Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31342e302f32342d3234203d3e20313336373837.roa
File: 3139342e33352e31342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: oFvU9SoGomWXF6rAY4Ewe8EIQ77pjQHBlZV8wfKHw+Q=
Subject key identifier: 04:8A:44:38:20:40:1F:06:3E:5E:8B:FB:68:4F:F5:DD:2C:FB:E4:82
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5D9D9CB5AC7626410EA96ABFAEFF3291C6C28A9A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 12:32:24 +0000
ROA not before: Fri 30 Oct 2026 12:27:24 +0000
ROA not after: Fri 29 Oct 2027 12:32:24 +0000
asID: 136787
IP address blocks: 194.35.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9d:9c:b5:ac:76:26:41:0e:a9:6a:bf:ae:ff:32:91:c6:c2:8a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:27:24 2026 GMT
Not After : Oct 29 12:32:24 2027 GMT
Subject: CN=048A443820401F063E5E8BFB684FF5DD2CFBE482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:06:71:f4:1e:82:d7:9f:63:fc:21:1f:95:
8d:66:0f:ad:be:d8:6c:88:dd:4c:ab:fd:63:65:b7:
b1:5e:95:31:3c:b2:30:0b:76:a8:d5:22:81:6f:0e:
64:0c:41:d6:de:9b:95:90:58:04:33:aa:a4:01:06:
c8:3d:3a:5e:20:3a:71:20:1c:e2:05:4b:83:1c:62:
40:7a:ea:3d:90:9c:ec:c8:35:f5:35:78:27:fc:7e:
6a:7d:0a:d9:f2:41:f9:75:a0:dc:a7:2b:31:04:7c:
75:82:5a:f6:df:9f:9e:af:14:20:d2:30:ca:a5:8e:
e5:3c:83:2c:00:69:ab:b8:81:71:03:9a:07:ff:02:
ee:21:6d:63:f9:7f:b6:f4:4f:45:60:44:7e:80:45:
e1:c0:1d:f3:8a:b7:9e:a1:99:12:f8:c1:7c:a1:26:
79:79:17:3c:bd:9b:79:4d:0f:d4:3d:c1:da:b6:50:
7c:e3:cb:43:b5:04:6c:c9:0c:52:7b:67:3f:8a:dc:
59:ea:cf:3d:8b:5f:66:1a:2b:ff:a2:c4:37:98:20:
1c:db:81:8a:2a:f5:1f:73:19:73:13:76:8a:33:fb:
64:3f:d0:ce:e2:2c:a6:57:3b:c0:02:32:72:da:9b:
e9:d3:f3:d2:fd:3b:a9:71:8a:4e:23:1b:2b:73:2e:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8A:44:38:20:40:1F:06:3E:5E:8B:FB:68:4F:F5:DD:2C:FB:E4:82
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:29:57:73:70:b7:a9:05:7f:f5:90:df:b4:09:f9:e4:84:ef:
5a:24:63:5e:7a:17:59:d6:0a:10:d7:a3:f9:f5:f9:79:57:b1:
50:3d:88:d5:4b:2b:ce:ed:1c:79:c1:e9:13:e0:5e:c0:06:62:
be:af:b5:e1:e9:da:85:d1:21:64:8a:66:85:2c:28:00:2d:c4:
ed:4d:7b:8a:36:4b:ba:c7:15:82:40:d0:6e:9a:d4:a8:89:be:
6b:ab:5f:ff:40:3b:3b:2f:c1:56:09:03:a9:b5:3f:b3:d7:51:
a6:cb:4a:53:0b:66:4b:ac:4a:78:ab:05:05:a4:ba:99:fc:16:
e8:d7:43:04:58:73:58:cb:db:7c:46:60:77:42:40:7b:91:bf:
09:79:19:fd:ed:ab:26:a4:7c:15:d2:69:8d:39:a2:e7:6b:ff:
14:a3:07:a5:77:61:0d:56:17:f5:db:06:a8:f9:9e:ae:ea:32:
67:c8:9b:dd:01:f9:99:00:9c:28:52:56:5c:30:0a:97:07:19:
63:c4:de:98:6c:a4:5f:39:22:74:40:b3:71:6f:01:63:1f:ec:
44:f4:e4:9e:aa:42:7d:32:aa:d9:bb:d0:20:86:e5:ce:2c:14:
6d:ef:55:76:01:42:74:b0:73:c8:b9:1b:93:cc:3d:25:9e:f8:
ef:6c:5f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:12:24 2026 by rpki-client