Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38362e302f32342d3234203d3e203632323430.roa
File: 3139342e36302e38362e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: Bx/+PzTvv8yEzcqlu8r6yweSwIp89JMGhtalaudaHyU=
Subject key identifier: 67:41:7B:1E:90:41:DE:32:E7:F0:6C:A4:23:EF:35:E2:22:70:A7:42
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 04E933A09822A42D21DF4D7D1B9437B46CB6A820
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38362e302f32342d3234203d3e203632323430.roa
Signing time: Wed 08 Jul 2026 10:26:05 +0000
ROA not before: Wed 08 Jul 2026 10:21:05 +0000
ROA not after: Wed 07 Jul 2027 10:26:05 +0000
asID: 62240
IP address blocks: 194.60.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e9:33:a0:98:22:a4:2d:21:df:4d:7d:1b:94:37:b4:6c:b6:a8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 8 10:21:05 2026 GMT
Not After : Jul 7 10:26:05 2027 GMT
Subject: CN=67417B1E9041DE32E7F06CA423EF35E22270A742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:83:1c:9f:c9:cd:f9:5e:33:aa:c7:08:04:
a6:ed:28:7d:fa:fa:54:e0:4e:af:36:8e:40:a1:c0:
da:d8:c4:79:d3:bb:37:6e:3f:d8:7a:5e:ab:48:ec:
74:50:65:c0:56:47:74:e1:89:90:d1:aa:f0:2f:0b:
84:0e:c6:9d:e5:5e:4e:50:db:41:d0:e4:15:a3:f0:
97:e2:b9:a2:54:c2:45:64:26:93:05:ea:56:37:e7:
eb:55:d8:4d:78:c6:9e:ff:cf:df:35:35:0d:61:62:
fb:41:d0:38:a2:62:b6:a8:e8:ae:69:9a:46:2a:95:
4f:cb:54:32:37:a0:76:33:a0:27:06:40:b3:86:f1:
66:58:9c:e6:3d:27:f7:e7:27:d7:3b:34:20:90:f1:
5b:75:8b:65:61:6f:b9:bc:20:7f:3b:06:fc:d3:08:
08:39:85:f6:84:e5:23:5c:db:21:75:0c:8c:68:c9:
56:25:5e:79:25:60:b1:ba:ac:57:6c:7c:60:53:20:
a0:61:39:9d:b4:d8:ed:1a:a6:01:40:dc:9b:b2:de:
9a:a1:ed:e5:56:be:a1:d2:f6:79:15:85:a1:2d:e2:
81:e0:7d:3e:57:7d:62:c8:0b:73:2a:f1:2f:d6:8f:
b0:11:8a:4e:b2:a1:53:a9:a4:75:e3:96:9c:f7:06:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:41:7B:1E:90:41:DE:32:E7:F0:6C:A4:23:EF:35:E2:22:70:A7:42
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38362e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.86.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:89:76:f5:30:2b:c2:f9:04:01:df:0f:1f:9c:9a:6a:59:08:
d1:51:de:3a:a9:94:a5:05:4a:07:13:d5:42:82:33:3b:e4:04:
2c:62:df:8e:61:41:8c:c5:c3:28:e4:44:60:b4:e5:9f:25:28:
6b:38:f1:eb:4b:4c:4b:9d:07:fe:d0:b2:d1:e2:45:b5:9e:66:
bf:20:2d:ab:ba:98:a8:09:29:14:d0:a6:c2:fb:13:00:3b:5a:
c3:14:8b:33:eb:cf:58:6b:31:af:1e:6f:10:1d:ba:d6:cc:41:
60:e2:03:2f:be:bf:8f:83:18:d8:12:51:ad:ef:84:6f:09:99:
29:d7:5a:c2:d4:78:a1:ad:e0:d4:06:d8:f4:ea:f1:7f:7a:03:
08:d9:e9:bf:61:08:98:c4:9b:e3:35:b9:ca:5b:6e:3f:4d:a1:
a6:98:6a:97:94:ff:23:57:98:c8:0a:cc:c7:f2:71:cb:ca:77:
f7:c7:5f:83:9b:8f:92:6c:0b:6d:a5:bc:b4:20:78:6c:71:ce:
70:c0:c4:ac:2c:1a:f8:dc:77:93:24:fe:fa:13:4e:be:bb:b9:
5f:bf:97:ec:95:f2:40:90:b7:7e:ea:e7:67:8e:8a:e4:e5:4b:
43:ff:9a:da:06:cc:0b:d6:81:38:85:2b:63:52:68:bb:c5:fb:
2a:ba:27:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:37 2026 by rpki-client