +0000
asID: 136787
IP address blocks: 146.19.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:bf:92:8e:39:92:6d:84:f9:9e:df:4e:d5:32:3a:22:cd:79:7e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 25 08:24:23 2026 GMT
Not After : Sep 24 08:29:23 2027 GMT
Subject: CN=ECE83B4BE9E5B941DB77F8AD97909E2354244AA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:1a:cc:98:15:a6:ce:00:e1:c8:fb:7a:c0:
75:d9:62:19:f6:d2:ef:46:fe:08:86:26:55:bb:36:
bd:9b:a8:42:4a:8b:06:77:35:16:f2:44:ca:2c:44:
30:fd:0f:85:d3:89:de:f3:39:40:8e:4e:85:01:d4:
f8:3a:33:0f:0d:de:4c:ca:e0:33:c8:71:8f:b1:37:
f1:f7:6e:94:9b:0f:96:17:a1:66:59:f5:38:92:e4:
d1:02:dc:e0:ab:3e:24:88:e0:e5:23:c5:7c:f8:7a:
33:d0:c8:b1:12:c0:5d:5f:e3:4c:de:2c:e1:b1:81:
70:66:60:d7:ca:8f:67:94:d0:b6:d7:50:15:71:48:
38:c6:e8:db:0f:a3:b5:d6:be:1b:bc:49:90:83:29:
5f:59:39:20:4e:7e:a6:a3:7a:2b:34:1a:f9:4a:3b:
32:78:33:14:d9:c6:cb:ab:5d:98:84:8c:67:45:ca:
1b:bc:9d:ca:de:ef:e1:59:37:4a:2e:48:09:4f:54:
cd:d0:e3:c3:79:be:8e:10:36:6f:27:91:91:04:31:
85:c4:f0:ad:84:eb:4f:dc:f7:c7:ec:84:aa:d4:a7:
1d:ac:48:6e:d0:7f:b4:6e:0a:8f:60:8b:94:9b:7f:
48:51:00:7e:ed:b9:42:96:1e:75:7f:88:2f:03:43:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:3B:4B:E9:E5:B9:41:DB:77:F8:AD:97:90:9E:23:54:24:4A:A4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134362e31392e38382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.88.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1b:e7:2b:04:fd:21:d1:ff:1f:4d:26:5e:fd:27:a4:aa:58:
1d:c9:f9:f4:01:df:e7:12:07:2a:16:43:73:39:f0:a0:91:35:
7c:27:7b:c3:a0:68:e9:de:7e:f6:95:0b:cb:d6:60:fc:0e:2e:
d6:03:c8:c0:2c:a0:7b:6f:e9:e2:2d:e3:e1:14:c2:57:19:f1:
53:0b:2f:22:59:cb:d1:2f:91:0c:bc:12:39:f3:23:8a:77:cc:
2e:a9:3e:d8:7d:92:2f:15:ec:ac:9c:e6:33:de:c8:dc:37:d9:
e9:7d:3e:16:bc:fc:52:56:4f:88:12:bb:d0:53:a4:23:a2:d5:
50:ca:58:cc:4f:04:a7:d8:2a:6d:74:4c:dd:5e:e0:91:47:07:
1d:ee:8b:a3:bc:3f:ab:27:38:97:68:4d:ca:bb:ee:b7:8e:cd:
d3:16:5f:1d:99:b5:1c:04:26:b3:37:76:61:af:e8:76:d5:77:
d4:b7:0f:15:18:6d:2c:7c:da:d4:3c:eb:dd:5c:15:93:58:90:
d7:90:07:7b:03:fc:be:81:8a:96:67:c7:f1:a7:b4:d4:b5:fc:
27:2a:2c:8f:79:e1:bb:c9:7c:0d:35:6f:c9:e6:26:64:c6:4c:
2d:60:fb:40:8e:b8:19:eb:ea:af:bd:59:6d:5b:87:4e:67:9f:
85:cb:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:08:02 2026 by rpki-client