Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3139322e302f32342d3234203d3e203133333335.roa
File: 3139342e33342e3139322e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: 8XsKe9XC2QZPeVoo3mZZ/OYInVRAoV0wuRub5pgGo+Q=
Subject key identifier: 94:6B:2E:35:53:F3:29:8F:C6:97:CE:10:76:D2:6A:5C:6E:63:1D:42
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 68312DA1BDDD9B187565FBEBA000D595D9145D22
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3139322e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:21 +0000
ROA not before: Wed 09 Sep 2026 19:31:21 +0000
ROA not after: Wed 08 Sep 2027 19:36:21 +0000
asID: 13335
IP address blocks: 194.34.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:31:2d:a1:bd:dd:9b:18:75:65:fb:eb:a0:00:d5:95:d9:14:5d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 9 19:31:21 2026 GMT
Not After : Sep 8 19:36:21 2027 GMT
Subject: CN=946B2E3553F3298FC697CE1076D26A5C6E631D42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:ea:c9:67:be:c4:4c:06:b0:e7:17:26:5a:
01:49:2d:3d:63:e0:c2:9d:5b:f0:63:cd:f3:db:16:
47:25:b0:5d:12:d7:95:b4:97:74:51:07:60:45:67:
16:21:dc:c2:19:64:cd:b0:04:38:d0:dc:a9:c6:1a:
67:d0:b7:4f:50:27:68:10:9e:ef:1f:78:ae:eb:36:
75:a6:50:56:8a:65:6e:30:4f:72:44:88:75:fb:96:
bf:0f:48:40:bd:3a:46:ce:ef:7d:ba:88:39:a5:3d:
19:69:ee:69:eb:aa:c2:0b:8b:21:fe:c9:01:c1:80:
89:ee:74:92:3a:52:9a:c4:24:c0:6e:c9:d2:2a:1e:
45:e4:36:41:b3:8e:a3:56:e8:a8:d7:44:c5:65:b0:
a6:03:ab:8c:64:d0:fd:cb:25:01:fe:3c:69:de:4a:
8b:2a:48:f3:86:0a:6c:33:5c:98:c7:7c:2d:84:fe:
5c:d0:4a:16:8f:ba:76:be:f7:22:db:1a:0b:83:88:
f5:78:f5:4e:fe:f5:bc:d3:f7:ad:49:62:6f:de:d0:
b4:31:d1:07:4b:2b:cb:c4:79:9f:ed:b6:5d:24:ea:
eb:3e:60:bc:f8:97:79:88:a0:06:53:5c:8e:f3:63:
57:0a:bc:c8:07:41:82:77:55:9c:5d:9e:24:65:cb:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6B:2E:35:53:F3:29:8F:C6:97:CE:10:76:D2:6A:5C:6E:63:1D:42
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3139322e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.192.0/24
Signature Algorithm: sha256WithRSAEncryption
94:db:29:96:99:aa:7d:18:d6:2d:e1:02:55:30:bd:08:03:4a:
0d:27:ef:af:68:16:f3:6b:c2:71:f5:2c:80:a6:40:30:7b:1a:
98:bf:1f:e7:f1:70:f1:24:63:10:13:0e:cc:7a:d4:2a:42:84:
5b:5a:be:d8:16:99:fb:9e:cb:b7:a3:bd:0f:e7:4f:0f:c3:c4:
44:21:06:f2:fe:83:00:10:bf:d4:c0:b9:6b:38:07:ce:01:25:
f5:68:93:90:93:3a:37:c1:b4:a0:f6:fd:1a:84:8d:83:f7:92:
e2:12:9f:4f:a4:f1:36:c5:70:e9:e9:25:93:48:54:ff:fd:80:
58:36:da:b0:eb:65:25:16:d7:ad:17:7b:8c:ea:bd:f2:0a:4c:
32:63:f9:9b:93:18:e5:71:68:a1:d1:1d:00:37:c7:6a:33:d1:
48:fd:59:94:82:d4:90:78:b0:8b:08:2b:3d:34:69:71:b5:2e:
55:3e:66:8a:e7:34:e3:e1:c3:d0:d4:6b:d9:e0:ed:cc:25:f4:
ca:6b:70:42:62:42:39:7a:12:cd:a4:3b:93:c5:3d:5f:92:72:
93:6a:7e:6c:3e:69:f1:45:b1:67:67:cb:75:94:05:10:ad:aa:
34:90:5e:f2:4b:a7:ec:78:c0:48:6f:7a:fb:67:62:ec:cb:b0:
52:f5:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:40 2026 by rpki-client