Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20313336373837.roa
File: 39312e3231342e36342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Nr/UFiWcxtuQaWU+RUxGMKHHehYuIAMQllqwlBQD+D0=
Subject key identifier: AA:48:29:C4:3D:33:78:78:9A:11:AC:84:14:12:AB:E0:73:4C:61:4C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 70EB66031CF18D840E93CE3A4641B58373878631
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 12:31:44 +0000
ROA not before: Fri 30 Oct 2026 12:26:44 +0000
ROA not after: Fri 29 Oct 2027 12:31:44 +0000
asID: 136787
IP address blocks: 91.214.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:eb:66:03:1c:f1:8d:84:0e:93:ce:3a:46:41:b5:83:73:87:86:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:44 2026 GMT
Not After : Oct 29 12:31:44 2027 GMT
Subject: CN=AA4829C43D3378789A11AC841412ABE0734C614C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:e9:4a:76:a6:35:ec:40:08:73:20:15:a7:
63:e0:3a:b2:28:86:90:21:b7:4c:b3:6f:07:52:48:
1c:99:3a:37:74:1b:d9:b3:54:3a:d4:0c:4e:35:4f:
df:78:db:ec:68:8c:7f:d4:64:3f:95:61:62:b2:e9:
6d:58:8f:90:4a:14:9e:e5:06:03:81:bf:6f:46:d2:
1a:d3:02:09:03:8c:33:90:bc:a1:9b:58:38:29:04:
02:e0:7d:35:ee:43:84:fe:03:59:2c:52:84:6a:17:
5f:60:bd:08:98:72:26:00:52:27:04:ec:1d:ab:1b:
de:a6:ac:21:e8:4e:3f:bd:6d:4f:e2:0a:b4:f1:3f:
9b:d0:18:1d:bd:0e:66:d6:a5:d7:48:ba:8e:b5:d5:
ff:aa:a2:f9:e6:24:c9:48:5c:08:03:91:d0:24:77:
64:04:0a:19:5b:4f:e8:39:4b:61:65:f5:2e:7f:f1:
41:76:42:80:51:f6:e9:71:20:2c:8d:c6:c6:eb:c9:
6d:3b:54:59:22:0b:28:f7:22:9a:a2:b8:95:23:eb:
ac:f2:7f:45:b5:ec:bd:10:d5:fc:2d:79:75:c5:be:
dc:7e:a2:8b:d3:d4:7e:7f:91:58:15:9a:d2:e1:68:
d2:9f:57:20:d0:b9:7f:b4:9f:d7:c0:f1:2d:ee:ab:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:48:29:C4:3D:33:78:78:9A:11:AC:84:14:12:AB:E0:73:4C:61:4C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.64.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:32:d4:fa:0f:1d:bf:18:0f:ac:53:ee:30:0a:06:25:5a:b8:
b3:74:2a:6a:88:7f:7a:f2:a3:87:45:11:a5:0f:9a:66:97:9a:
cf:44:1d:4d:98:07:0b:57:70:80:c6:f8:40:7f:81:69:45:fb:
cc:dd:4c:4a:f4:1b:47:66:9f:ed:7b:92:df:34:75:a8:98:85:
a2:eb:d7:43:cd:14:52:98:9f:7c:8e:f5:22:ea:6b:90:1b:94:
85:9f:81:be:e9:d1:92:20:d9:1e:12:eb:75:04:89:b8:34:72:
d5:02:be:3d:0f:24:90:d0:0e:65:4c:e5:3f:d8:d1:1e:4f:de:
45:96:dd:25:e6:cf:e1:30:53:40:4c:da:ec:fc:e7:f0:5c:a8:
db:47:bc:d5:0e:5c:51:20:66:b4:6f:0e:8e:96:a2:4d:ee:fb:
c8:8c:b4:45:0a:7b:eb:95:e1:f1:38:9b:51:ce:cf:43:c8:fb:
1d:77:93:0c:3d:6b:9f:99:31:c3:e0:6f:cc:6f:ed:4d:d7:ef:
ab:bc:97:de:db:a2:60:57:ca:f5:c1:ad:e3:d9:6d:36:3e:82:
b2:82:17:a8:51:5e:f6:38:5e:1c:9b:95:71:12:86:cc:be:60:
48:e1:fe:88:54:15:44:98:8c:04:70:37:11:44:a5:55:22:10:
9b:d6:b2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:56:22 2026 by rpki-client