Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa
File: 3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: OWc3a79t6QQw5XHul0tFVy+Z1vS9iyyHtqTX91RRLsw=
Subject key identifier: 1F:63:F5:B3:DB:34:D4:CB:62:E0:BC:6F:A2:93:8B:C2:CB:36:1E:83
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 11893AB0BD3380BA053EC4F0357805C8EB247B44
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa
Signing time: Thu 24 Sep 2026 15:29:18 +0000
ROA not before: Thu 24 Sep 2026 15:24:18 +0000
ROA not after: Thu 23 Sep 2027 15:29:18 +0000
asID: 147049
IP address blocks: 176.100.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:89:3a:b0:bd:33:80:ba:05:3e:c4:f0:35:78:05:c8:eb:24:7b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 24 15:24:18 2026 GMT
Not After : Sep 23 15:29:18 2027 GMT
Subject: CN=1F63F5B3DB34D4CB62E0BC6FA2938BC2CB361E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:fc:d1:e5:45:23:63:0e:81:6f:3b:59:0d:
10:32:90:40:5d:43:9f:01:55:33:ad:fb:9a:fb:b0:
2e:82:f3:eb:ff:d2:b7:b1:f2:85:10:86:98:fd:59:
6e:2a:8e:e6:86:24:af:5d:8e:42:dd:4d:78:93:45:
83:37:af:db:1f:25:70:91:a8:91:cb:92:c4:ff:da:
75:f3:c5:74:9d:5e:ca:21:a3:c8:67:3e:3d:e7:6f:
79:31:6c:ea:c4:45:87:e8:18:68:a9:64:57:d4:f7:
53:d7:a1:35:e0:80:a6:2c:8d:e5:5a:2e:ce:c2:7f:
85:8e:51:ac:60:7e:7a:7a:d2:84:cf:58:41:13:f8:
d8:ed:9c:43:d0:f4:f6:09:a8:00:17:a6:67:44:67:
ee:b4:3c:43:7a:d1:04:64:f2:aa:98:95:5b:ef:ca:
bf:45:41:1e:73:27:d0:1f:88:ce:75:20:71:29:c2:
68:b4:b5:0a:c8:10:c3:4d:1f:6d:03:eb:65:7e:48:
79:22:c6:c8:56:dd:8c:2b:cf:88:d3:07:89:cf:93:
54:3b:e1:0d:a4:15:77:3b:9f:aa:e8:c5:6a:b9:d4:
ef:0d:e9:70:3f:79:eb:13:a1:11:71:28:40:b5:e0:
2e:46:08:1e:e9:fc:e3:f4:73:7f:a1:63:d2:e7:05:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:63:F5:B3:DB:34:D4:CB:62:E0:BC:6F:A2:93:8B:C2:CB:36:1E:83
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:9a:78:e7:25:cc:76:31:a4:00:e6:ba:07:26:55:06:e9:37:
d5:b2:31:73:ea:f7:58:9a:7e:60:d8:f5:e2:db:b8:6e:23:1e:
6a:cc:01:ce:a7:b7:0e:49:ea:6f:52:a6:e8:75:e2:4a:43:66:
2e:92:05:82:a3:a9:dd:0e:7e:25:dc:60:5b:8a:dd:99:36:b2:
d2:d1:7e:c0:19:de:5c:5e:99:0d:1b:78:2e:ba:5c:26:b0:8d:
9c:f6:25:07:c2:3b:01:8a:30:99:d0:fb:65:4c:cb:f9:1f:74:
2b:98:28:74:59:4a:37:2c:b1:6f:fd:1a:03:67:8f:90:71:f2:
ea:64:6f:24:a9:0b:64:9b:c7:77:b5:da:2b:6d:c6:1f:6c:8e:
b0:62:2b:0a:5d:c8:7f:f5:b8:43:23:0d:9d:27:95:a9:cb:81:
04:a2:65:7f:5f:a1:d4:0a:54:e0:ca:38:55:a2:4e:06:70:60:
d3:42:78:79:72:dd:a8:09:1d:b3:21:4b:d5:5b:7d:54:dc:65:
0d:10:5d:5f:04:61:da:3d:d8:3f:8a:9d:6b:0f:68:6d:bc:cf:
84:31:f8:ac:39:01:85:e6:08:5c:95:54:88:64:44:a0:ca:2e:
6a:e4:42:92:f5:7b:5a:ef:95:20:f6:90:41:91:42:4d:56:73:
7d:9b:cd:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:30:44 2026 by rpki-client