Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31362e302f32342d3234203d3e20323132323338.roa
File: 352e3138322e31362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: cYuvk4Bp5TBYn+TwfUtR/rdXXLiKG6NJZAIvrOW4rIM=
Subject key identifier: D9:3F:82:4D:57:2E:41:95:29:1A:4A:59:7B:04:F4:29:87:AD:46:89
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1ACF150EA57C375640CF2FF819B5D79E01EB57D6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31362e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:14 +0000
ROA not before: Tue 22 Sep 2026 13:24:14 +0000
ROA not after: Tue 21 Sep 2027 13:29:14 +0000
asID: 212238
IP address blocks: 5.182.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:cf:15:0e:a5:7c:37:56:40:cf:2f:f8:19:b5:d7:9e:01:eb:57:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 22 13:24:14 2026 GMT
Not After : Sep 21 13:29:14 2027 GMT
Subject: CN=D93F824D572E4195291A4A597B04F42987AD4689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:e1:bd:01:2c:40:f8:74:f8:46:4b:99:ca:
2f:05:c8:96:72:e8:7a:d5:06:7b:31:1c:f2:a5:fb:
49:ac:b4:c8:5a:76:83:34:3e:e8:9a:be:ec:6a:1b:
16:3b:06:bc:c4:5f:15:2b:3b:e4:f7:c7:6a:9a:d0:
cf:12:90:8b:bd:c4:1b:e3:ca:fa:57:07:9d:af:43:
78:07:f9:61:d6:31:48:3a:04:0d:cd:04:7a:46:c5:
dc:bb:4e:ec:f6:a8:bd:a6:2c:37:e5:96:71:4a:33:
31:b9:55:8e:22:5a:dd:c9:ff:7e:d5:de:90:aa:01:
a7:a9:c3:05:22:3c:a8:b5:b3:67:3e:10:2b:8f:f6:
34:30:a2:8f:5a:00:f4:1e:19:d9:9f:78:64:02:18:
09:d9:83:c8:39:6f:78:95:44:3f:75:41:f9:d6:96:
51:43:d9:2b:75:eb:e6:41:7a:26:f5:cd:a5:88:69:
62:0c:73:7c:b5:f3:65:f0:74:d1:e8:45:3d:d6:c7:
7e:30:ab:f9:31:79:41:44:59:f2:b8:79:b0:5d:dd:
56:36:c0:76:18:2f:b0:3e:10:4e:a2:91:0d:cd:77:
99:62:39:3c:13:69:9e:2c:a7:dc:ee:44:44:d0:60:
87:d5:8f:6e:2e:09:f3:0c:7d:f5:06:d2:8c:72:39:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3F:82:4D:57:2E:41:95:29:1A:4A:59:7B:04:F4:29:87:AD:46:89
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:b3:1b:4f:d2:c1:cf:73:df:66:12:89:f1:32:d5:ff:98:4c:
d0:19:b9:02:50:74:d1:c7:70:99:f5:16:67:4f:67:c1:8c:4e:
da:8a:20:ec:db:b2:f4:f0:66:d3:24:cd:4e:53:11:e5:dd:9c:
2a:64:d6:79:cb:bc:ff:de:67:ba:49:61:85:a7:b0:51:13:60:
8c:e4:6a:ef:ff:58:c7:f1:6e:8f:91:48:7d:9d:5d:61:fc:26:
3b:3e:ea:9d:77:39:a7:1d:8a:4a:a5:19:8e:29:4a:4e:37:37:
19:e4:40:0f:87:21:89:d8:14:02:4e:56:fd:80:75:11:e3:d8:
7d:64:ae:c7:a5:22:fc:4c:9a:f6:a3:c8:b7:bd:fc:4f:8e:d7:
c0:8c:0c:16:9a:94:a5:57:08:52:97:4f:26:ae:07:28:0f:cc:
7d:77:66:73:fb:be:cb:01:82:82:26:3d:02:26:bd:32:cb:ac:
f9:dd:a3:b9:f9:e9:32:31:a5:3b:69:45:eb:5a:52:9b:50:4b:
65:34:5b:42:97:3a:61:65:27:8b:70:fb:2d:61:4b:da:f3:06:
83:3e:4c:8e:d6:22:30:a9:43:cf:bc:69:91:92:24:45:9a:12:
ca:a9:fd:ca:c4:a7:b8:22:68:23:48:09:be:30:8a:4f:3c:4f:
83:a1:9d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:59:37 2026 by rpki-client