Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136342e3131302e302f32332d3234203d3e203437353833.roa
File: 3138352e3136342e3131302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: i2B2EbFmeb+V1CgzgD+cabsUrePrlNF13iP67bWvcXQ=
Subject key identifier: 4C:A0:51:ED:4C:D6:98:3B:95:68:BE:69:B4:AA:DE:7C:08:8A:A9:CB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 67A52001A7265FB398FFE0989AD686FD65D55D4D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136342e3131302e302f32332d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:40 +0000
ROA not before: Thu 16 Apr 2026 11:18:40 +0000
ROA not after: Thu 15 Apr 2027 11:23:40 +0000
asID: 47583
IP address blocks: 185.164.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a5:20:01:a7:26:5f:b3:98:ff:e0:98:9a:d6:86:fd:65:d5:5d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Apr 16 11:18:40 2026 GMT
Not After : Apr 15 11:23:40 2027 GMT
Subject: CN=4CA051ED4CD6983B9568BE69B4AADE7C088AA9CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:a2:b7:92:3e:7d:28:22:43:5a:5d:2e:87:
b6:74:c1:27:73:57:e8:6c:a8:b3:88:a5:ce:89:b3:
ce:1e:d5:3a:17:5f:95:da:55:bd:bb:a0:d4:9b:4e:
ff:8b:2d:2c:28:c0:e9:c8:4a:ac:38:8e:b3:da:10:
14:51:27:83:c7:09:42:05:48:b8:cc:a2:e5:d3:15:
b9:ff:0f:04:ad:91:aa:d3:bd:e3:19:82:d0:f5:42:
d5:92:fe:38:90:9f:3c:8a:a3:45:fd:46:3b:34:05:
28:d9:f3:13:1a:93:82:31:e7:c4:c8:fb:1e:7a:e2:
5d:23:0d:51:91:e0:da:50:c6:0a:0d:bd:da:ef:6f:
57:ab:ad:a4:c2:74:71:6d:b2:9e:b4:28:37:08:0e:
6a:33:bd:33:df:67:a7:03:5d:91:9a:b1:3c:28:e8:
90:78:3c:91:ee:20:5d:a8:71:e2:1d:98:93:bb:73:
f4:a8:f1:41:74:82:40:89:f1:69:f4:dc:cb:17:c3:
6b:6c:5f:e6:e0:cc:16:14:85:2a:5c:b7:b6:60:31:
9c:e3:cd:0a:43:0e:6b:c3:37:ba:b5:00:cf:38:7c:
cd:65:cb:35:f4:d5:d0:8e:ef:83:96:e5:81:5f:5f:
11:fe:d3:af:59:60:3e:68:bb:7c:a4:eb:64:d0:25:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A0:51:ED:4C:D6:98:3B:95:68:BE:69:B4:AA:DE:7C:08:8A:A9:CB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136342e3131302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.110.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:b0:f7:04:88:5e:a0:15:69:6a:d2:44:52:54:fc:92:e8:04:
bc:55:1a:69:e3:46:bd:68:ab:84:04:97:c0:5c:9a:ca:a1:bf:
be:02:47:52:02:89:1b:ec:01:b7:93:a9:ef:fe:a0:a0:d4:d7:
0e:f2:dc:7b:fc:0b:81:54:aa:2f:3a:15:1c:b1:20:17:1a:f0:
ae:d7:33:ad:1d:dd:d1:1a:6f:b6:b0:42:44:34:f8:d9:cc:c0:
7e:a7:c1:5f:83:9e:76:00:ed:a6:b3:f1:ef:35:21:2a:00:4e:
79:d4:e2:46:c7:80:60:89:11:ce:ad:6b:5e:4e:3a:9e:b9:90:
5b:3c:c8:9d:40:17:7b:ea:51:9f:ba:4b:71:22:b5:69:fa:10:
ce:2d:f6:94:f1:24:02:15:a6:74:a6:6b:a1:e6:72:de:5e:99:
01:8d:dc:cb:84:bc:61:14:7f:fd:4a:44:76:95:04:22:06:2e:
55:be:ff:09:a1:45:2d:c9:74:b3:a5:60:43:83:97:0f:2b:36:
14:8e:3a:3a:0f:cc:15:fd:9d:89:e6:2a:8a:74:2e:8a:4f:d5:
cb:e5:b1:43:1a:63:c1:ea:4e:c9:17:fc:40:54:a1:b1:b0:8f:
7b:2d:fa:ec:c1:bd:38:03:b4:8f:10:43:ff:f9:c2:52:41:3b:
92:72:ae:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:50 2026 by rpki-client