
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31342e302f32342d3234203d3e20323132323338.roa
File: 3139332e3230332e31342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: vFcm6YnyV45H33rFpXHh+SI8bFrVfY60VF+WQvCnO+g=
Subject key identifier: C4:FE:39:EE:50:0C:F2:E4:9B:1E:E8:2C:5D:5D:DD:5B:2C:6E:BB:00
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1072B4046CE3DCC5701B5A0442784845DDA4023B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31342e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Oct 2025 09:07:27 +0000
ROA not before: Thu 09 Oct 2025 09:02:27 +0000
ROA not after: Thu 08 Oct 2026 09:07:27 +0000
asID: 212238
IP address blocks: 193.203.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:72:b4:04:6c:e3:dc:c5:70:1b:5a:04:42:78:48:45:dd:a4:02:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 9 09:02:27 2025 GMT
Not After : Oct 8 09:07:27 2026 GMT
Subject: CN=C4FE39EE500CF2E49B1EE82C5D5DDD5B2C6EBB00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:33:3a:3b:6a:1f:03:71:55:fe:4c:b3:ba:
70:c5:15:fe:6e:7c:a1:a5:b5:fe:27:8e:ab:15:8a:
81:7c:d2:ca:67:ca:31:48:02:ae:10:0b:43:7a:9e:
6c:4d:fa:b6:6d:56:d4:40:74:b7:c4:ae:f2:44:ed:
e6:2b:ce:8a:e4:cd:59:8c:ad:17:35:67:73:6a:25:
2f:1e:d0:d1:7c:38:9a:eb:ad:9b:3a:4e:e3:48:6b:
06:22:f2:5e:4f:68:1e:89:79:b8:b3:5a:45:3b:76:
7a:a6:ee:95:8b:95:b9:5b:ea:f0:e0:6b:09:6b:59:
80:07:86:28:4e:f4:0b:3c:07:58:27:27:9e:f0:96:
08:89:70:18:9d:95:4f:07:46:49:5d:eb:91:8a:1a:
1a:69:35:72:3e:46:02:9e:5b:d5:27:13:d8:92:de:
ae:dd:02:da:d9:13:78:ba:95:ef:c3:06:d8:26:f9:
a8:b4:37:71:89:b7:e8:a4:16:66:f9:4c:9d:d7:83:
3c:9c:9c:4f:e7:70:13:e1:e5:c7:03:75:30:9e:95:
2a:64:58:24:34:9b:ee:38:7b:0d:1a:54:32:45:a1:
e5:2a:01:c4:cd:85:3e:76:a1:9e:1d:ee:22:57:61:
9f:e4:93:54:6e:b6:45:11:73:2e:d1:40:8a:9a:28:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FE:39:EE:50:0C:F2:E4:9B:1E:E8:2C:5D:5D:DD:5B:2C:6E:BB:00
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.14.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f3:ca:1b:31:62:b4:25:09:d0:9e:5e:c3:fa:b3:80:7e:56:
cf:b5:0e:71:de:5a:d8:a7:94:0b:8b:af:8e:db:65:ac:b8:c6:
5f:4a:e9:a9:ca:be:f6:c8:1d:4a:47:50:06:04:14:25:1d:9a:
5b:58:a7:1c:b2:64:15:80:20:0c:f8:ec:dd:f3:53:4b:7d:56:
dc:2e:f4:b6:28:74:72:2f:05:7a:25:d6:ea:d1:19:50:59:7e:
da:b4:6c:8a:ac:6b:6f:57:68:07:81:b7:d4:60:ac:22:90:ac:
a8:a4:d8:40:53:c9:8d:37:94:a8:2e:66:5a:98:6f:fc:8f:9e:
94:5e:1b:c0:d4:bb:4a:b2:a2:ef:e5:75:18:d7:91:86:76:91:
bd:96:d2:3c:bb:4c:c7:02:c6:d4:fd:c1:72:61:4c:88:04:c8:
83:44:d4:59:b2:db:0c:d9:81:4a:52:dc:11:76:53:48:cd:c1:
de:6c:68:35:46:9c:e7:35:29:06:b5:68:81:95:68:bd:14:44:
ff:d8:bc:7e:57:9e:2b:74:90:24:a3:45:1a:65:5b:0d:f2:16:
1c:63:74:8e:e0:95:43:9d:3b:8d:e0:d9:a3:10:d5:3d:40:31:
91:99:4e:b7:5c:c2:b6:00:56:cb:ea:0d:33:d6:03:1a:f2:d3:
90:f3:4e:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:46 2025 by rpki-client