Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32342e302f32342d3234203d3e20313336373837.roa
File: 3139332e32322e32342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 7uIiwshI9INg5du05lGkGW1Fw3OCXN3O/bS5m8Lo6JY=
Subject key identifier: 32:87:82:A7:FE:A7:8F:DE:40:60:AF:E4:45:11:B7:F3:98:DB:45:27
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 092AB696EDB2B45C5D98C033A6AFDB0A7FF98089
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 12:31:45 +0000
ROA not before: Fri 30 Oct 2026 12:26:45 +0000
ROA not after: Fri 29 Oct 2027 12:31:45 +0000
asID: 136787
IP address blocks: 193.22.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:2a:b6:96:ed:b2:b4:5c:5d:98:c0:33:a6:af:db:0a:7f:f9:80:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:45 2026 GMT
Not After : Oct 29 12:31:45 2027 GMT
Subject: CN=328782A7FEA78FDE4060AFE44511B7F398DB4527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8d:3f:f8:81:bc:06:3f:9e:be:c2:15:79:80:
b2:c1:0e:7c:cb:e8:c4:3a:bb:fe:ff:00:12:7f:db:
ad:b7:39:79:5f:c9:30:21:13:b1:48:82:ab:b9:ce:
09:92:2d:28:74:2e:ea:07:f2:0b:a1:1b:02:ba:9b:
8f:e0:c9:c0:33:eb:06:85:76:3d:c0:e7:b1:c5:ef:
f6:c0:76:82:5a:0a:d9:5f:e7:a3:44:54:bc:41:cf:
a7:5c:5c:9b:b4:00:39:ab:ad:7e:85:b7:5b:2e:97:
b6:26:e2:9d:94:4a:b9:66:d9:9f:09:fe:ea:b5:b2:
66:7c:3c:7b:01:d1:54:f7:81:7e:03:32:ec:a9:5e:
e4:d1:ea:f8:ae:dc:17:56:f6:5c:f7:73:18:07:a6:
fe:83:8e:fd:f0:e4:21:66:57:90:45:06:26:a9:8f:
03:3d:8e:10:1d:5c:fd:72:83:b5:c9:58:4a:7e:ad:
43:7c:62:e6:b2:d6:dc:1d:ae:b0:05:01:fa:b1:ad:
2a:a5:6a:72:0c:2f:b9:04:2f:1e:e4:75:5a:71:ff:
a1:4f:58:1a:ee:7e:98:90:0e:66:b6:05:0f:4c:ba:
9d:d9:37:5c:17:35:27:31:cd:29:1c:50:1d:65:fd:
0b:18:cc:b9:9e:c8:16:e9:af:4e:03:47:dc:93:16:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:87:82:A7:FE:A7:8F:DE:40:60:AF:E4:45:11:B7:F3:98:DB:45:27
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.24.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e7:8c:cb:ea:92:ed:40:44:a4:69:f4:4b:67:91:77:59:25:
64:62:ad:30:49:0b:c6:a3:78:0b:96:73:bd:af:da:47:1e:95:
72:d3:d7:26:d8:b1:cd:bc:38:9d:a4:f4:59:b9:4e:a5:d7:51:
ad:61:59:38:a1:3c:16:27:08:6c:fc:3c:6b:25:34:cb:2f:db:
06:6f:b2:fd:0f:69:fb:70:0d:2a:76:3f:ff:41:b3:aa:3e:ac:
ba:c6:7f:28:55:53:6f:37:16:ab:07:d2:e6:0d:cf:b4:fd:36:
09:67:37:c7:8b:ad:1e:a6:52:3d:3a:a4:e3:27:5e:5e:64:d2:
25:3f:82:d1:a3:41:5c:7f:cf:2d:95:b5:36:9e:4c:cb:14:a4:
3c:02:b3:2f:99:90:b0:3d:c3:29:12:b4:5e:8c:8e:88:51:e6:
31:06:fb:73:1c:8d:48:83:d1:65:1a:dd:de:80:43:5c:fa:be:
74:92:46:b1:52:eb:9e:61:50:c0:66:c8:25:8e:b2:0f:12:9e:
fa:5a:52:97:88:68:70:1b:5d:67:c7:8b:38:ca:d9:43:22:ca:
35:88:a5:4e:14:f7:70:4b:02:c8:2c:ea:27:8c:02:c4:08:dd:
0e:97:f3:41:a7:a4:12:93:c6:80:c8:1c:11:64:db:e4:d0:6b:
ef:b9:fa:aa
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUCSq2lu2ytFxdmMAzpq/bCn/5gIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMzAxMjI2NDVaFw0yNzEwMjkxMjMxNDVaMDMxMTAvBgNV
BAMTKDMyODc4MkE3RkVBNzhGREU0MDYwQUZFNDQ1MTFCN0YzOThEQjQ1MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmjT/4gbwGP56+whV5gLLBDnzL
6MQ6u/7/ABJ/2623OXlfyTAhE7FIgqu5zgmSLSh0LuoH8guhGwK6m4/gycAz6waF
dj3A57HF7/bAdoJaCtlf56NEVLxBz6dcXJu0ADmrrX6Ft1sul7Ym4p2USrlm2Z8J
/uq1smZ8PHsB0VT3gX4DMuypXuTR6viu3BdW9lz3cxgHpv6Djv3w5CFmV5BFBiap
jwM9jhAdXP1yg7XJWEp+rUN8Yuay1twdrrAFAfqxrSqlanIML7kELx7kdVpx/6FP
WBrufpiQDma2BQ9Mup3ZN1wXNScxzSkcUB1l/QsYzLmeyBbpr04DR9yTFpfDAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUMoeCp/6nj95AYK/kRRG385jbRScwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMyMzIy
ZTMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADBFhgwDQYJKoZIhvcNAQELBQADggEBADTnjMvqku1ARKRp9EtnkXdZJWRi
rTBJC8ajeAuWc72v2kcelXLT1ybYsc28OJ2k9Fm5TqXXUa1hWTihPBYnCGz8PGsl
NMsv2wZvsv0PaftwDSp2P/9Bs6o+rLrGfyhVU283FqsH0uYNz7T9NglnN8eLrR6m
Uj06pOMnXl5k0iU/gtGjQVx/zy2VtTaeTMsUpDwCsy+ZkLA9wykStF6MjohR5jEG
+3McjUiD0WUa3d6AQ1z6vnSSRrFS655hUMBmyCWOsg8SnvpaUpeIaHAbXWfHizjK
2UMiyjWIpU4U93BLAsgs6ieMAsQI3Q6X80GnpBKTxoDIHBFk2+TQa++5+qo=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:32:24 2026 by rpki-client