Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137322e302f32322d3232203d3e20323031333431.roa
File: 3139332e33322e3137322e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: cFuMHqQMeQqoXsfMSbBFiMe9FOxyC2mXYanHKt+lmdk=
Subject key identifier: 31:05:DC:89:55:DC:4F:CA:F9:7C:0F:21:26:01:8E:D0:D9:F5:4A:91
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4444E84DA925C4BD17BEC5FC4C0BEDC11672A7AA
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137322e302f32322d3232203d3e20323031333431.roa
Signing time: Tue 28 Jul 2026 20:27:12 +0000
ROA not before: Tue 28 Jul 2026 20:22:12 +0000
ROA not after: Tue 27 Jul 2027 20:27:12 +0000
asID: 201341
IP address blocks: 193.32.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:44:e8:4d:a9:25:c4:bd:17:be:c5:fc:4c:0b:ed:c1:16:72:a7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 28 20:22:12 2026 GMT
Not After : Jul 27 20:27:12 2027 GMT
Subject: CN=3105DC8955DC4FCAF97C0F2126018ED0D9F54A91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:0f:b8:d0:ad:2b:19:a7:8e:5c:07:d3:cf:
35:41:e8:5f:32:d2:e1:61:72:00:51:bf:c8:e6:88:
42:30:cb:fa:1f:5b:03:80:d3:8f:a8:39:a9:bd:34:
db:d8:7a:fe:81:dd:6b:d7:ef:2a:55:38:ba:d6:ac:
0c:11:9c:ed:31:27:5b:cf:6e:7e:62:8e:8f:84:05:
6a:00:a2:29:ee:fc:44:69:c6:e4:44:c6:05:76:e3:
68:77:02:b5:b8:fd:ee:0a:33:55:3c:1b:93:c5:97:
c1:08:cb:8e:03:c5:c5:83:d4:89:30:69:81:6b:47:
07:29:92:cd:13:58:3b:3f:fb:d0:c9:31:0c:dc:a7:
af:61:97:5c:7e:11:6c:df:42:cc:65:3d:33:f6:86:
15:f8:a0:4a:43:ed:47:74:86:f9:de:e1:0f:4f:e8:
cd:c7:df:2e:94:71:e4:07:69:70:81:ca:87:ed:ae:
2a:7e:69:79:1f:45:67:4d:55:53:af:14:5f:f9:41:
26:cc:74:57:5e:7c:0b:fd:e0:75:70:b7:5e:20:d3:
a6:e7:09:2b:f5:75:a7:87:d4:0b:6b:bf:e6:d4:e1:
98:2d:3a:0f:4a:a5:b0:ba:3c:46:f5:bc:4e:69:d1:
dc:40:6d:a5:c6:fd:cc:5a:aa:25:ff:6a:89:b0:45:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:05:DC:89:55:DC:4F:CA:F9:7C:0F:21:26:01:8E:D0:D9:F5:4A:91
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137322e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:93:53:6b:5c:eb:d8:b0:f1:94:21:76:86:92:ee:26:13:2f:
25:84:a2:d1:06:f0:d9:c2:97:59:c4:4f:58:23:d6:26:0b:05:
84:fa:ac:71:41:16:cb:20:f5:39:ca:25:b0:07:3d:ba:c2:e0:
fc:8e:fc:23:44:37:36:f6:cb:3f:01:ed:d7:ac:b7:42:6f:bf:
ca:b8:bf:6e:4a:ae:da:05:64:ab:45:d8:7a:0e:d1:24:fb:ab:
a2:3a:d0:a9:95:27:7f:49:8e:3b:86:b6:17:be:46:c9:b1:38:
99:9a:b1:6a:3f:11:20:e6:3b:4d:cf:af:20:17:a9:17:05:29:
cf:c4:f9:16:de:8e:ed:ab:c0:57:07:65:14:6a:af:75:e8:99:
16:d2:8d:3b:43:70:05:27:d1:d1:c2:1a:f6:d0:47:a1:ff:1c:
19:78:7b:26:cc:f1:8d:31:6a:e7:ef:2d:b6:95:f2:90:d0:c0:
cc:87:96:e4:ae:8e:5d:95:32:74:e2:40:b9:8b:59:0e:33:c3:
6f:4d:fb:e9:34:da:09:b3:9a:26:af:c4:ed:62:02:23:d9:c6:
62:fb:e1:49:df:d7:24:51:1f:67:56:29:e5:3b:d5:79:cf:62:
40:de:9e:7a:61:fe:c7:78:43:1f:3c:a1:2f:5a:14:74:2b:2f:
02:f0:2f:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:25:34 2026 by rpki-client