Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134362e31392e3135362e302f32342d3234203d3e20313336373837.roa
File: 3134362e31392e3135362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 2QA4c81O9xbHaxFDbM80av2L2r65mcE+Hm2k17PtTTc=
Subject key identifier: 5E:2E:15:D2:41:09:85:05:9B:47:D9:F5:84:FF:79:CF:E2:7A:3F:D2
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6D1FBE04F5C821743849BFF600640FB95E23A0D0
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134362e31392e3135362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 25 Sep 2026 08:29:23 +0000
ROA not before: Fri 25 Sep 2026 08:24:23 +0000
ROA not after: Fri 24 Sep 2027 08:29:23 +0000
asID: 136787
IP address blocks: 146.19.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:1f:be:04:f5:c8:21:74:38:49:bf:f6:00:64:0f:b9:5e:23:a0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 25 08:24:23 2026 GMT
Not After : Sep 24 08:29:23 2027 GMT
Subject: CN=5E2E15D2410985059B47D9F584FF79CFE27A3FD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:e4:8b:e6:0c:c4:48:6e:b9:9e:ec:ed:5c:
fd:90:ea:a7:14:93:50:ef:26:0b:3a:61:27:c1:cc:
aa:04:8d:04:27:24:f2:a7:72:23:2e:20:aa:39:6e:
f2:d3:b3:e9:97:ed:0a:d9:25:f7:c7:9c:29:dc:fc:
31:41:25:7c:79:28:5b:59:22:0e:e4:95:ca:d3:99:
3d:a0:2e:17:2f:c8:57:09:ab:28:01:11:28:fb:f8:
f0:c1:fb:69:fb:00:b4:e8:d5:25:11:5b:23:72:67:
f1:cf:f1:93:b9:a7:6f:d9:09:b7:95:62:9a:ef:44:
05:34:de:81:b7:73:88:25:aa:f1:35:bb:cd:c0:fd:
64:31:8e:96:f4:ff:b1:39:f0:3c:ef:29:94:e5:6b:
65:55:3e:d9:26:20:4f:0b:40:05:a5:ec:43:82:8d:
77:d5:f1:08:93:ad:78:7f:31:77:23:b8:42:48:21:
84:dd:d8:06:e9:f7:da:2c:f4:98:5e:f6:3c:6c:7b:
f0:85:eb:a1:2d:bb:7d:f2:fc:a9:c4:3d:95:cf:d2:
14:50:a2:d1:31:ec:c9:81:73:6d:63:ec:cf:76:5b:
ea:d3:ea:08:97:02:38:87:0f:a2:42:94:96:f3:41:
b9:0c:e5:67:a4:ce:87:32:48:70:20:9f:88:ea:d6:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2E:15:D2:41:09:85:05:9B:47:D9:F5:84:FF:79:CF:E2:7A:3F:D2
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134362e31392e3135362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.156.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:88:2d:6a:34:f0:ac:3b:03:04:66:78:2f:cb:d8:ec:17:b5:
c4:9e:de:76:60:3d:97:fa:39:ee:02:c4:d1:b5:53:74:e4:79:
8c:75:b2:a3:a0:bb:74:69:1b:6f:2a:d9:3c:b4:68:47:e0:19:
ae:83:3d:e1:f3:1c:bd:e6:e9:2d:71:7c:33:00:4b:e5:a5:2f:
88:b1:c8:fb:ef:04:81:25:3a:80:00:4e:bc:f9:e0:d7:93:1b:
8f:ac:eb:a8:77:20:ff:70:5e:83:b6:f8:4e:57:95:be:22:41:
17:7d:0c:8c:9c:29:7c:0c:73:8e:3e:bf:5a:a6:5a:9f:c8:f3:
8e:cb:8b:0b:be:42:c7:1d:44:b2:d8:89:8c:d8:a9:04:ce:e3:
df:69:e6:65:d5:23:d0:53:d5:2e:63:0d:37:3e:70:48:21:8c:
4e:51:5a:80:55:52:ba:f8:c8:d2:75:f2:17:c6:88:76:95:47:
62:89:bf:22:56:5d:43:e7:0c:30:df:86:02:c2:ac:ef:fe:cc:
f6:b7:36:77:60:54:44:5f:b7:21:de:e3:6f:23:88:25:71:50:
ff:31:81:32:a5:46:5a:77:03:cd:b1:44:e8:15:ff:96:f2:15:
92:a1:f7:a4:10:79:38:56:ef:f2:a7:3f:d9:5e:69:9d:b4:df:
b8:90:50:a0
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUbR++BPXIIXQ4Sb/2AGQPuV4joNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjA5MjUwODI0MjNaFw0yNzA5MjQwODI5MjNaMDMxMTAvBgNV
BAMTKDVFMkUxNUQyNDEwOTg1MDU5QjQ3RDlGNTg0RkY3OUNGRTI3QTNGRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/OSL5gzESG65nuztXP2Q6qcU
k1DvJgs6YSfBzKoEjQQnJPKnciMuIKo5bvLTs+mX7QrZJffHnCnc/DFBJXx5KFtZ
Ig7klcrTmT2gLhcvyFcJqygBESj7+PDB+2n7ALTo1SURWyNyZ/HP8ZO5p2/ZCbeV
YprvRAU03oG3c4glqvE1u83A/WQxjpb0/7E58DzvKZTla2VVPtkmIE8LQAWl7EOC
jXfV8QiTrXh/MXcjuEJIIYTd2Abp99os9Jhe9jxse/CF66Etu33y/KnEPZXP0hRQ
otEx7MmBc21j7M92W+rT6giXAjiHD6JClJbzQbkM5WekzocySHAgn4jq1otNAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUXi4V0kEJhQWbR9n1hP95z+J6P9IwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM0MzYyZTMxMzky
ZTMxMzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAJITnDANBgkqhkiG9w0BAQsFAAOCAQEAsogtajTwrDsDBGZ4L8vY7Be1
xJ7edmA9l/o57gLE0bVTdOR5jHWyo6C7dGkbbyrZPLRoR+AZroM94fMcvebpLXF8
MwBL5aUviLHI++8EgSU6gABOvPng15Mbj6zrqHcg/3Beg7b4TleVviJBF30MjJwp
fAxzjj6/WqZan8jzjsuLC75Cxx1EstiJjNipBM7j32nmZdUj0FPVLmMNNz5wSCGM
TlFagFVSuvjI0nXyF8aIdpVHYom/IlZdQ+cMMN+GAsKs7/7M9rc2d2BURF+3Id7j
byOIJXFQ/zGBMqVGWncDzbFE6BX/lvIVkqH3pBB5OFbv8qc/2V5pnbTfuJBQoA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:12:48 2026 by rpki-client