Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3132382e302f32342d3234203d3e20323132323338.roa
File: 3138352e3235352e3132382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 4PtlIDHzfyGm2Uz2Rz1TFMtd+PiLRbJyuZJMmn6gdV4=
Subject key identifier: 04:A6:D1:C1:CF:F8:4D:78:73:98:DD:C0:53:D0:1F:A8:4F:62:70:BC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 08518A294B0AB586AF175A1F84D68E8EF3F63C20
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3132382e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 29 May 2026 12:24:42 +0000
ROA not before: Fri 29 May 2026 12:19:42 +0000
ROA not after: Fri 28 May 2027 12:24:42 +0000
asID: 212238
IP address blocks: 185.255.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:51:8a:29:4b:0a:b5:86:af:17:5a:1f:84:d6:8e:8e:f3:f6:3c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 29 12:19:42 2026 GMT
Not After : May 28 12:24:42 2027 GMT
Subject: CN=04A6D1C1CFF84D787398DDC053D01FA84F6270BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:1e:a6:77:aa:b5:f6:84:fe:47:22:fc:99:
ac:dd:2c:d5:18:c1:84:6b:d3:fa:16:fe:65:a2:d7:
f9:32:d4:bc:de:f1:3d:2c:f2:c3:62:24:02:b7:82:
74:2f:eb:e4:73:b0:46:6b:a2:d6:b8:cf:cb:cb:a3:
6e:8e:fb:40:1a:e3:d3:f3:cf:bd:31:7b:c9:15:0a:
36:91:a0:4a:78:b4:26:5d:32:1c:d6:f7:88:b8:6b:
f1:4f:ee:21:c7:5a:b9:a3:3e:6a:da:d5:89:32:d0:
3c:2a:bd:fc:c4:c5:07:4b:df:dd:04:4b:2f:eb:9e:
a2:19:0f:74:67:28:05:f3:fd:50:09:c1:87:8e:79:
02:4d:b9:b7:e4:ba:6a:c1:0d:8b:84:b1:de:30:a2:
e7:fc:02:62:23:28:e0:7d:be:04:e2:89:33:3c:3d:
35:54:ba:1c:78:9f:3d:d0:55:1b:00:21:c0:21:ef:
36:92:ba:6c:ed:cf:f1:a7:a1:fb:26:70:6f:49:f2:
92:cb:20:d7:9d:51:5b:1a:e5:85:0e:a3:5c:54:0f:
a3:15:f5:0e:ac:c4:f2:0f:dd:e2:a0:d7:99:2e:85:
ce:67:92:c5:6d:7e:f9:20:9c:28:dd:b3:67:3d:39:
dd:e4:5f:93:c0:b4:cd:cd:a4:e3:00:5b:d4:71:23:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A6:D1:C1:CF:F8:4D:78:73:98:DD:C0:53:D0:1F:A8:4F:62:70:BC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3132382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f6:9b:76:d1:55:53:cd:0a:b7:be:10:bf:3e:0a:e9:99:3d:
73:cc:a3:a5:b4:ad:62:c5:c0:54:0a:82:e7:92:31:71:d3:52:
da:45:32:c1:6e:16:ef:b8:c0:11:d9:7d:fe:ca:83:c6:35:55:
1e:7d:20:81:4c:8e:1d:fe:cf:a5:2d:89:0a:ef:4f:b0:1d:bd:
fa:d8:2c:da:79:3d:66:1d:ea:14:3c:ab:f1:7a:82:51:a8:54:
f9:f4:78:dc:be:9d:90:2c:df:c0:b8:3e:fe:e2:94:12:9c:be:
75:ec:34:4c:58:b9:9a:9a:17:ef:10:28:c6:18:e6:8a:02:3c:
fe:95:07:ca:e5:2c:db:fb:f1:13:c4:bc:cf:43:fb:37:47:49:
7b:b0:a3:e1:14:5d:c9:18:1b:79:76:eb:ae:f6:dd:91:ae:d9:
2e:07:53:28:a1:38:9e:e8:b5:a1:1f:c2:d4:61:43:56:f2:75:
ce:e4:1e:39:a4:da:b7:09:7a:09:ba:3c:64:ec:46:69:34:38:
80:a4:cf:dc:d4:2f:f5:a9:92:8c:55:8f:fe:1b:a1:be:7f:d6:
f2:5c:42:87:f8:79:8d:24:be:7d:e7:4b:10:07:7e:ef:53:1e:
d5:27:24:82:04:ac:33:88:dd:d7:3b:59:f7:88:34:88:a6:06:
fd:9c:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:59 2026 by rpki-client