Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e39332e302f32342d3234203d3e203133333335.roa
File: 3139342e3131302e39332e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: U+jSqqIi504NGQYHUYoHoi4AOICx17cERHWacX+eh3Q=
Subject key identifier: F0:51:EA:58:CB:57:14:50:78:E7:62:9F:DC:F6:CD:D0:7F:91:F1:5B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 49C4D341F142AC421747A4CCF7598FBB3AE69716
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e39332e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:17 +0000
ROA not before: Wed 09 Sep 2026 19:31:17 +0000
ROA not after: Wed 08 Sep 2027 19:36:17 +0000
asID: 13335
IP address blocks: 194.110.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c4:d3:41:f1:42:ac:42:17:47:a4:cc:f7:59:8f:bb:3a:e6:97:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 9 19:31:17 2026 GMT
Not After : Sep 8 19:36:17 2027 GMT
Subject: CN=F051EA58CB57145078E7629FDCF6CDD07F91F15B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:47:35:46:3f:24:20:da:ba:28:90:91:40:
d0:a1:41:f7:37:5b:fe:44:c7:0a:9c:02:18:3a:09:
9f:47:e4:ac:e0:56:01:15:d1:75:69:67:0f:b4:a8:
ab:1a:a1:f8:fe:e4:9e:af:56:a1:67:da:c2:4b:a6:
7c:b5:6e:f7:89:35:02:03:56:f3:ec:64:d1:24:63:
cf:63:65:90:d0:64:b9:ed:6b:19:f0:4f:84:d6:29:
d7:5e:ce:0b:cd:5d:48:ef:a9:04:af:86:8e:3f:bc:
b0:5f:04:31:c6:d2:c9:ef:97:a1:93:83:63:22:bd:
45:eb:b2:b6:6c:99:25:c5:3e:e8:1a:de:9c:9c:0f:
e6:31:52:91:75:2b:83:ba:1e:5f:22:e6:65:f1:b4:
cc:8f:99:d1:c0:5d:cb:6d:a1:ea:d1:3b:ac:78:ea:
05:1a:2a:6e:de:45:72:e4:d8:94:6b:8a:e8:72:bc:
9c:51:1e:67:3a:e7:63:21:fb:10:5a:a5:64:0f:fa:
8b:ab:53:ea:96:7d:56:af:5e:9a:20:9e:d0:a6:54:
4f:5f:d3:3c:ec:11:03:18:ef:86:a0:ca:d8:d0:b9:
95:cb:64:2b:e2:18:de:55:05:ce:d9:ec:1d:6b:be:
3d:dd:ed:85:c9:e8:e8:4a:c7:a7:ca:7d:cc:78:d2:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:51:EA:58:CB:57:14:50:78:E7:62:9F:DC:F6:CD:D0:7F:91:F1:5B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e39332e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.93.0/24
Signature Algorithm: sha256WithRSAEncryption
16:bc:90:cc:fb:cf:90:b6:bb:96:88:83:7d:4b:86:f2:95:fa:
fc:af:3b:d6:6f:e5:88:ee:e7:f7:aa:d4:a8:34:f5:0f:86:62:
cb:86:d8:f4:b7:a3:c8:15:67:38:bf:a4:02:03:44:bf:f4:4a:
10:25:e4:da:81:1a:9e:5d:01:4b:db:77:a4:74:e3:69:e5:41:
1a:b0:33:a8:4c:8e:26:ab:ec:78:26:1c:88:85:ae:aa:f8:9e:
8b:0f:34:34:df:24:cf:29:be:db:94:9a:f3:21:37:e1:f5:e0:
3e:25:57:af:de:06:78:8a:be:b9:86:90:87:2e:0c:eb:7d:fb:
f2:8f:b6:e2:14:a3:31:37:19:b7:d9:20:b7:16:cd:b7:ab:2b:
c6:d5:41:eb:57:52:c9:e3:ef:ea:f2:b3:77:c7:2a:d7:ab:bc:
73:d1:47:f7:14:e9:cb:73:cd:48:64:91:dd:85:10:d5:f2:b3:
c0:73:bb:30:be:f9:10:39:03:ca:ae:28:60:e9:72:56:6e:72:
6a:33:8f:9e:80:90:ca:19:c2:c1:c6:7b:4c:63:e0:9e:2e:fd:
f8:cb:7e:c7:00:89:e7:f8:c2:76:be:36:a3:d7:98:93:e8:88:
fe:63:16:28:a3:b8:c0:4b:b8:31:84:f2:0f:1b:1f:e4:80:6b:
48:94:43:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:29 2026 by rpki-client