Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e203432383331.roa
File: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: DVV+/2t2q4F/UwYf2BwA2+sNCvS3U0sf946czL0uGuw=
Subject key identifier: 9E:03:BC:03:53:81:4B:50:16:1E:55:26:9A:5A:97:8C:7A:F1:DB:DC
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 601058496AF6AF6943BF6AC03F1AE566C09BE4C0
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e203432383331.roa
Signing time: Fri 24 Jul 2026 12:49:14 +0000
ROA not before: Fri 24 Jul 2026 12:44:14 +0000
ROA not after: Fri 23 Jul 2027 12:49:14 +0000
asID: 42831
IP address blocks: 194.31.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:10:58:49:6a:f6:af:69:43:bf:6a:c0:3f:1a:e5:66:c0:9b:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jul 24 12:44:14 2026 GMT
Not After : Jul 23 12:49:14 2027 GMT
Subject: CN=9E03BC0353814B50161E55269A5A978C7AF1DBDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:0a:71:eb:69:36:d9:71:21:d1:c1:0e:ca:
3a:12:35:98:d0:8e:da:2b:6f:d8:12:66:d1:10:42:
ed:37:4a:96:77:ed:da:0f:4e:e7:96:8a:37:ef:62:
96:a1:41:4b:86:1d:99:ed:a6:34:7f:4e:24:14:d7:
8f:06:3d:50:ce:b4:7b:b6:a2:24:c7:fa:6c:74:60:
99:3d:b1:b1:2e:82:d3:e1:e7:66:ac:5e:5c:87:e7:
45:06:a7:cf:93:f6:6e:1d:7b:ce:69:96:2f:45:e4:
d0:8b:72:86:4d:33:31:1b:7d:fd:3b:71:f3:56:64:
68:2f:1e:83:b5:96:7b:16:dc:8c:06:74:2d:a4:1e:
bc:fd:1e:7a:3c:68:8f:e2:7c:62:47:53:86:64:9b:
8b:50:ec:ae:1e:6e:b3:fb:e4:d5:48:33:40:d8:7b:
f3:4e:bb:e9:3d:38:98:0e:c5:78:07:94:78:0c:b0:
0a:db:aa:9b:14:33:fa:f8:16:8e:39:f4:53:3c:9a:
69:a4:97:f9:13:f6:be:b5:71:87:3f:a4:78:f2:f8:
41:c4:53:f7:5e:91:77:8b:82:4b:37:24:08:13:22:
fb:79:4c:51:2d:f4:99:c9:5c:5b:d8:9a:f8:45:cc:
d8:5c:a1:3b:3c:4b:51:80:7f:51:38:46:c4:11:00:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:03:BC:03:53:81:4B:50:16:1E:55:26:9A:5A:97:8C:7A:F1:DB:DC
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.197.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ea:79:1e:93:5a:90:f5:35:2a:58:b8:13:05:15:a9:84:a6:
a1:99:ac:d8:ef:73:e2:01:bb:77:c6:db:da:1b:75:a3:88:f5:
b7:04:81:5c:3d:38:2f:5c:38:40:3b:24:10:46:d2:b2:3c:4c:
e7:58:af:e4:7f:bf:f3:d0:b6:5d:f6:93:38:c3:f6:f6:74:b5:
5f:23:d0:f0:1f:44:c0:ab:3b:7e:a4:1b:58:58:a8:70:e7:f2:
29:88:8b:1a:aa:c4:27:7f:0a:e0:29:34:cc:a5:98:4d:fd:57:
39:35:4c:12:00:68:61:b4:63:81:8c:84:ec:42:dc:d2:13:05:
c7:13:ed:47:bb:e4:b3:ae:30:c8:e0:40:42:5c:8a:99:d7:b9:
42:2e:31:d5:9e:f4:a4:72:79:b8:f3:9f:37:fa:82:d3:c5:d9:
95:1c:9f:ef:81:11:fd:68:d9:bd:75:9c:07:ee:8a:ff:a8:4c:
3d:eb:f9:1c:f1:53:25:1d:4d:6c:30:16:29:aa:e1:63:1d:8e:
4a:a5:ea:93:dd:ff:f4:96:0c:d4:2b:b8:ca:9a:62:5c:5f:c9:
d5:68:0b:15:f1:a3:80:43:b3:9d:b4:4b:c0:0b:58:97:eb:b2:
1b:4a:24:62:07:cc:d0:e0:23:bf:74:8a:80:10:03:f5:17:65:
c9:57:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:29 2026 by rpki-client