Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233342e302f32342d3234203d3e20313336373837.roa
File: 3139342e33342e3233342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: TGLhtqAAYRs7WIB/FmWTm9HwV5hXOy6UaiUcjwNVC94=
Subject key identifier: 68:C3:0B:F5:2D:16:34:6D:A3:0D:27:56:29:5A:FE:F0:FE:79:C2:43
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 35A681807BB8414C62D66501EEA837801C1166C6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 12:32:07 +0000
ROA not before: Fri 30 Oct 2026 12:27:07 +0000
ROA not after: Fri 29 Oct 2027 12:32:07 +0000
asID: 136787
IP address blocks: 194.34.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a6:81:80:7b:b8:41:4c:62:d6:65:01:ee:a8:37:80:1c:11:66:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:27:07 2026 GMT
Not After : Oct 29 12:32:07 2027 GMT
Subject: CN=68C30BF52D16346DA30D2756295AFEF0FE79C243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:d9:d9:e5:ae:94:fc:49:d3:42:12:a0:f1:
55:9a:27:a3:80:1e:1a:0f:e2:d6:1f:47:10:7b:a1:
a0:b5:f9:20:df:0b:46:17:60:c8:ef:78:c3:7b:9e:
77:f7:7c:a4:2a:ed:e8:f7:89:78:4a:fb:29:3f:6f:
24:21:e3:ce:89:48:97:ef:14:df:4b:46:d9:76:2e:
75:6a:a9:45:24:9b:f2:97:25:a0:ed:d3:54:1b:6a:
8f:a3:e2:d5:8e:a5:43:1d:44:62:3f:a8:b3:30:11:
15:f9:d2:50:79:f1:14:55:54:bc:7f:5a:32:cc:f1:
bf:8b:2f:01:29:88:ee:de:fe:d9:6f:0a:b9:72:ee:
15:0f:9a:66:8a:29:2e:1f:9c:18:a5:ae:ec:54:2c:
35:da:73:66:2f:c8:cf:0d:52:97:ca:a4:15:4e:19:
14:85:fb:ac:46:04:4b:ca:55:b1:10:a3:63:94:e5:
d9:b9:d2:29:47:a0:9a:22:b3:51:73:36:2d:a0:0b:
92:cb:b7:28:ba:bd:8a:7e:7d:a4:c6:2b:5b:20:1d:
00:bd:26:d9:73:13:01:ad:0c:9e:9a:6a:15:2b:db:
79:0e:9b:90:61:e4:cb:94:ea:b0:e4:d5:d8:e4:99:
e4:ab:30:95:fe:43:4e:59:59:2f:2e:78:5b:30:b2:
9f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:0B:F5:2D:16:34:6D:A3:0D:27:56:29:5A:FE:F0:FE:79:C2:43
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.234.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c2:68:f1:88:99:12:de:c7:b4:1d:db:2b:84:af:b2:db:0b:
90:65:c4:47:86:1b:2c:d8:be:70:89:44:29:21:f5:24:0b:49:
d5:cf:08:12:1d:2f:b2:b3:89:ed:2b:da:20:77:60:8c:c9:bb:
a5:f6:de:0f:11:4e:47:ff:5f:ac:ac:bf:73:83:d0:23:c6:e3:
83:b9:fe:45:4f:bc:4e:4f:52:95:a5:a8:e6:79:71:d1:9c:32:
57:96:63:97:06:38:5c:88:22:3b:03:19:22:19:69:dc:d1:ce:
e9:96:ca:bd:10:50:a9:34:87:2b:2e:51:ed:3b:22:33:6d:ca:
b7:86:90:a8:72:0f:6a:55:03:ac:f1:73:cf:b1:72:ac:07:a9:
38:5f:85:5d:79:f2:a2:4c:70:53:bf:a4:e3:95:89:88:df:06:
67:28:ae:78:9e:d2:60:10:a3:00:6b:f8:ad:d0:2a:2f:47:aa:
77:4f:d3:34:db:ba:08:df:cd:76:7b:8b:6c:79:ef:21:c3:2b:
56:7e:aa:4f:42:bb:a6:7c:b8:22:a8:94:ad:10:e1:28:14:4e:
e1:9a:21:ab:82:86:b9:8e:22:b5:f9:0c:08:e0:33:9a:c7:65:
b1:e1:90:c8:8c:a2:94:9f:c6:c5:7f:51:d3:1c:4b:9f:9c:c7:
2c:11:5e:6c
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUNaaBgHu4QUxi1mUB7qg3gBwRZsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMzAxMjI3MDdaFw0yNzEwMjkxMjMyMDdaMDMxMTAvBgNV
BAMTKDY4QzMwQkY1MkQxNjM0NkRBMzBEMjc1NjI5NUFGRUYwRkU3OUMyNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1dnZ5a6U/EnTQhKg8VWaJ6OA
HhoP4tYfRxB7oaC1+SDfC0YXYMjveMN7nnf3fKQq7ej3iXhK+yk/byQh486JSJfv
FN9LRtl2LnVqqUUkm/KXJaDt01Qbao+j4tWOpUMdRGI/qLMwERX50lB58RRVVLx/
WjLM8b+LLwEpiO7e/tlvCrly7hUPmmaKKS4fnBilruxULDXac2YvyM8NUpfKpBVO
GRSF+6xGBEvKVbEQo2OU5dm50ilHoJois1FzNi2gC5LLtyi6vYp+faTGK1sgHQC9
JtlzEwGtDJ6aahUr23kOm5Bh5MuU6rDk1djkmeSrMJX+Q05ZWS8ueFswsp8JAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUaMML9S0WNG2jDSdWKVr+8P55wkMwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzQy
ZTMyMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMIi6jANBgkqhkiG9w0BAQsFAAOCAQEAUMJo8YiZEt7HtB3bK4SvstsL
kGXER4YbLNi+cIlEKSH1JAtJ1c8IEh0vsrOJ7SvaIHdgjMm7pfbeDxFOR/9frKy/
c4PQI8bjg7n+RU+8Tk9SlaWo5nlx0ZwyV5ZjlwY4XIgiOwMZIhlp3NHO6ZbKvRBQ
qTSHKy5R7TsiM23Kt4aQqHIPalUDrPFzz7FyrAepOF+FXXnyokxwU7+k45WJiN8G
ZyiueJ7SYBCjAGv4rdAqL0eqd0/TNNu6CN/NdnuLbHnvIcMrVn6qT0K7pny4IqiU
rRDhKBRO4Zohq4KGuY4itfkMCOAzmsdlseGQyIyilJ/GxX9R0xxLn5zHLBFebA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:32:29 2026 by rpki-client