Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138372e302f32342d3234203d3e20383334.roa
File: 3139332e3136382e3138372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 30Zm9wHHXlBkkeehxsu4hixmaW/Sq5Si0RqsMSw8L1w=
Subject key identifier: C7:56:91:66:87:73:89:89:3A:49:5A:CA:79:2C:98:C0:56:0D:A1:12
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 78F2BF2B11FBF415C036158CBAA684A4BC274424
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138372e302f32342d3234203d3e20383334.roa
Signing time: Sat 14 Nov 2026 07:52:13 +0000
ROA not before: Sat 14 Nov 2026 07:47:13 +0000
ROA not after: Sat 13 Nov 2027 07:52:13 +0000
asID: 834
IP address blocks: 193.168.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f2:bf:2b:11:fb:f4:15:c0:36:15:8c:ba:a6:84:a4:bc:27:44:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Nov 14 07:47:13 2026 GMT
Not After : Nov 13 07:52:13 2027 GMT
Subject: CN=C7569166877389893A495ACA792C98C0560DA112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:d2:83:9d:b9:57:2d:7e:a5:88:0b:7c:51:
d8:51:23:b5:d5:70:05:86:a2:b1:c6:59:31:fe:4f:
94:7c:60:03:e6:27:dd:69:f6:6a:0e:6d:29:0e:78:
61:30:58:4a:70:21:75:1a:8a:70:9d:8b:f1:10:84:
12:05:f5:80:13:3c:8d:c0:e4:6c:ca:b0:74:44:bc:
21:7e:53:7d:b8:e5:44:a3:1a:d1:52:73:c7:72:22:
cd:38:b1:09:ed:a4:e4:68:3b:1c:18:6c:1f:31:7a:
d4:12:22:31:c3:8c:5c:00:3b:c5:54:c1:d2:0d:58:
6c:4a:4a:84:0b:f4:89:0c:1d:70:03:52:e8:b6:aa:
37:d4:30:19:f1:50:59:3f:94:32:ff:ff:2f:b5:95:
3c:0a:e9:0c:77:71:d7:32:0d:17:56:a7:4d:46:a7:
96:46:b9:b3:fa:56:10:cb:f7:a6:75:c1:f2:d5:55:
72:da:89:d1:2d:ae:d6:cd:83:79:54:74:34:e3:6c:
36:ed:3d:06:9b:e4:47:34:bb:4b:12:7a:9c:d0:0b:
b2:c2:e9:b6:f4:ac:80:b2:75:d5:1f:84:90:71:b6:
86:46:ee:82:84:d9:b0:e4:17:3d:d2:22:b9:f5:bc:
07:57:12:4a:09:c0:0f:0e:c8:5d:0d:2d:4d:0e:15:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:56:91:66:87:73:89:89:3A:49:5A:CA:79:2C:98:C0:56:0D:A1:12
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c7:bc:74:47:d9:bb:e2:5e:8e:fe:c8:05:fe:69:6f:87:bb:
08:60:ec:43:8c:34:5d:b0:15:bf:02:dc:26:ac:d2:bf:ce:56:
5c:9c:a8:be:93:2d:ca:42:03:5d:11:df:ea:55:51:06:11:8f:
a6:e1:7d:71:ea:d4:4e:c6:04:e7:f5:53:ea:a7:00:e8:1d:d7:
da:73:75:db:7b:4b:e6:7f:e6:78:e2:a7:24:64:84:d7:c6:b2:
7a:f3:9b:52:77:22:45:d8:55:87:00:cc:d6:9f:8c:64:4c:ce:
b6:69:08:7f:9e:ae:bc:f4:89:15:c1:e0:c5:98:91:bd:b1:87:
4e:b0:9d:eb:24:0d:23:d6:c0:29:48:02:5b:8e:23:54:23:3c:
f3:b2:83:d9:41:be:39:c1:a3:7b:dc:db:f0:81:55:15:b1:43:
ab:ad:45:c1:3d:e4:58:65:09:4d:7e:94:3c:d4:49:12:49:75:
77:f8:9a:d9:56:4a:f9:86:61:b6:4d:1f:ad:fa:ca:40:64:f6:
b2:9f:63:18:c8:7d:c3:6f:ac:fe:48:aa:84:d1:f9:9e:2d:95:
54:8b:7b:31:89:c8:c7:10:b8:6b:7b:ae:37:22:93:c1:29:65:
f2:70:31:0b:89:7a:19:8e:9e:10:0b:d7:09:8e:d7:4d:d8:6f:
4f:a6:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:35:05 2026 by rpki-client