Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3139352e302f32342d3234203d3e203133333335.roa
File: 3139342e33342e3139352e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: CHHr7VwktdnxBub7JVgMcQ4fz3t5DiSLm76GJLRQ1VE=
Subject key identifier: FA:F6:9E:4D:4E:27:59:61:20:F4:77:09:1A:9B:CD:1F:A0:38:29:81
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4AE6BDDC09BDBD47123A7398B14A8D94B948FE58
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3139352e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:24 +0000
ROA not before: Wed 09 Sep 2026 19:31:24 +0000
ROA not after: Wed 08 Sep 2027 19:36:24 +0000
asID: 13335
IP address blocks: 194.34.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e6:bd:dc:09:bd:bd:47:12:3a:73:98:b1:4a:8d:94:b9:48:fe:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 9 19:31:24 2026 GMT
Not After : Sep 8 19:36:24 2027 GMT
Subject: CN=FAF69E4D4E27596120F477091A9BCD1FA0382981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:82:c6:94:dd:6b:76:d4:51:1c:df:c1:f8:
3d:ba:da:6d:e5:05:b2:dd:57:ec:c9:29:46:8f:a5:
ef:81:eb:1f:c3:40:23:f9:f8:1e:ac:26:73:c0:3f:
f2:a9:64:f3:8c:46:6d:29:77:ea:4f:74:c8:cb:a0:
5f:ae:96:0e:fc:60:57:74:e1:0b:4c:9d:83:e3:89:
ef:58:89:d8:15:47:e9:90:99:11:22:67:b2:10:cf:
aa:cf:73:8f:2e:db:bd:d4:a1:84:89:9e:ad:dc:c1:
55:13:06:ed:69:43:9b:95:70:cf:ca:b6:51:29:cc:
fb:88:ec:a4:25:43:1d:9d:2f:ed:b3:a8:e9:28:11:
a4:06:35:61:de:ea:8f:2f:e0:63:91:64:6d:6a:bc:
50:ef:b4:2d:90:30:59:f4:b1:06:95:86:c6:a2:71:
2d:f8:e5:be:32:91:47:39:45:af:26:e2:60:3d:7e:
66:99:fe:4e:0a:12:3a:0b:64:6a:a6:ee:e1:13:55:
30:c9:bc:b1:92:36:d5:dd:8d:2c:c0:37:c0:e2:3a:
ff:09:37:16:ac:28:ce:84:31:84:af:7a:c1:f9:ac:
b5:f5:b6:c5:f3:01:d0:48:02:f4:50:a9:d7:62:3b:
0a:12:af:0e:70:93:a4:28:27:af:b2:f1:2b:b5:07:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F6:9E:4D:4E:27:59:61:20:F4:77:09:1A:9B:CD:1F:A0:38:29:81
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3139352e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.195.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:18:f7:e1:43:dd:33:ad:1b:32:be:15:73:e1:d3:a2:36:bd:
11:64:75:87:9f:56:fe:b2:e0:43:ae:3d:6e:98:20:28:03:b7:
5e:6a:95:76:d1:2c:bd:89:15:4f:50:95:e6:a8:dc:2b:85:c5:
68:62:45:11:5c:82:1c:16:de:95:50:d8:ab:21:88:78:b0:58:
d0:c7:3e:b4:90:3b:6e:59:c2:91:84:2d:40:66:27:d5:e1:f9:
9c:ee:fc:bb:3a:4c:58:40:53:f7:37:28:d3:3a:a1:f9:b6:07:
fc:6d:7a:69:1d:2c:b3:03:50:1b:e2:76:a2:68:fe:49:35:c6:
bd:cf:de:79:78:11:3d:97:91:22:3c:8d:1f:90:fc:f0:f9:c2:
3d:62:1f:68:5e:ba:0c:69:d0:95:9f:65:cf:71:1e:3b:10:e9:
33:69:24:57:0e:5c:63:00:a8:e4:56:5d:f0:9d:ee:76:21:6e:
36:8c:0b:48:c0:ea:2a:de:24:2f:b9:74:e6:f7:c1:16:87:9d:
4f:fb:9c:0d:18:74:c6:13:cc:c1:33:06:66:5b:9d:57:d8:4a:
4e:b7:12:c6:f1:2d:47:ad:8a:cd:42:db:de:d9:f5:d8:80:3c:
e6:a1:cb:a5:56:f0:83:70:7b:43:15:17:13:49:15:5a:d5:51:
2d:8b:bf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:21:47 2026 by rpki-client