Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3134372e35342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3134372e35342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: VthF3/cvEdiKwxBhQ0PQM30/+IonBIPbxDGaBj1u6aI=
Subject key identifier: D3:E7:6A:14:4B:EC:1E:D5:93:6A:93:3A:F7:CF:7D:4B:AC:11:3C:24
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3587D7444F4D1E33D5F72B9037E9C2611653D751
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3134372e35342e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 24 Sep 2026 15:29:19 +0000
ROA not before: Thu 24 Sep 2026 15:24:19 +0000
ROA not after: Thu 23 Sep 2027 15:29:19 +0000
asID: 136787
IP address blocks: 185.147.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:87:d7:44:4f:4d:1e:33:d5:f7:2b:90:37:e9:c2:61:16:53:d7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 24 15:24:19 2026 GMT
Not After : Sep 23 15:29:19 2027 GMT
Subject: CN=D3E76A144BEC1ED5936A933AF7CF7D4BAC113C24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:c6:34:80:37:3d:0e:ef:c2:72:dc:02:20:
fd:9d:13:af:be:20:ce:00:9d:3e:81:52:86:a8:5b:
f6:6c:e3:2d:54:18:19:c3:b6:79:5a:dc:27:c8:ee:
ba:31:64:da:5c:32:46:66:0c:9b:21:03:95:d1:1d:
94:64:00:ca:c8:c0:00:07:c0:1e:0f:a3:74:30:27:
84:2d:0c:92:82:05:68:f7:35:21:4e:bf:97:d7:6a:
5d:2a:2f:0e:e7:bd:12:f5:5f:16:67:4b:2f:da:58:
24:58:00:8f:7c:fc:5c:d5:17:87:4b:d4:05:ff:ba:
37:74:b9:10:31:87:a2:94:be:4f:2e:18:a2:db:e5:
fd:fd:61:a8:14:35:93:3f:31:74:10:6c:e4:cc:12:
01:40:bb:ab:5d:9b:a3:b3:5a:8b:55:45:d0:44:84:
5c:dd:d1:79:6c:ac:2e:3d:2c:88:82:2e:30:76:99:
43:be:74:c6:e4:25:d5:ad:94:7e:ee:93:4b:6e:e6:
e4:fd:14:61:c4:34:9c:87:8e:e9:fb:3f:07:09:54:
5b:2d:91:67:6a:8c:87:b4:6e:bc:03:5d:e5:f4:1a:
7a:43:b3:75:7a:c6:42:23:b2:3b:3a:85:64:02:12:
0c:b8:e3:8c:16:b6:7c:36:d6:9a:ce:fb:33:3b:85:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E7:6A:14:4B:EC:1E:D5:93:6A:93:3A:F7:CF:7D:4B:AC:11:3C:24
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3134372e35342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:02:b4:56:b3:b2:fd:2f:54:23:82:c2:9f:ba:ff:2f:80:14:
a7:ea:f1:b9:d7:eb:09:c5:66:3f:c0:29:39:19:b8:0b:40:fa:
5f:30:56:86:33:c9:c9:56:dd:e2:74:20:c6:41:d0:30:c0:a4:
b5:d0:7d:d3:0e:c0:b1:43:e9:1f:1f:a5:f8:a1:a6:22:e0:04:
e7:95:44:57:31:bc:9d:4b:c5:a0:b2:65:5d:e7:d9:b5:cf:a8:
ac:81:bc:f8:16:60:e9:ff:5e:67:40:58:b9:92:be:9e:4c:da:
f4:02:b4:f1:a9:23:20:b8:7c:ee:48:56:44:74:e9:3d:ef:df:
7f:bc:09:df:5a:24:45:50:fe:2c:dc:56:81:62:cf:25:7d:3f:
ca:e7:de:d9:ab:03:85:54:40:d7:82:f4:6a:10:f2:c6:79:21:
0a:32:51:b8:ba:1c:d8:dd:10:66:23:f1:70:74:c9:1f:72:cc:
3c:36:0c:8b:53:92:a4:1e:fe:2a:31:86:10:df:26:26:dd:5f:
01:ec:4e:23:03:48:5a:b0:d8:92:a9:1d:e9:de:ed:df:ab:c1:
f6:68:f0:fd:5d:90:ef:a5:b0:24:1b:c9:9a:0e:80:2a:0b:9e:
d3:13:f3:13:1b:86:90:9b:dd:2e:8c:03:f1:56:86:7b:37:17:
9c:50:f9:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:01:01 2026 by rpki-client