Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e39342e302f32342d3234203d3e203133333335.roa
File: 3139342e3131302e39342e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: EFCoFuO1V6kCSxcrhFe2n4I4+7cax4TBRwngEX1543U=
Subject key identifier: 2D:61:22:7B:73:88:89:99:7C:E3:A9:18:DF:D3:64:3E:DE:F4:59:99
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0D88DC68D447A1D05D882DECAC56A86D9F966858
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e39342e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:18 +0000
ROA not before: Wed 09 Sep 2026 19:31:18 +0000
ROA not after: Wed 08 Sep 2027 19:36:18 +0000
asID: 13335
IP address blocks: 194.110.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:88:dc:68:d4:47:a1:d0:5d:88:2d:ec:ac:56:a8:6d:9f:96:68:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 9 19:31:18 2026 GMT
Not After : Sep 8 19:36:18 2027 GMT
Subject: CN=2D61227B738889997CE3A918DFD3643EDEF45999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:da:31:4e:ea:66:cd:16:3e:95:b5:b9:44:
e1:d7:36:ea:6b:9d:3a:ee:cc:ad:da:47:77:32:37:
08:f9:61:ef:46:bf:f6:69:5b:2b:79:00:85:04:a6:
b8:da:0a:d7:c6:f0:f0:a2:e3:84:1c:0a:c2:a7:e6:
68:cd:fd:17:25:a6:76:9f:d8:f7:35:8a:61:f0:36:
51:78:b8:7b:d9:49:6c:d4:95:b0:f8:56:df:0f:ae:
05:da:41:1b:9e:db:d0:e3:05:7d:af:cf:a4:b5:3b:
ce:7c:c6:d1:84:8d:23:fc:21:41:02:ef:49:80:ed:
91:a1:ec:37:78:a9:97:4f:36:22:40:1e:bc:4d:de:
03:1f:95:82:66:cb:e4:e9:21:7d:3e:fb:66:58:07:
04:b6:df:49:98:8d:d0:9c:14:3a:a1:fc:1b:06:02:
ae:75:2d:c1:a7:57:48:50:f5:e7:dc:73:8c:cb:7d:
ee:9d:60:cf:eb:56:0f:83:42:97:ae:cf:88:e1:9e:
c0:fc:91:d2:0f:75:6d:6d:3a:03:c1:69:c6:60:2e:
a1:1c:b9:ca:1f:b6:4a:97:e4:ab:35:f5:60:b5:e0:
10:b8:a2:2f:b5:03:49:b2:f8:ba:c7:0e:75:85:c6:
28:75:78:11:bb:33:40:8e:05:28:d5:02:44:68:9a:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:61:22:7B:73:88:89:99:7C:E3:A9:18:DF:D3:64:3E:DE:F4:59:99
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e39342e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.94.0/24
Signature Algorithm: sha256WithRSAEncryption
49:56:f5:ef:d5:81:89:6b:f1:88:4c:1c:ee:09:18:cb:58:46:
44:28:10:87:40:d5:36:77:cc:3c:cf:f3:a0:d6:a0:c9:e6:42:
68:84:ac:a3:e8:9f:50:db:a1:2c:d0:ee:00:28:e5:8e:7f:c2:
8e:96:d2:46:8a:91:5b:22:d6:c5:6b:d9:5f:9e:1f:df:07:7f:
7f:20:ba:70:fe:a9:59:88:be:b6:48:bb:d9:b5:82:b2:58:ee:
e0:79:65:33:5c:a5:e8:55:f4:d3:a8:91:dc:ed:53:85:0f:f9:
d2:b5:19:3e:43:67:e0:f0:b8:71:bd:c5:3a:4f:a6:66:e1:5a:
f2:30:9a:e6:46:a8:bd:ea:f1:46:fd:fd:7b:02:0e:df:ec:21:
9c:50:b9:3a:02:ef:0f:ec:5f:e5:29:50:40:61:94:06:77:6d:
b1:e5:91:33:5e:59:c1:01:36:ad:13:d2:e0:4c:6a:33:e8:81:
3f:fe:fc:94:ce:b5:ac:4f:f2:ee:3f:79:4c:e7:23:b1:e2:a8:
0c:31:ba:c9:78:72:38:aa:ba:b8:44:93:da:92:9a:22:2c:2d:
7b:44:6e:a6:38:41:93:30:33:10:3a:7b:0f:75:22:62:65:ac:
46:36:55:f5:06:a9:db:3e:62:3d:4a:ce:5f:85:81:a6:6f:f2:
57:8a:fb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:10:36 2026 by rpki-client