Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20323132323338.roa
File: 39312e3139362e36392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: NqN/zgaXaf5J2x81tjntGqO5F77BVrjZgjTRO0iBjVQ=
Subject key identifier: FF:B5:EA:88:80:BB:D0:1E:FE:0F:1B:BB:64:94:06:21:A9:AC:B8:DE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 70A0AAE33CB7BEA0BF6D056F426DD41DB0C86574
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 29 May 2026 12:24:41 +0000
ROA not before: Fri 29 May 2026 12:19:41 +0000
ROA not after: Fri 28 May 2027 12:24:41 +0000
asID: 212238
IP address blocks: 91.196.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a0:aa:e3:3c:b7:be:a0:bf:6d:05:6f:42:6d:d4:1d:b0:c8:65:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 29 12:19:41 2026 GMT
Not After : May 28 12:24:41 2027 GMT
Subject: CN=FFB5EA8880BBD01EFE0F1BBB64940621A9ACB8DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:91:4b:50:06:e0:d2:f6:69:63:55:12:45:d0:
41:01:5d:32:49:fd:ec:2b:17:e4:11:62:c7:f6:d5:
3d:16:22:af:c1:16:6e:a2:3b:a4:d9:ac:29:74:3a:
cf:55:67:24:bd:07:f5:0d:bb:f5:5a:83:13:fe:97:
75:5e:31:8c:67:d0:66:e7:b5:27:b1:e4:90:d9:bc:
35:ff:82:3e:82:f1:06:36:4a:05:bb:35:6a:8f:71:
9f:31:03:80:f1:5e:ba:eb:82:0b:86:f6:40:23:4f:
03:63:cb:fa:fb:7b:d2:98:59:8f:e9:61:1f:d9:7b:
15:78:13:7f:4c:fc:6d:cd:86:f3:d2:7b:d2:da:8d:
9c:ac:99:e1:c4:1e:bd:35:9e:b5:97:e0:a9:77:92:
8f:44:b8:fc:6e:99:55:5d:bc:26:c6:63:49:2b:22:
e1:6b:11:54:f4:cd:4d:88:60:61:d7:50:44:2d:be:
c3:76:40:6b:dc:53:ae:b5:b2:96:32:d2:73:84:0d:
51:11:4a:21:72:66:56:82:36:9b:31:67:f1:86:6c:
96:8b:16:34:ba:0a:4f:ba:ba:61:7d:0b:e4:d9:59:
d0:a4:02:b5:f2:1d:0a:1e:01:e8:25:91:7f:c4:02:
23:7f:c1:7e:f0:4f:25:05:14:af:92:3e:ee:1d:cb:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B5:EA:88:80:BB:D0:1E:FE:0F:1B:BB:64:94:06:21:A9:AC:B8:DE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.69.0/24
Signature Algorithm: sha256WithRSAEncryption
73:7c:c5:d0:0e:60:40:91:c1:90:1d:26:29:d2:a0:d5:d0:44:
d7:04:ab:7a:1c:31:b6:fc:bb:12:2d:d5:21:df:dc:ea:4a:bb:
7e:23:59:91:57:da:e1:f3:09:6c:86:76:59:bf:4a:21:18:2a:
9c:04:72:c6:74:37:40:a9:ab:2f:cc:df:0b:8f:40:84:78:3f:
c6:41:86:27:0e:88:63:e9:b3:07:5b:6a:a7:b5:ce:47:43:96:
d2:30:5d:87:fe:a9:c5:ea:f2:8f:b8:d7:f3:43:a8:da:ce:cf:
47:5c:00:b0:26:5a:56:25:da:f0:8d:68:f7:75:cb:cc:f6:ec:
fd:50:0a:31:76:7b:fb:c1:fb:4a:29:04:1e:f6:97:a8:c8:16:
f0:fd:42:89:5d:79:fc:4f:5d:07:53:5b:ee:6c:c1:98:60:32:
11:1d:cc:18:12:61:65:35:f2:9d:74:4f:7f:4f:28:95:d7:73:
c7:b7:3e:3f:2a:51:8b:1e:16:84:22:71:0e:9d:c8:72:93:75:
19:72:5c:36:84:a8:1e:e2:94:6c:13:70:ad:86:b7:5e:c3:6b:
5d:7e:a6:2c:f5:69:ca:26:dd:96:6e:f3:31:bc:c4:1b:49:26:
eb:c8:0d:2a:b5:d7:33:31:ce:a9:92:ce:68:cc:ec:c2:b1:81:
96:44:46:c8
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUcKCq4zy3vqC/bQVvQm3UHbDIZXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjA1MjkxMjE5NDFaFw0yNzA1MjgxMjI0NDFaMDMxMTAvBgNV
BAMTKEZGQjVFQTg4ODBCQkQwMUVGRTBGMUJCQjY0OTQwNjIxQTlBQ0I4REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDikUtQBuDS9mljVRJF0EEBXTJJ
/ewrF+QRYsf21T0WIq/BFm6iO6TZrCl0Os9VZyS9B/UNu/VagxP+l3VeMYxn0Gbn
tSex5JDZvDX/gj6C8QY2SgW7NWqPcZ8xA4DxXrrrgguG9kAjTwNjy/r7e9KYWY/p
YR/ZexV4E39M/G3NhvPSe9LajZysmeHEHr01nrWX4Kl3ko9EuPxumVVdvCbGY0kr
IuFrEVT0zU2IYGHXUEQtvsN2QGvcU661spYy0nOEDVERSiFyZlaCNpsxZ/GGbJaL
FjS6Ck+6umF9C+TZWdCkArXyHQoeAeglkX/EAiN/wX7wTyUFFK+SPu4dy/wPAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU/7XqiIC70B7+Dxu7ZJQGIamsuN4wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTM5MzYy
ZTM2MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABbxEUwDQYJKoZIhvcNAQELBQADggEBAHN8xdAOYECRwZAdJinSoNXQRNcE
q3ocMbb8uxIt1SHf3OpKu34jWZFX2uHzCWyGdlm/SiEYKpwEcsZ0N0Cpqy/M3wuP
QIR4P8ZBhicOiGPpswdbaqe1zkdDltIwXYf+qcXq8o+41/NDqNrOz0dcALAmWlYl
2vCNaPd1y8z27P1QCjF2e/vB+0opBB72l6jIFvD9QoldefxPXQdTW+5swZhgMhEd
zBgSYWU18p10T39PKJXXc8e3Pj8qUYseFoQicQ6dyHKTdRlyXDaEqB7ilGwTcK2G
t17Da11+piz1acom3ZZu8zG8xBtJJuvIDSq11zMxzqmSzmjM7MKxgZZERsg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:14:16 2026 by rpki-client