Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3231312e302f32342d3234203d3e20313336373837.roa
File: 3139342e32362e3231312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: q2O6lLbgr0CS+OqW1FcrNWqw+fFgIpWSGELANCop/Fs=
Subject key identifier: 6A:13:8B:3C:16:FA:4F:A0:4F:D2:74:2B:68:B0:ED:2E:A5:80:5C:75
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0957C2725BC5005A5A4EFD9B785BF55C0E2FE1CD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3231312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 24 Oct 2025 07:47:59 +0000
ROA not before: Fri 24 Oct 2025 07:42:59 +0000
ROA not after: Fri 23 Oct 2026 07:47:59 +0000
asID: 136787
IP address blocks: 194.26.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:57:c2:72:5b:c5:00:5a:5a:4e:fd:9b:78:5b:f5:5c:0e:2f:e1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 24 07:42:59 2025 GMT
Not After : Oct 23 07:47:59 2026 GMT
Subject: CN=6A138B3C16FA4FA04FD2742B68B0ED2EA5805C75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:c4:73:08:ce:dc:6b:62:22:51:c9:bc:2f:
72:0a:68:40:33:57:84:91:3d:95:ec:2a:14:2b:5e:
cb:13:af:ac:d5:15:d8:d7:fa:61:1e:34:06:cd:10:
68:d0:33:35:0a:43:69:9b:27:99:b9:23:e3:c8:cf:
12:b3:cd:31:85:a2:4b:1a:bf:92:f1:b4:42:f2:7f:
98:43:b8:aa:f1:6c:dd:f5:19:54:99:e1:c0:19:64:
d9:f1:82:5a:8c:df:1d:21:57:13:10:c6:04:cc:b8:
5d:de:77:21:a4:fe:06:6e:80:59:25:a7:a4:06:7f:
91:76:90:9e:c7:51:b0:11:ca:4b:c3:ef:dc:c3:ec:
81:01:5d:6f:b0:fb:25:75:6f:ec:f1:b3:ad:4e:17:
21:4d:59:ca:79:9c:91:fa:ca:18:1d:26:74:85:df:
14:ab:8c:a8:54:30:6e:f6:2a:40:39:ac:47:6c:dc:
33:6f:ec:09:8d:3b:e9:bc:4b:c1:45:7f:67:b7:b4:
76:ef:b4:45:c4:b2:e7:05:3e:6f:09:1b:41:c9:58:
9f:08:b7:3b:89:d3:df:d5:40:56:1d:18:88:a4:e4:
a9:b3:5e:86:8d:87:ff:b2:4b:e8:e4:e0:75:c5:10:
42:0a:d0:9d:57:4d:76:88:91:b7:58:2e:fe:57:35:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:13:8B:3C:16:FA:4F:A0:4F:D2:74:2B:68:B0:ED:2E:A5:80:5C:75
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e32362e3231312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.211.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d9:1f:33:e1:9f:36:0a:26:f6:4b:22:27:19:34:b9:81:a6:
87:3b:fd:99:8b:c5:1f:c4:53:cc:1e:0c:4d:ce:b1:25:fb:5a:
66:a6:05:d0:db:50:52:c6:65:4f:1e:16:0b:34:fc:1a:c5:9d:
a0:f9:e0:7f:8a:df:11:9e:dd:ed:59:3b:fd:f9:7a:5d:8e:7d:
01:54:d3:a7:b6:bb:f9:6b:49:37:3f:c0:0b:0e:63:a1:0c:47:
57:65:2b:22:10:12:f1:57:e3:99:b8:19:ac:0e:c4:8b:9d:fb:
02:9b:c5:bb:ee:06:36:64:e4:6d:f2:44:74:d6:da:17:fe:38:
56:3a:95:ff:49:fa:b2:c9:1f:3a:5b:b1:57:98:af:35:ce:ab:
4e:25:6f:b8:13:f6:3b:d0:85:87:5f:e1:05:28:1e:db:93:ad:
b1:62:9a:29:8d:66:d1:46:44:4f:19:02:aa:9e:18:69:29:f8:
57:c6:f4:6a:00:e5:65:cc:b1:b4:59:f4:86:72:c9:49:44:9c:
fb:d2:05:40:a7:62:08:2d:ff:6f:60:68:e7:97:0f:d4:64:36:
00:2f:88:c2:21:01:7f:17:1a:a3:bc:1c:43:21:e2:96:b5:81:
53:ed:25:cd:b7:1c:21:23:58:e9:11:f0:c3:17:2e:7d:2b:70:
a3:ad:f2:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:45:26 2025 by rpki-client