Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31342e302f32342d3234203d3e20323036323833.roa
File: 3138352e3234332e31342e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: xW/9N0dohIGUWc+Ezo83R/yfW2M1LNtFzRzIQe+5VAI=
Subject key identifier: 25:03:B6:D1:7C:54:B0:6B:16:FF:EF:51:0D:29:20:8B:14:DA:A4:11
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 778355B36944EF0366088D791380E2BE90D2E211
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31342e302f32342d3234203d3e20323036323833.roa
Signing time: Fri 30 Oct 2026 12:31:25 +0000
ROA not before: Fri 30 Oct 2026 12:26:25 +0000
ROA not after: Fri 29 Oct 2027 12:31:25 +0000
asID: 206283
IP address blocks: 185.243.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:83:55:b3:69:44:ef:03:66:08:8d:79:13:80:e2:be:90:d2:e2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:25 2026 GMT
Not After : Oct 29 12:31:25 2027 GMT
Subject: CN=2503B6D17C54B06B16FFEF510D29208B14DAA411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:65:24:8d:97:8d:04:f7:6c:2f:4c:74:84:83:
66:60:61:0e:5c:3d:cf:75:f4:fd:e5:be:fe:94:e9:
19:19:19:29:bc:22:6e:0c:10:33:ab:4b:a0:1b:06:
ed:b0:e6:a2:59:65:5b:24:0e:5d:e7:2d:eb:6c:16:
d8:87:68:a9:4b:7c:75:5a:17:c8:29:19:16:72:ca:
da:76:9d:07:a2:87:95:94:37:6f:c2:66:3f:87:a3:
52:f3:8b:eb:fa:dc:1c:38:e9:1b:3b:f5:23:77:fa:
63:d9:e9:1a:d7:e0:45:02:c3:6b:19:6f:c8:46:59:
5f:04:14:56:25:dc:13:2f:53:03:5e:a9:6f:bb:07:
8b:52:f9:c6:c6:07:67:aa:40:e6:43:e9:e3:5d:d9:
81:26:5e:3a:f3:ec:e5:26:91:8e:3d:5f:06:f2:f2:
ab:a4:55:2a:74:3b:3e:e6:df:5b:72:94:31:e2:b5:
4a:7c:10:ec:84:dd:d1:41:43:7d:41:5a:dc:0c:62:
82:0a:87:d9:d9:00:c6:f4:49:ab:0e:1f:11:de:14:
c8:69:c5:3d:31:1a:e3:46:0a:0f:fb:64:97:08:41:
d2:f1:9d:0d:95:a2:a3:41:52:0a:a1:13:2e:20:3e:
24:65:6b:86:20:2a:ab:60:0e:f9:a6:6f:fa:27:32:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:03:B6:D1:7C:54:B0:6B:16:FF:EF:51:0D:29:20:8B:14:DA:A4:11
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234332e31342e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.14.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fd:50:42:14:8b:1d:0e:2b:de:e8:e3:90:37:69:3d:04:b5:
c5:f3:24:d4:2e:9c:a0:2d:1e:64:7d:95:b6:83:be:3f:a1:53:
18:44:e1:c4:e7:73:25:f6:63:f3:44:8a:a8:f8:3a:bd:ef:22:
86:25:05:95:96:3c:83:d0:6d:11:de:8b:42:4d:1a:b5:38:50:
a1:2d:3d:35:c8:78:b8:b4:06:80:4a:86:47:81:96:56:dd:d9:
90:25:68:e8:9f:1e:a3:0a:c4:8b:7b:27:e9:59:cf:7a:90:d8:
04:b9:42:46:78:d4:b6:17:60:1f:a9:c5:df:6c:36:ef:24:dc:
91:d1:2b:0b:d7:60:10:f0:9d:74:87:42:26:4d:2e:12:55:e5:
c9:92:4d:11:1c:7f:d4:51:91:99:62:6a:f2:19:32:fb:9c:0b:
8f:cd:4d:c9:72:38:46:12:e2:69:11:4c:4c:1b:5d:49:15:b7:
29:c0:6d:74:3a:74:bc:8f:07:f7:cd:e8:42:fb:4b:69:40:26:
27:e8:a3:0c:57:9c:31:e3:22:f8:c7:3e:1b:4b:b7:72:3f:96:
ec:f8:04:96:5c:ec:61:3c:40:85:19:64:b0:32:03:cd:14:74:
60:43:5a:85:11:21:b2:65:f8:ab:93:32:fb:84:e0:a6:ca:18:
f9:08:6a:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:24:52 2026 by rpki-client