Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233342e37392e302f32342d3234203d3e20323035363539.roa
File: 3130392e3233342e37392e302f32342d3234203d3e20323035363539.roa (raw, json)
Hash identifier: VowF3QyLKph4ta03xnaTHklYINLxO6d7kdIbt+w0Il8=
Subject key identifier: CC:44:0F:24:E5:4C:4B:9E:6F:C3:1D:CF:82:86:BE:68:F4:78:B4:0D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 39240FAFE79379F930FEEF12FCE568013F0F02A6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233342e37392e302f32342d3234203d3e20323035363539.roa
Signing time: Thu 24 Sep 2026 15:29:18 +0000
ROA not before: Thu 24 Sep 2026 15:24:18 +0000
ROA not after: Thu 23 Sep 2027 15:29:18 +0000
asID: 205659
IP address blocks: 109.234.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:24:0f:af:e7:93:79:f9:30:fe:ef:12:fc:e5:68:01:3f:0f:02:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 24 15:24:18 2026 GMT
Not After : Sep 23 15:29:18 2027 GMT
Subject: CN=CC440F24E54C4B9E6FC31DCF8286BE68F478B40D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:40:e1:d7:75:a4:ae:18:b4:17:3f:b3:5f:08:
aa:c7:31:fc:d7:b9:8a:38:74:06:47:05:d4:7b:cb:
e2:25:98:19:2b:db:8e:1b:9b:ff:a7:3f:a6:1a:b4:
9c:bb:c8:86:8d:31:e9:03:d7:03:ba:64:83:f9:f5:
f1:40:5c:7d:db:73:1b:98:96:e8:5a:37:21:6c:b4:
dc:37:84:6e:dc:cd:4b:96:d8:ac:e6:92:c1:e9:57:
96:b9:c9:2d:6d:b0:5e:83:2e:69:8f:93:e8:10:20:
8a:a7:23:ce:3a:1d:f7:03:89:74:dc:54:90:87:60:
22:f6:bc:46:77:3b:92:ef:ef:3f:71:01:ab:69:b8:
2b:bc:67:a5:e6:87:35:68:da:6c:09:d5:d3:21:ae:
3b:09:ee:21:09:02:cd:d1:bf:0d:a1:d7:f7:c0:8b:
f5:78:cc:50:d2:e8:00:28:58:0e:1a:43:63:fe:11:
7d:56:06:ce:f7:7c:44:af:99:2e:ff:e8:5d:7e:96:
dd:16:91:5e:4f:29:de:82:d1:d0:e9:61:95:42:fd:
c4:f5:30:22:4d:9d:39:d9:14:01:06:16:1f:f3:a9:
ad:aa:68:da:e9:5d:d7:02:32:f4:1f:1d:08:1a:9b:
a3:86:95:74:63:f6:af:0d:86:0d:a0:cb:cb:d9:4a:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:44:0F:24:E5:4C:4B:9E:6F:C3:1D:CF:82:86:BE:68:F4:78:B4:0D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233342e37392e302f32342d3234203d3e20323035363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.79.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e0:65:40:f9:c0:0e:5c:c6:49:36:47:a5:44:60:1d:a7:99:
52:67:62:ba:ad:e9:5a:42:8c:fc:61:65:36:77:10:32:e4:ce:
b8:a4:d3:d1:70:43:95:9b:00:a5:51:89:8a:9e:19:41:fb:58:
a8:9f:10:d0:80:cd:c1:c6:9f:31:da:be:e9:b7:01:21:30:3e:
57:1b:26:41:c2:b2:25:7b:71:24:9e:bc:aa:2d:43:3c:75:ed:
a5:f5:49:42:aa:9e:70:02:51:cf:b8:39:fb:68:7b:46:ae:f8:
79:a8:4c:d1:1e:18:49:d5:04:2b:d5:c9:5f:a1:20:89:42:df:
6d:09:09:6e:58:74:3a:c3:a7:d2:36:82:2b:8a:f3:d0:82:4c:
c3:ad:f0:69:ef:0a:bf:ac:d6:20:3c:40:6f:59:15:5a:7a:5a:
13:8f:06:91:12:18:cd:b4:81:fa:7a:a3:5f:21:1f:50:82:c0:
f7:13:ad:80:38:83:c4:0e:c3:11:b2:97:aa:40:ae:76:6a:13:
df:a0:48:75:4e:27:8a:4a:a5:3b:6b:0b:40:81:06:56:b2:10:
e6:90:25:13:f8:ef:9a:e7:36:a0:03:c5:d8:03:31:79:46:ec:
80:ab:62:cd:28:7d:2d:6d:c8:c2:d8:a5:72:f8:46:c9:5a:7d:
86:89:e0:4e
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUOSQPr+eTefkw/u8S/OVoAT8PAqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjA5MjQxNTI0MThaFw0yNzA5MjMxNTI5MThaMDMxMTAvBgNV
BAMTKENDNDQwRjI0RTU0QzRCOUU2RkMzMURDRjgyODZCRTY4RjQ3OEI0MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwQOHXdaSuGLQXP7NfCKrHMfzX
uYo4dAZHBdR7y+IlmBkr244bm/+nP6YatJy7yIaNMekD1wO6ZIP59fFAXH3bcxuY
luhaNyFstNw3hG7czUuW2KzmksHpV5a5yS1tsF6DLmmPk+gQIIqnI846HfcDiXTc
VJCHYCL2vEZ3O5Lv7z9xAatpuCu8Z6XmhzVo2mwJ1dMhrjsJ7iEJAs3Rvw2h1/fA
i/V4zFDS6AAoWA4aQ2P+EX1WBs73fESvmS7/6F1+lt0WkV5PKd6C0dDpYZVC/cT1
MCJNnTnZFAEGFh/zqa2qaNrpXdcCMvQfHQgam6OGlXRj9q8Nhg2gy8vZSpcTAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUzEQPJOVMS55vwx3Pgoa+aPR4tA0wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTMwMzkyZTMyMzMz
NDJlMzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNTM2MzUzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAG3qTzANBgkqhkiG9w0BAQsFAAOCAQEAdOBlQPnADlzGSTZHpURgHaeZ
Umdiuq3pWkKM/GFlNncQMuTOuKTT0XBDlZsApVGJip4ZQftYqJ8Q0IDNwcafMdq+
6bcBITA+VxsmQcKyJXtxJJ68qi1DPHXtpfVJQqqecAJRz7g5+2h7Rq74eahM0R4Y
SdUEK9XJX6EgiULfbQkJblh0OsOn0jaCK4rz0IJMw63wae8Kv6zWIDxAb1kVWnpa
E48GkRIYzbSB+nqjXyEfUILA9xOtgDiDxA7DEbKXqkCudmoT36BIdU4nikqlO2sL
QIEGVrIQ5pAlE/jvmuc2oAPF2AMxeUbsgKtizSh9LW3IwtilcvhGyVp9hongTg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:12:32 2026 by rpki-client