Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136352e38372e302f32342d3234203d3e20313336373837.roa
File: 3138352e3136352e38372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 1t/Q2pcXBd/mYuRMzdOVZARNZh7UlBSjutO7P7lYsEw=
Subject key identifier: A7:6F:B2:66:F4:13:5A:65:92:6E:2C:9E:31:C8:DC:40:80:3D:B1:58
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 783B9BB7C377CAAD0ACF69E8BB8B6D21DC026156
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136352e38372e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Jul 2026 23:26:18 +0000
ROA not before: Thu 16 Jul 2026 23:21:18 +0000
ROA not after: Thu 15 Jul 2027 23:26:18 +0000
asID: 136787
IP address blocks: 185.165.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3b:9b:b7:c3:77:ca:ad:0a:cf:69:e8:bb:8b:6d:21:dc:02:61:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 16 23:21:18 2026 GMT
Not After : Jul 15 23:26:18 2027 GMT
Subject: CN=A76FB266F4135A65926E2C9E31C8DC40803DB158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:a4:82:74:3d:30:64:9c:27:85:4d:57:29:
8c:dc:5f:ed:36:2b:06:bd:a6:44:f2:90:c2:10:5b:
29:20:c5:6a:23:32:71:eb:d6:cb:e4:c3:a0:e1:04:
f3:92:07:c3:83:5a:1b:63:30:d2:6c:1d:c0:bb:1e:
89:22:35:93:40:a8:a1:0b:b7:c5:66:1e:42:a6:6b:
fc:12:be:fa:28:8f:13:7f:28:f0:ef:ba:1d:ee:2f:
7c:7c:81:99:54:e8:5a:cb:ab:66:e8:89:d4:c6:57:
c7:5a:06:a3:1b:4e:14:c5:d1:5f:c0:ba:20:f1:82:
b1:1c:c6:77:28:89:11:22:9c:82:e2:09:22:15:6f:
a7:12:07:93:16:6c:7d:cd:49:4f:8f:6d:86:c7:d4:
29:71:9f:30:99:20:2b:71:32:87:50:4f:5f:21:f9:
46:2c:15:86:30:26:42:d2:0c:42:43:19:60:4d:89:
43:b3:f5:90:83:2c:25:0e:5b:09:05:16:fe:26:46:
cf:0b:47:64:84:35:73:0f:f5:c3:83:07:84:a2:07:
26:dc:6e:1c:a4:ef:06:99:44:c7:07:6a:71:7b:9f:
36:df:df:f4:d3:1f:4a:60:fc:d3:4d:79:cd:04:4d:
31:21:d8:83:69:28:c7:35:5e:85:47:5f:88:ff:76:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6F:B2:66:F4:13:5A:65:92:6E:2C:9E:31:C8:DC:40:80:3D:B1:58
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136352e38372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:46:57:91:84:42:3e:53:5e:b7:bd:5f:4b:b7:6b:16:d0:49:
9e:22:16:8f:e7:8e:a5:a0:50:e5:89:f0:94:41:29:43:86:0d:
b7:96:46:6f:da:ce:ca:2e:51:92:dc:44:25:c7:90:cd:1b:8f:
79:69:32:4c:e8:9d:e7:2f:76:55:96:fe:93:72:2a:9e:b4:87:
a8:2b:91:59:06:e6:53:b3:e1:90:2b:d6:11:55:04:d7:31:08:
38:84:35:b9:bd:89:a2:b1:b3:ea:8a:07:e3:91:d1:d9:5c:92:
3d:fc:f6:98:c8:1c:3e:23:97:9a:08:50:d4:5f:3d:da:27:3e:
26:73:b0:a7:6e:f4:98:1d:9e:c5:b5:69:df:c1:b0:7f:df:bf:
b7:a0:34:29:9c:5f:be:08:1e:5b:71:fa:97:b5:96:f8:b4:35:
b6:2d:a2:d8:2a:ba:8f:23:ef:71:0a:84:b9:65:cf:6a:a8:ef:
b8:f5:db:8f:a7:d8:60:07:81:1b:c6:8b:e9:43:41:69:28:23:
d4:fa:6a:06:db:2a:cb:40:eb:4f:3f:cc:47:59:81:1d:05:6f:
cd:27:18:da:ab:22:4e:8c:fc:9e:a8:33:d1:28:92:2e:68:13:
f1:2a:f2:89:54:1e:95:31:2b:a0:56:34:fd:cc:83:f8:0e:8f:
af:57:65:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:31:44 2026 by rpki-client