Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e203633313939.roa
File: 39322e3131382e36322e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: p6QOOxTOyNnlmDy2nNpEMZ7+8Ady1127IH4MSaFnGmU=
Subject key identifier: F5:35:FA:58:25:CB:92:81:06:BD:2B:72:28:D9:79:5F:46:B5:B2:3E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 704DCB175A182FC291E2C1D38956A7C693ECC4F9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e203633313939.roa
Signing time: Mon 09 Feb 2026 15:19:19 +0000
ROA not before: Mon 09 Feb 2026 15:14:19 +0000
ROA not after: Mon 08 Feb 2027 15:19:19 +0000
asID: 63199
IP address blocks: 92.118.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:4d:cb:17:5a:18:2f:c2:91:e2:c1:d3:89:56:a7:c6:93:ec:c4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Feb 9 15:14:19 2026 GMT
Not After : Feb 8 15:19:19 2027 GMT
Subject: CN=F535FA5825CB928106BD2B7228D9795F46B5B23E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:7b:7b:c7:c9:d9:86:19:fe:2b:ae:db:a8:
97:47:a5:1c:41:ff:84:0f:cd:7d:aa:c7:35:34:55:
24:dd:2a:96:2d:c0:f3:ae:b2:78:b6:ca:78:bc:41:
6c:9f:01:c0:7c:b7:7d:a9:3c:ad:c8:dc:82:cc:56:
9a:25:65:c1:da:5b:e1:20:0e:77:74:27:44:42:e7:
f8:fa:e4:47:30:b9:64:1c:5a:ba:0f:dc:29:b6:87:
62:8d:b6:48:21:7e:e3:4f:2f:b6:3e:54:3c:ab:c2:
a5:bd:ef:64:04:8e:46:9c:21:fd:0b:cf:73:26:24:
f1:33:d4:10:c4:e7:92:a4:d1:6c:5a:72:23:20:b3:
76:47:72:0c:ea:d1:e5:93:39:3c:70:d5:08:c5:55:
1e:4f:09:14:3b:67:5f:17:83:72:1f:48:f1:b5:5a:
28:72:d4:82:a7:88:e5:64:ab:ac:71:61:51:46:89:
12:33:e3:2d:d8:ec:33:e9:ee:59:35:64:b1:cd:0c:
b8:7e:e3:aa:09:5c:92:52:f9:11:d9:20:db:aa:d8:
17:13:97:57:de:66:1a:26:39:81:98:c2:81:f4:fd:
59:62:da:a5:73:09:20:b0:c9:5d:e4:d6:4e:f8:bb:
5b:db:71:dd:bd:5b:85:7c:ef:50:1e:e1:e1:0c:d4:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:35:FA:58:25:CB:92:81:06:BD:2B:72:28:D9:79:5F:46:B5:B2:3E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.62.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:e9:2e:c6:ad:b2:60:a0:a8:08:63:c5:61:16:24:e3:e2:10:
3a:fd:7b:8b:d7:9a:f6:2c:5b:8e:ce:7b:ce:00:f4:9e:af:15:
13:1e:57:5b:f9:70:0a:bf:c9:99:75:26:4f:0f:7f:a5:17:06:
ee:7d:2e:81:5f:7d:06:a3:6b:95:5c:c6:31:30:c9:ab:ab:df:
94:54:f6:67:d3:1c:65:54:d2:ba:45:db:01:7e:c7:bc:5c:29:
80:e7:22:4a:66:e4:ee:04:49:b7:01:9d:5c:4f:00:b9:9d:18:
85:83:70:2b:7e:c3:07:12:81:5e:47:44:cf:f2:83:b7:b7:f6:
f3:52:e8:d7:93:95:81:8e:cb:0d:0f:43:58:bc:99:e9:d1:3c:
bd:c0:50:3e:c7:4c:8f:c8:7a:c0:0b:4a:7e:c9:f8:56:b9:ab:
45:a0:07:46:39:f3:ab:db:86:b7:93:e5:78:38:d3:37:0f:ac:
bc:7c:70:fd:1c:35:6b:0a:8b:b2:a9:0b:05:d6:4f:ee:d6:cc:
18:ed:81:e0:9e:7b:8c:20:ae:cb:ce:c9:cf:65:23:d1:cd:8c:
40:ad:25:a2:b7:d7:be:9b:fb:64:5e:89:35:7f:2b:3f:83:1e:
52:52:3c:cb:37:57:ff:7f:b5:da:70:c7:c1:66:3f:e1:9d:14:
02:2b:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:36 2026 by rpki-client