Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e39322e302f32342d3234203d3e203133333335.roa
File: 3139342e3131302e39322e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: 4ku5p10bsFQFbGm3Ltq+E5noVH3EXVvH1A29YC9l7SQ=
Subject key identifier: 58:1E:8F:E5:02:F4:8B:75:62:8B:EE:93:D8:8E:DC:A3:76:DC:23:B4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6566BA233476BEA264CE75CB1AD12133216DA98A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e39322e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:15 +0000
ROA not before: Wed 09 Sep 2026 19:31:15 +0000
ROA not after: Wed 08 Sep 2027 19:36:15 +0000
asID: 13335
IP address blocks: 194.110.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:66:ba:23:34:76:be:a2:64:ce:75:cb:1a:d1:21:33:21:6d:a9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 9 19:31:15 2026 GMT
Not After : Sep 8 19:36:15 2027 GMT
Subject: CN=581E8FE502F48B75628BEE93D88EDCA376DC23B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:88:4a:83:97:b7:45:ce:e4:8f:5f:df:d2:
32:50:f9:98:a8:f3:ea:21:5e:86:2b:b0:fd:ec:52:
b6:a2:99:80:d3:64:cc:71:38:c7:e1:ec:f2:76:fe:
2e:cd:4b:82:72:ab:d1:29:15:4d:8a:00:f3:40:12:
f8:eb:8c:13:78:27:c1:74:a4:66:cb:ee:ce:f7:20:
ac:7d:3e:36:f9:3f:6c:8d:49:f7:f8:7c:d2:55:d2:
80:89:d9:4b:c1:51:67:93:88:b1:d3:6a:61:b9:0a:
e4:aa:12:a3:d2:0e:6d:4d:5b:21:c7:14:fe:bc:8c:
2d:c6:85:29:cc:b7:43:4f:a1:01:cf:3b:2a:ae:f4:
74:71:c2:b4:e7:34:be:d9:19:cc:a8:90:84:15:7a:
9f:41:36:4b:e4:5b:e5:1d:52:f1:99:e3:d4:a0:b0:
95:1e:d7:9c:ca:34:5f:ec:74:76:95:3a:10:f9:ed:
a0:07:be:d8:82:61:fb:6e:76:b5:30:48:5f:11:1b:
64:b7:5e:6a:e3:db:0b:64:f4:a7:89:16:d5:6b:17:
30:62:44:c7:16:eb:e3:0c:c3:1d:4b:17:6d:f7:6b:
05:49:2f:bf:6d:a5:0c:16:70:a3:d0:21:a8:d2:56:
48:c7:fe:15:11:f3:f0:30:55:a4:07:4a:10:19:30:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1E:8F:E5:02:F4:8B:75:62:8B:EE:93:D8:8E:DC:A3:76:DC:23:B4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e39322e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:17:be:3b:e9:9c:25:ba:4a:db:94:fa:dc:cf:58:57:51:f1:
80:fe:6a:3f:fd:41:f2:1f:2d:80:61:1f:40:0d:e3:7f:5c:16:
34:d6:6f:35:6b:00:ce:ca:c7:30:a5:3a:57:08:c5:b6:4a:2c:
6b:1a:f8:36:43:17:17:22:2e:74:f6:cd:89:3b:d5:d5:13:f5:
d9:79:fd:84:70:22:6d:76:ab:ad:c2:95:a9:61:79:21:ae:29:
5c:a3:de:11:5f:a2:07:25:47:f0:f4:45:3c:2b:e2:2a:1b:8e:
8a:26:69:0a:ec:c6:2b:49:8e:67:e0:b6:e9:ca:98:ae:47:4f:
2b:3a:c9:61:ed:29:93:d7:67:b2:f0:39:54:94:51:4d:db:68:
5f:41:8c:90:a5:40:66:5a:33:c1:80:75:46:31:a9:df:48:ef:
99:5c:df:de:91:8d:3e:2f:f1:89:2d:da:a8:c1:a0:8e:94:f5:
e6:4f:e7:78:ce:2f:f2:70:25:be:d2:dc:71:c6:bb:66:00:f8:
1e:c9:c6:ca:c7:d8:9a:3b:97:c5:ae:98:0d:11:9d:f1:53:21:
c0:2f:73:1c:19:45:d2:a2:f2:10:3a:89:38:2e:eb:a7:78:ce:
d2:4e:b8:db:5f:4e:c6:fa:2e:96:f0:a9:34:ea:a6:8e:09:8e:
a6:cf:7f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:03:48 2026 by rpki-client