Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232372e302f32342d3234203d3e203136323736.roa
File: 3139342e3135362e3232372e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: oImpUtX1ceqQHznHK4sWnnvVTUsob5lfynvGBaAf6PM=
Subject key identifier: FF:0D:1A:C3:79:EB:24:AA:B2:32:55:92:58:D3:1B:DF:51:9E:5E:03
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 26C104ACE9E1042285794BC11567E43B454E1C92
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232372e302f32342d3234203d3e203136323736.roa
Signing time: Fri 23 May 2025 10:40:20 +0000
ROA not before: Fri 23 May 2025 10:35:20 +0000
ROA not after: Fri 22 May 2026 10:40:20 +0000
asID: 16276
IP address blocks: 194.156.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 20:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:c1:04:ac:e9:e1:04:22:85:79:4b:c1:15:67:e4:3b:45:4e:1c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 23 10:35:20 2025 GMT
Not After : May 22 10:40:20 2026 GMT
Subject: CN=FF0D1AC379EB24AAB232559258D31BDF519E5E03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:5e:26:a8:b7:b4:1f:91:fc:43:19:8c:95:
f3:01:61:d4:56:61:a3:32:93:6c:d1:48:3e:3e:ee:
7f:17:d4:c8:81:a0:0d:84:f1:0a:60:45:c8:a8:1f:
25:4b:8b:e6:ed:63:b4:2d:a7:9d:1e:ee:cb:ea:c8:
a8:bd:1d:ac:fc:ca:bb:a7:a5:de:cd:2e:62:28:ef:
02:de:53:58:fd:07:25:95:35:a9:b0:df:cc:68:23:
24:84:c5:b5:3b:33:61:2c:fb:88:5b:4d:ca:20:9e:
35:83:f2:a6:94:77:f2:31:30:86:37:3a:8e:31:5d:
dc:59:41:b2:0f:c6:20:ac:77:2a:61:43:4a:29:0e:
2d:68:43:fe:a0:ca:3a:04:04:83:81:a0:e5:a6:c2:
e0:55:a6:4b:2b:e9:16:9e:a6:b4:f6:1d:72:56:e1:
1e:b7:5e:5a:3d:82:14:4d:6c:f8:b5:0c:6f:45:b4:
1d:4a:67:d3:3b:b8:f1:70:cf:ac:91:03:04:28:9a:
f4:53:f0:c9:22:3a:6f:7b:1f:d8:dc:bc:4e:ba:80:
c1:41:cd:0b:7e:6e:b3:75:59:f4:aa:be:85:9a:28:
5d:ec:72:58:ad:be:61:ae:98:92:46:67:71:c3:3a:
d3:0f:a7:be:73:83:75:70:95:e8:78:98:3c:f3:fc:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0D:1A:C3:79:EB:24:AA:B2:32:55:92:58:D3:1B:DF:51:9E:5E:03
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232372e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.227.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:3e:1d:95:20:5f:0b:96:9b:d2:1d:c1:a3:cd:b6:2e:61:a1:
fd:c8:94:3d:c8:2b:5c:d3:6d:f7:3c:94:0f:f0:7f:40:d0:25:
a7:c6:84:92:ad:90:02:b0:10:7c:d2:2d:77:0b:32:87:e1:50:
06:b0:b0:b8:96:0e:c7:56:e3:1e:c8:2b:08:84:1a:72:c7:08:
fb:c7:12:d4:ef:6c:0a:5f:07:53:ac:06:00:ce:b8:70:61:88:
ae:48:6f:2e:39:2b:53:45:ff:a0:f5:03:c2:94:a7:df:8e:07:
c8:8b:ec:fc:15:21:88:42:54:10:29:de:0d:cf:df:8e:41:b6:
56:10:37:6a:26:56:78:53:9b:c9:9e:b5:07:45:12:72:53:02:
7f:67:86:52:10:95:b9:78:2c:15:af:f3:c3:49:f7:8d:31:61:
72:47:93:67:9e:75:c3:9f:fa:12:26:ea:1e:47:ce:9d:43:6f:
83:43:93:69:91:64:02:30:23:71:70:95:a9:bd:1c:83:99:0c:
e4:9c:2c:6c:8b:6b:f9:89:78:02:2b:9c:66:fc:65:0b:ff:0d:
6f:7a:3e:37:08:36:6d:78:eb:7c:6a:d9:bb:53:b2:64:bf:dd:
b0:3d:bd:29:fc:16:3f:0c:36:fe:3b:93:d2:f3:32:fb:86:ba:
6f:65:49:4e
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUJsEErOnhBCKFeUvBFWfkO0VOHJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNTA1MjMxMDM1MjBaFw0yNjA1MjIxMDQwMjBaMDMxMTAvBgNV
BAMTKEZGMEQxQUMzNzlFQjI0QUFCMjMyNTU5MjU4RDMxQkRGNTE5RTVFMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9El4mqLe0H5H8QxmMlfMBYdRW
YaMyk2zRSD4+7n8X1MiBoA2E8QpgRcioHyVLi+btY7Qtp50e7svqyKi9Haz8yrun
pd7NLmIo7wLeU1j9ByWVNamw38xoIySExbU7M2Es+4hbTcognjWD8qaUd/IxMIY3
Oo4xXdxZQbIPxiCsdyphQ0opDi1oQ/6gyjoEBIOBoOWmwuBVpksr6RaeprT2HXJW
4R63Xlo9ghRNbPi1DG9FtB1KZ9M7uPFwz6yRAwQomvRT8MkiOm97H9jcvE66gMFB
zQt+brN1WfSqvoWaKF3sclitvmGumJJGZ3HDOtMPp75zg3Vwleh4mDzz/J0nAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQU/w0aw3nrJKqyMlWSWNMb31GeXgMwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzUz
NjJlMzIzMjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjMyMzczNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMKc4zANBgkqhkiG9w0BAQsFAAOCAQEAyj4dlSBfC5ab0h3Bo822LmGh
/ciUPcgrXNNt9zyUD/B/QNAlp8aEkq2QArAQfNItdwsyh+FQBrCwuJYOx1bjHsgr
CIQacscI+8cS1O9sCl8HU6wGAM64cGGIrkhvLjkrU0X/oPUDwpSn344HyIvs/BUh
iEJUECneDc/fjkG2VhA3aiZWeFObyZ61B0USclMCf2eGUhCVuXgsFa/zw0n3jTFh
ckeTZ551w5/6EibqHkfOnUNvg0OTaZFkAjAjcXCVqb0cg5kM5JwsbItr+Yl4Aiuc
ZvxlC/8Nb3o+Nwg2bXjrfGrZu1OyZL/dsD29KfwWPww2/juT0vMy+4a6b2VJTg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:00:33 2025 by rpki-client