Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3139342e302f32342d3234203d3e203133333335.roa
File: 3139342e33342e3139342e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: 9Qap8pDX4s6+MUC0qMYP7liNtxlhGZPM5kpF9viWHVQ=
Subject key identifier: 66:46:F2:07:5D:FD:6A:27:70:7B:2A:22:4B:5F:E6:7E:38:63:4C:41
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 323AC80FB82BFCE5E4E3B4B4662767D887180348
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3139342e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:23 +0000
ROA not before: Wed 09 Sep 2026 19:31:23 +0000
ROA not after: Wed 08 Sep 2027 19:36:23 +0000
asID: 13335
IP address blocks: 194.34.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3a:c8:0f:b8:2b:fc:e5:e4:e3:b4:b4:66:27:67:d8:87:18:03:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 9 19:31:23 2026 GMT
Not After : Sep 8 19:36:23 2027 GMT
Subject: CN=6646F2075DFD6A27707B2A224B5FE67E38634C41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:90:d4:28:e5:55:db:cc:85:f5:6c:50:46:3b:
51:15:5c:6b:7d:20:2a:01:fe:80:67:61:78:3c:0e:
69:5b:ce:1f:30:83:31:61:24:68:cc:f0:08:74:16:
34:3d:5e:b4:23:58:a6:31:c1:59:ea:52:3a:2c:85:
f0:70:05:da:04:84:2d:b3:66:e3:f7:3a:22:f4:c3:
bf:54:b0:ff:0f:e4:dc:ab:61:f4:d3:c1:f7:d0:d4:
4d:68:8a:0e:ae:51:0d:6d:f3:e6:3c:d2:29:11:4c:
fd:68:30:2e:5e:13:ac:58:03:b5:6d:8a:dc:18:05:
f9:db:86:49:ed:c7:6c:c2:34:ad:db:85:a8:45:66:
19:36:f2:5c:bf:1e:a7:10:4b:10:de:9e:52:14:b5:
97:fa:7a:36:5d:dd:0b:2c:23:6b:5b:2e:ba:68:9b:
c6:ed:94:ae:cb:4c:f5:2a:fe:f2:62:ce:a9:f6:d6:
a8:6e:d1:01:c2:57:03:0d:de:b1:96:8f:d7:23:3c:
48:a8:d3:c2:7f:f9:44:2a:19:c2:53:af:70:c4:06:
52:5f:6a:f8:90:f6:c8:84:4c:f6:5c:87:43:6a:9b:
9b:90:3d:f1:7a:23:3e:dc:3e:d7:9c:f7:47:d7:19:
1d:d7:8d:1c:41:53:79:fd:ba:9a:6d:c8:ff:9e:99:
28:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:46:F2:07:5D:FD:6A:27:70:7B:2A:22:4B:5F:E6:7E:38:63:4C:41
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3139342e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.194.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:88:73:02:11:84:52:1a:24:26:6f:30:94:9d:4d:ee:67:24:
ac:b9:e0:e2:94:56:a6:45:86:b8:26:93:71:f4:3c:98:35:87:
aa:86:be:89:d0:bb:37:05:8e:3b:2e:46:4c:7b:79:5e:30:03:
00:dd:bd:e7:d8:9d:d9:c5:8a:ef:eb:81:09:12:26:5c:33:0c:
18:a9:67:20:aa:b8:08:3d:a4:fc:d3:fb:92:80:f8:bc:75:f3:
54:79:00:2b:c5:90:08:58:10:f3:96:b6:95:82:d2:57:c1:e7:
1c:ee:88:46:59:f5:1a:a1:8a:81:15:24:70:39:e8:f5:a5:c5:
dc:d1:6f:3c:d0:85:98:1f:03:50:bf:69:41:d6:62:a7:83:a7:
8a:ac:00:9f:19:66:2a:51:f7:48:45:0e:14:88:b2:ef:32:ba:
77:73:85:45:2a:cd:a5:eb:f9:b5:7f:aa:0e:2e:48:88:b5:04:
0e:a1:0c:8a:af:a0:aa:b1:01:cd:c2:a2:6f:91:f8:d9:b0:9a:
fd:75:e7:3a:eb:e1:27:2f:0e:08:b5:8b:f3:c3:c6:7d:12:80:
af:44:bb:b7:53:5f:8e:71:49:1c:1f:d4:27:b9:ef:6d:15:ff:
43:ce:f0:39:33:94:c2:88:d8:4e:4d:48:08:a0:3f:ba:1f:79:
86:4a:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:23:23 2026 by rpki-client