Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134342e302f32332d3234203d3e203437353833.roa
File: 3138352e39372e3134342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: ODiX3BivW/ztsT9wfE6o0oWk1NWYpAWt68y8ysoebr8=
Subject key identifier: 11:11:47:FA:4A:15:D8:77:73:B1:B5:22:81:9C:72:06:40:5D:D5:0A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6ABAE0AFDE13600F66F9243743308CAD213A8536
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134342e302f32332d3234203d3e203437353833.roa
Signing time: Fri 30 Oct 2026 12:31:56 +0000
ROA not before: Fri 30 Oct 2026 12:26:56 +0000
ROA not after: Fri 29 Oct 2027 12:31:56 +0000
asID: 47583
IP address blocks: 185.97.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:ba:e0:af:de:13:60:0f:66:f9:24:37:43:30:8c:ad:21:3a:85:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:56 2026 GMT
Not After : Oct 29 12:31:56 2027 GMT
Subject: CN=111147FA4A15D87773B1B522819C7206405DD50A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:26:4b:9a:0a:b7:69:a4:64:41:b3:df:ed:
e6:b2:9c:6a:4f:23:28:d2:48:03:52:81:b6:f7:f0:
5c:9f:76:b3:ea:44:af:76:4e:fd:98:cb:bb:5f:b2:
f0:d3:5d:2a:26:db:28:1c:a6:9d:b2:e2:58:2e:af:
e7:42:ea:59:70:6e:9c:48:96:0a:b6:ce:78:a1:2b:
ea:c6:4a:1e:04:1a:29:61:c8:e5:a5:71:d3:a4:c6:
00:10:a9:59:72:0a:b4:10:5e:79:1f:10:91:97:70:
02:c1:ce:64:c6:47:b6:ea:70:fb:92:c9:27:06:c1:
b5:17:45:01:57:df:d4:64:49:3f:4d:33:6c:be:9a:
20:00:ea:90:dc:74:6c:bf:30:88:fc:71:1f:00:32:
d3:09:3c:7a:90:34:f5:6f:90:6f:a4:4e:fb:dc:9f:
95:7a:14:ab:a9:6e:a8:9a:a9:a8:ba:4d:1f:05:71:
f0:23:2d:8e:f5:9b:8d:b4:27:ec:d2:f9:63:f4:c1:
ec:3f:0e:56:a0:54:34:45:7e:86:3f:86:80:71:c1:
4a:06:c6:46:98:a1:e4:89:7b:ab:2f:ac:1d:81:7d:
63:44:a6:64:10:c5:fa:3b:76:34:b2:c2:ff:d4:5f:
3d:47:a2:7d:f0:71:7a:57:0c:fc:2d:1c:e9:3d:1a:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:11:47:FA:4A:15:D8:77:73:B1:B5:22:81:9C:72:06:40:5D:D5:0A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.144.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:58:9a:6a:22:9c:19:32:54:49:91:e7:d8:49:54:96:8d:8d:
dd:78:cf:af:a9:57:eb:a3:53:08:c4:e6:f9:c7:b0:f7:78:0e:
3c:d4:97:c8:9f:71:f5:80:1c:de:3e:c7:08:af:e1:dd:d9:bc:
85:28:e7:c4:5c:49:b1:1e:5e:21:1d:cf:37:ad:f4:70:c2:6a:
cf:1c:a3:8d:c8:ec:e5:85:c3:37:d5:c3:3e:06:06:24:21:08:
3e:3d:51:00:98:24:3b:cb:09:06:0e:3a:c9:0b:a3:57:6f:e0:
d3:b4:15:56:ef:5e:83:4a:11:1c:2f:cd:91:f2:13:e4:de:8b:
9b:42:7f:f8:1b:01:bf:d4:ec:18:06:7b:0b:5c:2a:bd:6e:b9:
8c:c5:24:c4:0f:fd:ce:b2:5f:a4:0b:88:b4:62:82:30:e9:df:
be:4f:eb:ea:d4:b9:9e:aa:3d:b3:bc:e7:1e:8e:e8:a7:42:17:
96:d3:4a:5f:90:90:27:60:60:5a:42:ac:a3:96:01:ea:5c:e6:
47:b2:aa:57:23:c6:f6:d1:f6:67:f5:52:06:82:e7:93:9e:8f:
f4:42:f0:44:c9:28:26:82:a5:07:7c:1a:af:ca:8d:14:e4:93:
42:9c:ff:a6:8a:34:c4:b5:1d:c4:03:a4:73:4f:3b:52:8e:79:
85:80:2c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:06:17 2026 by rpki-client