Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136352e38352e302f32342d3234203d3e20313336373837.roa
File: 3138352e3136352e38352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: DT8ziN3GV1aGajFTyRJATvUpiM21SSS4gUfZcHGhzGQ=
Subject key identifier: 51:44:90:C5:1B:48:69:A6:8C:B5:4D:7E:E5:2E:35:29:81:9D:17:3A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 57E317023AD19B7710F4439D4BAD7D42F2907178
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136352e38352e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Jul 2026 23:26:18 +0000
ROA not before: Thu 16 Jul 2026 23:21:18 +0000
ROA not after: Thu 15 Jul 2027 23:26:18 +0000
asID: 136787
IP address blocks: 185.165.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e3:17:02:3a:d1:9b:77:10:f4:43:9d:4b:ad:7d:42:f2:90:71:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 16 23:21:18 2026 GMT
Not After : Jul 15 23:26:18 2027 GMT
Subject: CN=514490C51B4869A68CB54D7EE52E3529819D173A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:3f:e6:26:0a:af:e5:c4:cf:7d:6d:33:ff:
f7:e7:85:37:bf:b7:5b:5e:bd:e5:cf:f0:28:eb:63:
5a:06:0c:e1:6a:9e:13:bb:51:e0:3a:24:12:01:51:
b6:47:ed:9b:34:8b:3b:ff:37:ab:f3:75:46:d2:1c:
06:d8:cc:a9:af:55:36:9e:b1:7a:4b:3b:4e:81:b3:
93:32:a7:2d:cd:de:87:1c:ae:22:cd:07:49:64:2c:
31:59:4c:04:8c:97:e4:e3:cb:b6:1e:4a:e2:91:8b:
0e:f2:09:bb:15:40:e7:3d:cb:57:9d:0b:d2:d7:72:
61:c4:3f:b1:ba:bb:62:64:8a:5e:ef:cb:21:80:16:
25:b9:76:36:12:ca:df:69:1f:25:6b:94:2a:13:36:
c0:5a:60:a0:6d:cc:eb:0d:61:34:85:c5:2b:38:68:
b4:54:64:47:b5:b8:95:b5:32:f5:0c:a3:23:e1:4e:
6a:9d:b0:c9:3a:9d:d9:2f:68:fe:a1:a1:c2:d3:a9:
09:1f:a5:fc:1a:db:03:24:21:86:f5:84:7e:44:41:
0e:10:c0:97:46:c7:3a:29:6e:d6:b2:69:09:53:b7:
80:7d:cc:62:5d:98:12:ba:7b:88:91:05:00:91:77:
06:38:5d:ca:32:b3:5e:8f:b6:7a:eb:9e:90:99:90:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:44:90:C5:1B:48:69:A6:8C:B5:4D:7E:E5:2E:35:29:81:9D:17:3A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136352e38352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:0a:48:3a:83:1b:ce:ac:fa:2f:00:1d:96:68:12:ad:2c:a8:
dc:d2:df:6b:23:a4:a2:a2:52:9a:91:96:a3:2a:25:83:af:0d:
f4:ea:ea:a0:39:0a:f7:e8:ee:3a:44:61:f8:12:c6:93:c4:1a:
a5:60:e0:ad:df:fa:6c:cd:44:e9:0e:94:c7:db:f9:e8:1b:4f:
09:e0:3c:a7:d2:53:f9:a7:55:3c:08:21:1e:f0:49:98:b8:f5:
f1:ff:dc:29:12:97:83:de:2e:63:cd:77:71:17:db:c4:e0:cf:
59:f7:6f:3d:b0:2a:1b:fa:07:88:01:c5:12:27:22:c2:82:7a:
ac:2a:9e:b3:9a:15:9c:cd:6d:7c:6b:07:61:64:92:7a:9f:63:
20:34:b6:37:6a:2c:da:b9:6d:36:b9:f8:6b:d5:3b:2a:a3:9c:
09:de:e5:37:78:9a:fe:d1:ac:bd:94:10:cd:02:66:13:d6:91:
0c:35:0c:e9:f3:a9:08:57:3e:02:64:37:08:ca:2a:82:22:83:
78:f8:3c:ae:59:e7:27:73:a9:83:f5:78:5e:a9:1a:93:7f:da:
b5:fc:6d:86:51:c5:aa:92:92:a4:78:44:2e:c2:ed:34:88:91:
7b:2b:2a:92:66:90:6d:b4:a5:5f:a2:7c:97:25:5e:73:41:9e:
e9:ae:60:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:21:33 2026 by rpki-client