Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3231312e302f32342d3234203d3e20313336373837.roa
File: 3139342e32362e3231312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: BLfd8Q9IOBGFsWVDV61kN49GF8OLgCTBWoReCCQpS8Y=
Subject key identifier: BE:12:95:08:7C:53:FC:FC:AB:DE:94:1D:25:54:87:79:BE:6D:7E:E0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4254B951EB20A0750076365B8309E2F65959D286
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3231312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 25 Sep 2026 08:29:22 +0000
ROA not before: Fri 25 Sep 2026 08:24:22 +0000
ROA not after: Fri 24 Sep 2027 08:29:22 +0000
asID: 136787
IP address blocks: 194.26.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:54:b9:51:eb:20:a0:75:00:76:36:5b:83:09:e2:f6:59:59:d2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 25 08:24:22 2026 GMT
Not After : Sep 24 08:29:22 2027 GMT
Subject: CN=BE1295087C53FCFCABDE941D25548779BE6D7EE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:4d:dd:72:91:e0:4c:2a:cc:22:c4:c4:22:
22:2f:6d:80:78:0b:a2:3e:5d:3a:23:90:7f:6b:b9:
1d:9a:79:8c:b1:06:a0:4d:2f:4f:40:18:75:94:d0:
37:6a:a3:80:17:44:dd:f1:0a:8d:01:0e:6e:3f:a7:
96:ad:d5:06:6b:3f:d5:10:f8:f2:ce:e0:92:17:0f:
eb:36:9a:86:c5:40:6e:45:23:fa:b1:2d:16:93:65:
75:62:45:e8:57:88:da:6e:35:ec:17:dc:d9:63:bb:
b8:0f:6d:2c:04:e1:3b:00:1f:80:6a:ff:f7:9e:a2:
34:f9:90:84:a6:11:88:36:4c:1f:ef:c3:cc:47:c7:
ef:96:ae:a3:ef:70:c5:bb:be:53:05:87:c0:df:e0:
5c:f0:76:54:f0:ff:51:9d:31:c5:a7:ba:a3:95:30:
de:c2:a3:a0:12:0a:9d:1f:d1:97:41:71:76:a9:45:
1e:3f:73:7c:2d:b7:a7:9e:c5:a9:6e:fe:31:38:f0:
98:c3:03:e3:c5:24:0b:55:95:0c:a4:4e:5a:e8:d5:
ba:8c:a9:27:36:e1:06:d6:7f:f6:f1:83:21:0c:9a:
84:59:0e:b9:be:d4:54:c4:1e:0a:c9:64:9d:aa:ba:
44:f7:3c:d1:39:db:e7:25:79:b2:03:67:6a:73:b7:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:12:95:08:7C:53:FC:FC:AB:DE:94:1D:25:54:87:79:BE:6D:7E:E0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3231312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.211.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f0:b0:88:8a:b9:95:2a:39:ab:2f:c1:b8:df:2b:9a:fe:2b:
a0:be:e9:71:ea:8a:29:c3:20:61:04:43:c3:31:2e:8a:c1:47:
f4:07:22:c8:e6:25:f0:f0:19:22:6a:d4:e3:4c:34:a4:d1:38:
6d:24:d7:27:33:e0:d0:2a:67:23:90:d6:96:72:80:43:68:d1:
19:42:09:e3:6a:36:e6:58:ef:5e:2d:3f:25:cb:3b:25:3e:3b:
58:f0:95:a0:78:87:14:88:13:1d:8a:33:81:06:dd:0f:65:fb:
a6:3f:69:80:db:56:3f:c5:92:93:d6:29:e9:8c:5d:89:fa:6b:
a3:a2:58:bf:eb:05:5a:04:52:03:83:33:46:8d:90:a8:f3:e2:
03:0b:f7:90:4c:07:8a:33:cd:4f:cf:cf:0f:82:34:74:ef:aa:
a9:1d:84:5a:59:af:22:dc:91:f5:eb:2a:b1:f4:d7:cb:41:a6:
77:1d:78:2e:a1:52:73:70:61:67:7a:cb:2d:e8:f3:30:b7:8d:
ca:54:87:75:1c:9b:51:70:6e:a1:a3:0e:0c:5a:98:95:49:e0:
f0:37:2a:68:01:c6:25:72:df:87:e0:13:55:59:d7:83:ea:b6:
37:cd:22:66:08:c9:62:09:de:9b:3a:5b:b1:36:52:a7:1e:4e:
66:18:9f:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:52:18 2026 by rpki-client