Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36372e302f32342d3234203d3e20313336373837.roa
File: 39312e3231342e36372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: C/R8xKGn9J2AzF5otjlf8LlvyBMDnmFnnQBSu3SwJ78=
Subject key identifier: 30:BF:54:3C:89:F3:04:54:EE:5E:AE:2A:92:A7:7B:00:4D:B9:24:FF
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 68BE240637C0F01A8C1AE22BAD17D7292034F2B7
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 12:31:51 +0000
ROA not before: Fri 30 Oct 2026 12:26:51 +0000
ROA not after: Fri 29 Oct 2027 12:31:51 +0000
asID: 136787
IP address blocks: 91.214.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:be:24:06:37:c0:f0:1a:8c:1a:e2:2b:ad:17:d7:29:20:34:f2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:51 2026 GMT
Not After : Oct 29 12:31:51 2027 GMT
Subject: CN=30BF543C89F30454EE5EAE2A92A77B004DB924FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:2b:3d:e8:9d:cc:04:20:45:09:07:99:ee:
77:b7:bb:44:bb:3f:7a:69:1d:36:40:b5:20:6d:e3:
12:2d:11:bf:3b:c9:e9:22:d0:8b:bb:eb:a3:af:78:
09:1d:57:94:62:7e:70:71:5d:ed:be:77:da:d5:61:
b6:ae:5d:9a:64:19:ed:1d:57:3c:73:b9:76:dc:d0:
f2:58:a8:82:f9:d8:75:e7:d9:94:32:74:bd:af:ba:
c4:6b:c6:62:4d:c0:16:fd:13:37:07:c2:f1:6b:aa:
e9:89:fe:6c:67:3d:c0:4e:d1:55:e0:68:b3:72:9b:
b5:2a:e3:2f:47:39:91:e4:7a:8d:aa:66:16:3c:82:
6e:a2:09:26:67:5b:28:29:58:60:a5:ed:0c:c6:8b:
a1:70:1d:2a:ca:39:ab:89:c9:4f:73:49:e6:e9:c0:
84:5e:10:72:df:a7:f9:26:f9:39:33:2a:76:d5:b2:
e2:1e:df:2c:1e:f1:28:36:eb:88:b0:ae:bc:08:6d:
c1:6b:5c:ad:90:31:ff:3a:0c:2f:76:bf:b7:a0:f2:
87:56:c6:f1:24:09:fb:8b:ae:0b:40:9b:78:8c:ae:
18:87:c0:7d:b5:de:51:b4:17:43:d5:64:c0:04:51:
ee:63:30:cb:26:94:f0:96:4c:2d:35:00:7c:93:dc:
b9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BF:54:3C:89:F3:04:54:EE:5E:AE:2A:92:A7:7B:00:4D:B9:24:FF
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.67.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:81:98:82:1e:33:af:d5:5c:50:98:6a:25:f0:ac:0d:24:67:
76:73:9f:fd:18:ad:aa:aa:8b:ef:9a:e5:4e:bd:94:9d:7d:de:
51:b4:8c:3d:96:33:cc:5f:2c:ee:49:79:6a:1b:4c:48:29:96:
0b:6d:0d:3a:87:ce:3e:61:a1:49:2f:0f:b4:94:12:b6:a0:f4:
ee:bb:03:28:2c:3d:b1:ed:cb:8e:ce:f3:f1:7b:d4:c8:55:41:
a6:01:a5:22:47:40:7c:7e:ab:a2:86:76:3d:ee:53:7d:ae:41:
63:bf:24:83:cf:f4:f4:db:a7:08:bb:35:01:50:f3:1c:83:f2:
d8:b6:1f:ea:b3:cc:99:93:6d:7a:db:51:af:df:e9:8f:4c:28:
3b:92:4d:85:12:e1:57:c9:6c:91:5a:1f:92:2f:9d:bf:b1:74:
a0:ed:cd:11:e2:e0:9a:1a:57:88:0a:e9:54:a8:8b:73:b4:e8:
a2:5e:62:79:48:0c:2d:3a:d4:02:b0:2b:d4:00:94:62:c7:df:
0a:1b:5d:66:49:1a:35:13:f4:55:1b:f0:64:db:1b:d0:34:c2:
5a:4b:1c:fd:41:69:e5:3a:21:51:b1:75:64:ae:d5:25:f6:bf:
a5:e3:09:e9:75:85:64:cc:7f:d7:65:23:82:9f:eb:23:39:03:
93:93:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:23:49 2026 by rpki-client