Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e39352e302f32342d3234203d3e203133333335.roa
File: 3139342e3131302e39352e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: TQ3pgzqi3O6JFBX0q2TcW/bL3vTQ59niRwmTNy2HkM8=
Subject key identifier: 43:0C:A7:D0:79:F5:13:67:1A:7D:6E:6A:59:AF:DD:79:E3:42:C6:B3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4FD300B62A788EB33DDB32E1C72A17939591BEB1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e39352e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:20 +0000
ROA not before: Wed 09 Sep 2026 19:31:20 +0000
ROA not after: Wed 08 Sep 2027 19:36:20 +0000
asID: 13335
IP address blocks: 194.110.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d3:00:b6:2a:78:8e:b3:3d:db:32:e1:c7:2a:17:93:95:91:be:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 9 19:31:20 2026 GMT
Not After : Sep 8 19:36:20 2027 GMT
Subject: CN=430CA7D079F513671A7D6E6A59AFDD79E342C6B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:54:3a:4d:91:fa:bd:70:15:25:0b:ee:46:
a0:a1:39:71:3a:89:15:22:6b:c9:9f:73:2d:ad:59:
87:1a:d1:f1:e7:89:a0:87:3b:30:84:3f:68:c2:0b:
52:ab:f5:aa:c6:74:1e:22:f9:5e:a6:8f:ba:ec:94:
a6:61:0b:02:77:98:e3:a2:ff:b6:99:0c:12:92:fa:
e2:67:1e:8a:14:2e:c7:69:ef:30:f1:a6:6c:e1:b1:
c5:64:54:2c:a5:82:09:c1:75:b3:7b:ba:4a:51:63:
0a:ce:01:9b:af:a9:14:5c:14:c4:bf:0c:f5:cf:c3:
45:75:07:34:a4:b5:77:29:3b:67:2e:02:2a:3d:c0:
0e:42:b3:37:9b:67:29:bb:0c:3a:bf:79:30:df:14:
7d:b9:12:69:a7:78:53:38:73:23:4e:fa:25:fb:7a:
c2:52:de:65:8c:c7:c0:ca:8f:a0:9a:fb:86:ec:ed:
be:85:45:65:30:6d:bc:31:81:1c:6d:ec:63:69:ec:
3c:87:06:85:5f:dd:ac:d6:f9:3f:8d:38:f5:aa:c0:
bf:0d:8d:c6:48:4d:b3:33:ee:ce:af:f8:24:f9:13:
9b:77:30:c5:0e:11:20:3b:c9:5f:62:92:15:53:7e:
95:d3:ac:c9:c5:fa:4e:3d:d4:c8:a9:47:26:37:ce:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:A7:D0:79:F5:13:67:1A:7D:6E:6A:59:AF:DD:79:E3:42:C6:B3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e39352e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.95.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4f:2a:30:f2:da:f3:b5:4e:ce:41:4c:65:df:1b:3d:05:6a:
69:05:78:01:cf:31:a7:8d:0e:b7:1a:18:ff:50:00:98:20:cd:
20:60:59:ca:1b:4f:77:06:3e:ca:ac:57:15:22:e2:81:09:cd:
e2:ca:a0:15:fc:ad:31:ae:49:75:02:36:b5:da:2b:d6:f2:e9:
d6:99:59:98:7c:50:01:b9:f0:a9:5c:54:fa:6c:43:9f:c4:f6:
22:2d:2a:78:68:af:2b:8e:f6:bf:c7:e8:8f:4f:31:c7:37:97:
e8:2e:fe:18:84:35:92:b4:9c:07:57:1b:a2:97:18:2e:c8:ea:
0d:04:1c:ca:5a:f1:2c:1d:49:8b:98:1d:e9:6a:ed:8c:30:dc:
0c:a4:34:ba:47:35:01:80:b7:00:1b:18:35:e7:88:33:19:c2:
81:20:e5:68:a5:73:0f:3f:b0:1b:93:11:8f:57:2c:c5:a3:48:
fe:60:94:06:f6:be:5e:6c:15:a7:c1:2d:84:0c:20:5d:78:ae:
80:ef:15:0a:b4:63:dc:34:67:c7:d5:6e:a3:35:f7:bd:38:26:
e0:bd:04:63:4b:c3:d1:d3:ee:8e:61:de:19:56:b2:5f:d4:f8:
f6:a0:da:94:c5:a9:63:14:46:e4:39:56:b9:67:f6:5b:00:07:
17:48:57:99
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUT9MAtip4jrM92zLhxyoXk5WRvrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjA5MDkxOTMxMjBaFw0yNzA5MDgxOTM2MjBaMDMxMTAvBgNV
BAMTKDQzMENBN0QwNzlGNTEzNjcxQTdENkU2QTU5QUZERDc5RTM0MkM2QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf8FQ6TZH6vXAVJQvuRqChOXE6
iRUia8mfcy2tWYca0fHniaCHOzCEP2jCC1Kr9arGdB4i+V6mj7rslKZhCwJ3mOOi
/7aZDBKS+uJnHooULsdp7zDxpmzhscVkVCylggnBdbN7ukpRYwrOAZuvqRRcFMS/
DPXPw0V1BzSktXcpO2cuAio9wA5CszebZym7DDq/eTDfFH25EmmneFM4cyNO+iX7
esJS3mWMx8DKj6Ca+4bs7b6FRWUwbbwxgRxt7GNp7DyHBoVf3azW+T+NOPWqwL8N
jcZITbMz7s6v+CT5E5t3MMUOESA7yV9ikhVTfpXTrMnF+k491MipRyY3zvNHAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUQwyn0Hn1E2cafW5qWa/deeNCxrMwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzEz
MDJlMzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMzMzMzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADCbl8wDQYJKoZIhvcNAQELBQADggEBAERPKjDy2vO1Ts5BTGXfGz0FamkF
eAHPMaeNDrcaGP9QAJggzSBgWcobT3cGPsqsVxUi4oEJzeLKoBX8rTGuSXUCNrXa
K9by6daZWZh8UAG58KlcVPpsQ5/E9iItKnhoryuO9r/H6I9PMcc3l+gu/hiENZK0
nAdXG6KXGC7I6g0EHMpa8SwdSYuYHelq7Yww3AykNLpHNQGAtwAbGDXniDMZwoEg
5Wilcw8/sBuTEY9XLMWjSP5glAb2vl5sFafBLYQMIF14roDvFQq0Y9w0Z8fVbqM1
9704JuC9BGNLw9HT7o5h3hlWsl/U+Pag2pTFqWMURuQ5Vrln9lsABxdIV5k=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:48:18 2026 by rpki-client