Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139342e302f32342d3234203d3e203339333638.roa
File: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (raw, json)
Hash identifier: DPH0dq8YDEtGyRSQJNel2HWBEDDjKDRiZ8kPBGCbV5I=
Subject key identifier: 0F:8D:1C:F6:9E:3D:89:06:3F:F6:EB:D4:A5:F2:C4:28:A6:F1:D2:0C
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 0B9C04B333C19EACBC7B54A5AED34FCF6018C2D7
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139342e302f32342d3234203d3e203339333638.roa
Signing time: Fri 25 Sep 2026 09:49:35 +0000
ROA not before: Fri 25 Sep 2026 09:44:35 +0000
ROA not after: Fri 24 Sep 2027 09:49:35 +0000
asID: 39368
IP address blocks: 194.31.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:9c:04:b3:33:c1:9e:ac:bc:7b:54:a5:ae:d3:4f:cf:60:18:c2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Sep 25 09:44:35 2026 GMT
Not After : Sep 24 09:49:35 2027 GMT
Subject: CN=0F8D1CF69E3D89063FF6EBD4A5F2C428A6F1D20C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:98:f5:19:c6:18:cd:93:95:86:fe:e8:ba:
50:02:80:85:81:20:a1:f8:21:1a:b5:d8:c3:9b:8f:
14:59:d8:f6:7f:99:5c:96:8e:a8:1d:09:bc:a1:11:
80:f0:2b:7b:32:c4:af:bd:0e:a1:5a:5f:07:29:49:
3a:a6:af:8f:57:89:87:7e:0c:d7:29:dd:45:e9:e3:
d5:dd:3d:c7:3d:eb:1f:01:40:81:62:16:36:1f:da:
3c:58:03:11:70:92:eb:1f:3b:c4:e7:0d:d5:ac:aa:
59:74:95:ee:39:43:80:82:bb:3c:75:e1:53:1f:f3:
7d:04:c3:5a:35:b6:20:42:fe:fa:47:71:00:53:09:
cb:79:10:76:ed:1a:10:0b:53:78:b6:16:57:16:04:
b9:2f:22:68:ca:59:59:19:83:dd:6a:1d:28:7c:7a:
a8:6f:92:07:9b:bd:1d:1b:ad:b2:82:75:78:45:22:
86:d5:7a:87:81:3c:a4:70:61:d7:2b:35:08:22:09:
20:23:44:72:dd:9a:30:ba:a5:87:ec:d2:6b:58:ae:
5c:97:75:0c:ff:29:de:d6:58:85:37:74:83:ba:cd:
aa:e1:bf:ea:9e:f8:39:6b:5c:23:85:ba:5b:a3:36:
49:07:37:af:03:18:eb:7b:2b:f0:70:eb:fc:a4:99:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8D:1C:F6:9E:3D:89:06:3F:F6:EB:D4:A5:F2:C4:28:A6:F1:D2:0C
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139342e302f32342d3234203d3e203339333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.194.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2a:97:4a:15:a4:44:66:33:fc:8c:2c:c5:34:34:2c:87:cf:
05:f9:12:5c:8e:03:3a:fe:17:ec:de:86:d7:5d:32:03:70:10:
1b:5d:42:c1:92:39:c2:e6:31:ae:cf:49:6b:13:e1:55:55:54:
bc:0d:50:d1:98:99:32:ce:7d:5e:5b:a1:62:13:ec:4a:17:d0:
d5:12:a6:64:c5:eb:4d:40:45:31:79:44:18:28:0e:3f:06:88:
47:20:78:aa:ef:ed:35:b9:a2:4f:f7:46:ea:69:64:e9:d4:76:
e8:ec:fe:f8:b2:0a:dd:e9:84:d2:99:30:96:c8:90:67:5c:94:
20:1a:01:18:19:2c:c0:2c:41:c6:1a:d1:5b:7e:79:04:44:2c:
68:8f:69:d2:f8:60:6e:c8:5d:05:30:8a:72:5a:bf:59:98:11:
fa:c1:11:44:5d:7d:22:d4:a6:f0:4e:1a:75:d9:68:c4:52:18:
47:07:47:f8:1c:e9:b3:1b:9d:2c:e4:fe:d7:8e:bc:fc:b7:34:
11:4a:f2:b6:bd:29:76:fa:d4:d3:2d:78:8d:1c:11:ff:2b:73:
12:54:5f:38:2b:65:8f:d3:04:1b:61:6e:b0:b2:d0:a8:14:05:
98:13:56:44:59:1f:7c:7e:aa:56:46:4a:0e:79:0a:24:57:1b:
90:b5:ac:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:34:49 2026 by rpki-client