Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136362e302f32332d3234203d3e203437353833.roa
File: 3139342e35392e3136362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: J0adaQU4Mez9cwmf+ayt98ERWVfGoLqYYnJv/dlWyRs=
Subject key identifier: D9:EC:F6:D7:45:E9:D2:87:F6:D5:73:C2:3C:08:28:D9:12:BE:38:2D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 70860FE4176E8739C90404F0489CF6F3E40E5DFE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136362e302f32332d3234203d3e203437353833.roa
Signing time: Fri 30 Oct 2026 12:31:44 +0000
ROA not before: Fri 30 Oct 2026 12:26:44 +0000
ROA not after: Fri 29 Oct 2027 12:31:44 +0000
asID: 47583
IP address blocks: 194.59.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 20:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:86:0f:e4:17:6e:87:39:c9:04:04:f0:48:9c:f6:f3:e4:0e:5d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:44 2026 GMT
Not After : Oct 29 12:31:44 2027 GMT
Subject: CN=D9ECF6D745E9D287F6D573C23C0828D912BE382D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:e1:a8:64:a3:6e:48:76:ae:97:7e:d2:e0:
d0:a5:30:fe:e5:4e:6a:a6:75:bd:4b:8e:c1:0c:b1:
e5:1b:13:35:45:e7:8f:89:c8:20:8b:66:ad:80:a5:
18:35:11:80:d8:c7:54:fb:f5:f9:50:31:86:49:63:
48:a6:57:cb:4e:7e:b6:a0:e0:10:bd:3a:58:76:1b:
ef:d7:61:f5:cf:13:11:71:c8:65:ca:94:1b:78:2a:
65:b0:af:50:40:2f:a0:2b:cd:04:31:f3:80:74:c5:
ad:c7:01:f1:c7:e3:76:87:0d:6a:06:c1:28:c1:92:
45:74:6e:98:c1:c2:49:e1:38:97:5a:fd:fb:da:da:
c6:f5:bc:02:8a:5b:b3:fb:27:e4:41:f4:c6:23:ca:
ef:39:bb:ec:1d:be:6a:b1:b1:81:43:33:ec:88:8e:
63:d3:d0:3d:75:b5:36:d9:01:28:be:6d:45:3e:1d:
5c:dc:6d:b6:e2:27:a5:2f:4d:9c:cd:88:01:6c:e7:
89:b6:61:73:e1:39:08:ff:ae:da:60:96:11:74:34:
ef:42:dc:31:f5:c9:04:ec:36:d9:67:f5:7f:80:06:
97:c3:97:dc:e1:ce:3e:10:6d:0a:ed:ae:8b:9d:c4:
c9:0d:80:da:7d:6f:fa:7a:c5:ac:50:d1:9b:fc:33:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EC:F6:D7:45:E9:D2:87:F6:D5:73:C2:3C:08:28:D9:12:BE:38:2D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.166.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:05:d8:3a:37:08:3f:6d:46:5f:74:74:76:80:dd:e8:39:cc:
f4:d2:89:f5:a5:1f:cb:b0:15:f6:9d:82:89:cc:d8:78:eb:5e:
29:f5:48:5a:02:bc:14:0b:c9:4c:e2:c0:8b:61:ec:d5:27:83:
e7:9f:91:cf:99:e5:3f:c5:c3:ee:de:8d:c3:b2:3f:75:3e:48:
4b:cf:aa:a4:bf:50:c7:8b:a6:e3:bd:77:c9:8d:b9:8a:5a:a6:
9a:12:03:ac:00:5d:48:eb:fc:ca:31:f1:01:aa:df:53:9d:41:
db:97:65:3d:b2:d6:fa:10:d1:ee:30:9e:5e:d6:f0:5a:65:1e:
76:52:6c:58:dd:3e:26:f8:85:1c:b0:6b:21:90:8e:e0:fc:21:
44:f7:18:7c:99:13:03:44:1d:11:ab:ae:2e:ba:52:a9:ab:de:
e9:82:ca:91:97:7d:bd:e2:33:4e:d6:ea:39:37:74:6d:f4:22:
0b:b0:35:83:ab:aa:3c:c0:6f:95:81:8e:db:c5:b7:7e:6b:39:
39:19:7d:44:67:a5:f3:0c:8b:6a:ec:cc:15:5a:66:06:29:79:
8f:b2:10:34:04:16:0a:9d:29:a0:30:8f:21:db:8b:e5:d9:72:
0a:a9:59:6b:d9:b3:6d:1f:c0:b4:97:b5:f1:ed:44:f2:34:7c:
7d:38:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:38:07 2026 by rpki-client