Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3132382e302f32342d3234203d3e20323132323338.roa
File: 3139332e3138372e3132382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: FakFds4DpJ9Vh+bsf8UibHj00arUmpTf9bByL/j5ZDo=
Subject key identifier: 3E:04:E5:43:C3:69:85:F8:91:9D:74:BA:CF:13:EB:30:AA:87:B8:AB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 291C2E045A3DB5F1B27E8A4BEE04A91448BBE132
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3132382e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:14 +0000
ROA not before: Tue 22 Sep 2026 13:24:14 +0000
ROA not after: Tue 21 Sep 2027 13:29:14 +0000
asID: 212238
IP address blocks: 193.187.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1c:2e:04:5a:3d:b5:f1:b2:7e:8a:4b:ee:04:a9:14:48:bb:e1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 22 13:24:14 2026 GMT
Not After : Sep 21 13:29:14 2027 GMT
Subject: CN=3E04E543C36985F8919D74BACF13EB30AA87B8AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:28:30:1b:ea:65:3d:23:bf:de:1a:bb:0e:
0e:82:2b:c1:8b:ed:5e:49:1f:5d:10:f3:57:b1:06:
93:4e:a4:56:c9:c3:18:5a:8c:ed:01:bc:f7:f7:a3:
f5:20:02:4f:69:28:aa:4e:f5:e1:45:f2:94:c1:73:
7a:35:48:29:7e:06:57:42:71:06:52:b4:37:b8:bb:
e4:31:41:a0:12:20:ee:29:fd:27:fb:fd:6a:7a:a2:
32:95:8c:b0:25:81:ee:9c:12:f8:c9:85:71:3e:69:
1e:c6:f1:3c:09:5c:df:e7:e6:5d:da:5e:77:1b:c9:
0e:1c:3e:25:b3:ca:e2:a6:1a:05:2c:7e:a8:d1:e5:
52:95:12:54:94:55:37:e0:73:60:45:19:fe:73:58:
79:50:9a:15:a9:1b:b8:d2:df:84:14:7f:0f:0f:da:
7e:1f:f7:50:1b:a7:0d:cb:b7:b0:80:24:fe:4c:12:
0d:f9:4c:2c:11:d3:1a:ec:7c:8f:68:85:14:84:f7:
33:5e:8c:d2:0a:bf:20:b2:2d:7f:2a:54:dd:64:07:
92:27:c2:53:64:44:24:d7:31:0c:17:de:4e:41:40:
88:f1:d0:7b:42:ac:75:d1:78:c7:ca:ef:40:f9:da:
55:3f:36:75:b1:2c:3b:ff:df:e7:a7:aa:85:37:d7:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:E5:43:C3:69:85:F8:91:9D:74:BA:CF:13:EB:30:AA:87:B8:AB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3132382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1c:fb:40:9b:1b:37:2b:2b:44:4a:7c:9c:d6:22:ae:0d:46:
e9:48:ff:98:a6:5f:9e:20:47:84:25:32:19:dc:a6:d3:cf:6d:
53:b4:35:54:53:d4:5a:3c:49:48:3f:fa:9e:c3:39:4c:32:15:
be:9e:87:9f:2f:c0:62:ff:11:81:6a:7f:87:ec:91:d4:67:20:
08:2d:09:0e:92:17:07:ad:3a:77:3b:59:20:3e:fe:e1:6b:dd:
17:9b:2e:3d:f8:a3:9d:f1:18:bf:9d:e8:62:5c:50:82:22:58:
55:f3:67:0a:51:81:d3:a6:e9:28:d2:9d:20:5c:69:ae:4e:b2:
ae:d2:67:84:40:08:60:31:b0:eb:3d:3d:63:d2:99:ef:67:27:
82:31:2d:6d:c7:42:cf:4b:27:9f:7c:40:02:1f:d8:08:9f:cd:
49:2f:79:96:e8:8a:31:1e:cb:3d:d0:ef:e2:74:8b:4a:c7:f6:
ca:e3:02:93:64:84:89:ce:20:18:45:5b:ef:52:51:6f:5d:43:
0f:e2:f3:42:97:d5:77:e6:4d:a7:07:78:42:4f:4f:a3:b7:6a:
93:dd:b8:36:8d:c5:0d:4e:e7:42:fe:5d:ab:25:25:3e:d2:c4:
c8:98:0e:f5:0a:ff:86:40:a6:67:34:cc:d2:db:70:f8:07:c9:
08:eb:d2:a0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUKRwuBFo9tfGyfopL7gSpFEi74TIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjA5MjIxMzI0MTRaFw0yNzA5MjExMzI5MTRaMDMxMTAvBgNV
BAMTKDNFMDRFNTQzQzM2OTg1Rjg5MTlENzRCQUNGMTNFQjMwQUE4N0I4QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYnygwG+plPSO/3hq7Dg6CK8GL
7V5JH10Q81exBpNOpFbJwxhajO0BvPf3o/UgAk9pKKpO9eFF8pTBc3o1SCl+BldC
cQZStDe4u+QxQaASIO4p/Sf7/Wp6ojKVjLAlge6cEvjJhXE+aR7G8TwJXN/n5l3a
XncbyQ4cPiWzyuKmGgUsfqjR5VKVElSUVTfgc2BFGf5zWHlQmhWpG7jS34QUfw8P
2n4f91Abpw3Lt7CAJP5MEg35TCwR0xrsfI9ohRSE9zNejNIKvyCyLX8qVN1kB5In
wlNkRCTXMQwX3k5BQIjx0HtCrHXReMfK70D52lU/NnWxLDv/3+enqoU3191LAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUPgTlQ8NphfiRnXS6zxPrMKqHuKswHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzgz
NzJlMzEzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwbuAMA0GCSqGSIb3DQEBCwUAA4IBAQAbHPtAmxs3KytESnyc1iKu
DUbpSP+Ypl+eIEeEJTIZ3KbTz21TtDVUU9RaPElIP/qewzlMMhW+noefL8Bi/xGB
an+H7JHUZyAILQkOkhcHrTp3O1kgPv7ha90Xmy49+KOd8Ri/nehiXFCCIlhV82cK
UYHTpuko0p0gXGmuTrKu0meEQAhgMbDrPT1j0pnvZyeCMS1tx0LPSyeffEACH9gI
n81JL3mW6IoxHss90O/idItKx/bK4wKTZISJziAYRVvvUlFvXUMP4vNCl9V35k2n
B3hCT0+jt2qT3bg2jcUNTudC/l2rJSU+0sTImA71Cv+GQKZnNMzS23D4B8kI69Kg
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:27:32 2026 by rpki-client