Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e20333935303932.roa
File: 3139342e36302e38372e302f32342d3234203d3e20333935303932.roa (raw, json)
Hash identifier: NfFx11ViUMPhib0AaiTPxcgDTxpuY5OGTgzerieWvV0=
Subject key identifier: DC:5E:98:27:C9:B1:D5:F1:63:47:D3:33:80:7A:EB:4B:45:C0:D9:79
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7B0B1E32A777C4F6FF402AEA15858179CD6AB7D9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e20333935303932.roa
Signing time: Fri 30 Oct 2026 12:32:05 +0000
ROA not before: Fri 30 Oct 2026 12:27:05 +0000
ROA not after: Fri 29 Oct 2027 12:32:05 +0000
asID: 395092
IP address blocks: 194.60.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:0b:1e:32:a7:77:c4:f6:ff:40:2a:ea:15:85:81:79:cd:6a:b7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:27:05 2026 GMT
Not After : Oct 29 12:32:05 2027 GMT
Subject: CN=DC5E9827C9B1D5F16347D333807AEB4B45C0D979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:86:15:06:d2:01:1b:c2:71:4c:39:a0:3e:
a6:5d:e9:ad:7c:dd:ac:3a:4f:8b:0b:6a:e6:9f:75:
2f:4b:70:90:8f:7e:0b:c9:88:2a:34:8c:62:be:c8:
be:19:24:23:67:6e:2c:4b:29:52:4f:e3:e7:b8:d4:
ab:83:96:48:05:de:68:e7:19:44:6b:29:17:f8:e3:
ff:4b:ba:92:95:14:cd:76:14:f5:ac:04:7a:c4:36:
cc:44:3d:6e:58:4e:4b:a6:69:ac:6f:41:99:40:d2:
1e:24:10:6a:b1:e7:f6:8b:56:b9:f9:5c:04:3c:5d:
08:59:ad:a6:a7:50:69:83:43:7e:5b:c3:3c:ea:a3:
54:27:fe:45:43:ce:08:f9:81:e6:eb:53:53:44:45:
60:68:0d:5a:df:0b:e7:af:de:3e:4d:3f:4b:c1:3e:
18:c1:65:94:90:d3:2d:23:b3:a8:b7:2a:ec:d7:cd:
48:2c:3c:eb:d7:64:ae:4a:e7:e4:d1:f7:67:4c:5c:
03:53:c6:25:e8:3c:38:91:b3:7d:77:96:de:aa:28:
f1:ae:e7:c6:75:18:9a:11:b4:ca:fd:2d:dc:72:ea:
51:b1:34:09:d3:1d:56:1e:06:99:2b:5b:70:24:e0:
96:10:35:8c:6b:8b:20:3f:1d:47:d4:16:c8:16:72:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5E:98:27:C9:B1:D5:F1:63:47:D3:33:80:7A:EB:4B:45:C0:D9:79
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e20333935303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.87.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:40:34:ca:1b:70:b5:bb:a4:e9:67:b0:ba:d6:cf:7b:16:a6:
5f:3c:02:45:76:b0:5e:1e:f7:50:50:9b:d8:bf:d8:67:f2:14:
fa:95:a8:db:fc:f5:cb:0a:21:63:52:0e:91:8b:d9:3e:47:25:
b1:80:09:0a:55:ba:7c:96:f9:36:54:b6:36:3d:0b:b9:0f:15:
f5:fd:1b:2b:31:3d:86:93:ed:f9:1a:08:75:6c:23:83:b1:2f:
b9:48:63:81:56:1a:da:47:0d:1d:e0:25:20:6b:13:d6:37:c9:
f0:79:b1:42:ea:8a:33:3a:98:af:9b:a8:a8:e6:79:f4:90:15:
4d:b5:eb:ea:c4:1d:e1:de:ab:02:5e:31:65:1a:a5:bd:69:a2:
f2:ad:3e:39:4d:7c:e6:e9:98:f2:76:12:c5:33:e0:a1:47:ae:
d9:ca:94:4f:9d:bd:9c:a3:e2:74:a6:00:33:8a:83:e8:5a:c2:
14:5d:a3:33:54:10:20:28:be:f6:c6:15:07:43:03:8e:c7:d3:
e0:b1:b8:be:6b:c5:c2:56:0b:35:d5:f5:d1:0d:ad:c5:2e:81:
e3:01:54:1b:ad:3c:43:3b:13:ff:bc:05:da:84:44:20:06:e4:
d7:1b:99:7f:a1:7c:d9:14:b3:06:aa:c1:bd:aa:d3:a3:b6:fa:
06:02:1d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:21:32 2026 by rpki-client