Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa
File: 3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 3Jn+zo05YH+6N40BpDOBcIewcIBj3vDUKfYgAOASxf8=
Subject key identifier: A3:4B:9D:6F:B0:46:AF:50:76:8E:40:72:63:8C:40:39:8A:F3:AB:C0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3DA5C364C8CF01EB27CE4A8AF075A68BB5AB5D0E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:40 +0000
ROA not before: Thu 16 Apr 2026 11:18:40 +0000
ROA not after: Thu 15 Apr 2027 11:23:40 +0000
asID: 47583
IP address blocks: 185.173.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a5:c3:64:c8:cf:01:eb:27:ce:4a:8a:f0:75:a6:8b:b5:ab:5d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Apr 16 11:18:40 2026 GMT
Not After : Apr 15 11:23:40 2027 GMT
Subject: CN=A34B9D6FB046AF50768E4072638C40398AF3ABC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:c4:be:56:03:13:56:da:ba:e5:a7:3e:ac:
eb:fd:ed:29:57:6e:8e:62:da:5a:90:fa:5b:56:fa:
1d:5c:0a:9b:f7:17:91:86:d7:0e:a6:2d:5b:68:81:
52:62:72:30:46:bd:f0:2a:c1:cc:4c:0f:33:5e:9e:
ab:93:c1:2e:65:2b:e0:6c:52:01:47:ef:3e:a7:bd:
2e:a5:96:93:4e:1e:2e:bc:8a:26:80:47:66:f8:f3:
61:a7:d8:fb:ee:53:5b:d5:54:89:fe:ab:5e:65:67:
02:aa:aa:c6:b5:d3:e2:c6:3f:51:33:f4:ba:14:1c:
f3:82:25:ed:88:1d:f8:ce:2f:a9:91:2b:2c:db:cf:
6b:8e:f2:a4:cb:dc:de:48:31:90:16:9a:8f:1f:2f:
50:1e:c7:ad:83:c4:97:10:42:4a:77:28:bc:74:1a:
3d:ad:bd:a5:aa:47:8b:fc:49:43:06:b1:a1:bc:29:
8e:17:48:76:83:6f:d6:b1:0a:4a:a4:83:ee:a1:40:
6c:47:24:55:f4:98:64:fe:b5:d9:01:15:0f:c1:37:
ac:7d:82:be:85:eb:11:2b:e6:0c:ca:96:a6:22:5d:
39:bd:d5:57:2c:00:bc:ae:7f:05:6e:67:9f:4e:5a:
9c:50:27:80:6c:0a:ba:a1:05:7b:58:52:05:7f:18:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4B:9D:6F:B0:46:AF:50:76:8E:40:72:63:8C:40:39:8A:F3:AB:C0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.110.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:05:d3:7d:5a:ef:67:f5:98:67:a5:2f:47:85:62:df:36:2e:
37:9f:c2:1d:fe:84:76:b6:cd:52:28:a5:55:f3:c9:69:ff:b8:
8e:fd:49:a4:97:4c:9d:23:dd:9a:98:a9:32:64:35:3b:4a:ca:
04:00:41:00:51:2c:aa:7c:e9:b0:2a:ec:a5:9f:7d:e3:3b:9d:
13:16:73:9d:2c:13:f5:3a:67:22:45:05:83:8b:ac:2d:6e:a4:
b4:4e:30:56:80:11:85:23:24:b0:2e:d9:dd:f7:de:b3:0f:6d:
d8:de:fc:92:bc:81:66:88:98:18:70:f8:18:f7:ba:e4:1e:d2:
2c:b1:29:46:27:d3:25:01:b9:20:c3:ca:12:23:b2:af:58:8f:
7e:16:8b:53:f2:ac:cf:c5:75:a3:bc:50:b1:ba:09:6f:7f:db:
8e:a0:94:50:2d:ea:2b:bd:74:a4:2c:f7:47:f2:f1:8c:44:d4:
69:9f:2f:67:ad:36:61:0b:b4:b2:1b:97:ef:dd:48:74:dc:3e:
a7:67:dd:76:0e:15:56:50:01:90:1f:4e:37:a9:f9:b9:02:e7:
12:d9:ca:22:95:eb:b0:7e:26:8b:95:6d:7d:4e:70:12:2a:18:
08:45:fa:3d:0b:c8:68:1a:90:e3:64:1a:f7:a7:95:8b:1e:91:
90:3c:49:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:39 2026 by rpki-client