Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32382e302f32342d3234203d3e203633333532.roa
File: 38312e3139392e32382e302f32342d3234203d3e203633333532.roa (raw, json)
Hash identifier: EDPc+a+sY0tztsfTW3G6u4Wl4dcCJplDRGtTdOEkIrQ=
Subject key identifier: E6:81:7F:8D:3F:5F:F3:93:13:79:10:06:BB:E6:E2:EC:C7:C3:57:15
Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f
Certificate serial: 0873E9B2AD1B792C15919E261C132FBBE87EFC30
Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32382e302f32342d3234203d3e203633333532.roa
Signing time: Fri 25 Sep 2026 02:43:59 +0000
ROA not before: Fri 25 Sep 2026 02:38:59 +0000
ROA not after: Fri 24 Sep 2027 02:43:59 +0000
asID: 63352
IP address blocks: 81.199.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl
rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:73:e9:b2:ad:1b:79:2c:15:91:9e:26:1c:13:2f:bb:e8:7e:fc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f
Validity
Not Before: Sep 25 02:38:59 2026 GMT
Not After : Sep 24 02:43:59 2027 GMT
Subject: CN=E6817F8D3F5FF39313791006BBE6E2ECC7C35715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:3e:e7:b2:8c:4b:fc:86:ca:12:57:27:84:
d1:77:4f:61:0d:ed:21:28:d6:39:d7:37:4c:0a:c5:
bc:8d:82:5e:5a:46:06:95:51:ea:36:bd:1b:7b:18:
f0:13:d1:7d:8a:92:33:ba:a4:35:ee:b8:20:79:82:
aa:c4:22:b9:7c:b1:75:e7:de:ed:af:7d:8c:7d:94:
08:e9:0b:ce:39:6b:aa:cd:35:bc:f8:c6:8d:ac:09:
2a:27:8c:f0:c9:f9:7a:15:30:1d:d5:40:be:b5:0c:
07:11:7c:b4:dc:be:2a:64:bb:21:84:42:30:4f:49:
68:85:ef:10:97:93:0e:74:13:7d:c4:6b:6a:8f:3c:
c4:6b:60:52:05:56:e1:a5:45:9e:93:3c:25:3f:b3:
48:64:7f:f8:c8:53:d6:62:49:e9:0b:cf:44:27:04:
67:c5:0d:50:e3:32:88:26:05:6a:83:24:ec:2f:11:
77:30:bc:4d:66:a0:08:70:7a:c4:ff:f1:bf:c5:b9:
28:70:83:c4:37:49:4b:2e:b6:ee:47:73:5f:9e:f7:
fb:b4:80:eb:c4:19:f3:b5:d0:76:e9:e0:4a:ed:60:
d8:3a:a7:8d:5b:1e:f2:95:dc:2d:81:51:e8:57:a4:
aa:f6:2a:a4:1b:a7:5c:3e:48:fe:a9:e6:e8:af:d2:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:81:7F:8D:3F:5F:F3:93:13:79:10:06:BB:E6:E2:EC:C7:C3:57:15
X509v3 Authority Key Identifier:
keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32382e302f32342d3234203d3e203633333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.28.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ad:89:43:cd:3f:a1:81:38:fc:61:6e:f4:c2:bd:51:2a:37:
92:45:7d:12:32:84:de:a4:3a:99:33:47:b0:17:2f:ea:5c:80:
a9:24:78:c7:c6:38:0a:ec:87:69:e8:56:48:a2:6a:8f:57:32:
d9:02:6b:97:43:c8:b2:bf:3e:88:eb:38:a2:9d:bd:5f:3d:0d:
49:4d:49:29:7b:9b:23:8b:8c:aa:01:1d:2d:b2:8e:dc:e5:8b:
de:66:ce:ea:e2:66:40:76:79:ec:7e:b7:e5:9a:c2:08:e9:36:
84:f2:8e:d6:80:bd:86:e9:dc:48:9d:10:04:49:8c:39:bb:6b:
0c:ab:59:da:76:8f:18:75:b1:d9:20:63:db:e1:ba:33:38:78:
e7:d5:68:76:b3:14:96:ce:6e:f6:ac:fa:88:73:b7:c4:1c:f4:
21:fa:ea:14:21:d8:7a:a6:64:26:54:91:75:36:48:e7:f0:36:
48:eb:ea:7a:f2:a3:34:7f:91:45:5c:fc:b9:dc:2f:83:e5:0d:
65:66:80:67:06:eb:d9:ac:05:10:1b:a5:60:aa:f5:22:ad:28:
8e:be:97:38:54:a5:bf:1c:87:0c:f4:e8:a5:a4:f4:d6:75:2d:
1a:e6:9f:07:54:51:44:90:ca:70:62:50:d0:f2:4b:7f:31:21:
41:6b:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:40:47 2026 by rpki-client