Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e342e302f32342d3234203d3e203436333730.roa
File: 3139332e32342e342e302f32342d3234203d3e203436333730.roa (raw, json)
Hash identifier: BNPYbbibnrXcaaWfh8lLNxar9l/UN0FRAxH/mM14IKk=
Subject key identifier: 12:09:82:59:FA:67:DB:63:79:2B:75:65:BF:B3:9F:ED:8E:73:21:BC
Certificate issuer: /CN=1f84a2481d280de0a103598276db0c954193c755
Certificate serial: 46E1DA4A2A58969DDCD571DF89B736A86C0FF384
Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e342e302f32342d3234203d3e203436333730.roa
Signing time: Mon 11 May 2026 09:10:00 +0000
ROA not before: Mon 11 May 2026 09:05:00 +0000
ROA not after: Mon 10 May 2027 09:10:00 +0000
asID: 46370
IP address blocks: 193.24.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e1:da:4a:2a:58:96:9d:dc:d5:71:df:89:b7:36:a8:6c:0f:f3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f84a2481d280de0a103598276db0c954193c755
Validity
Not Before: May 11 09:05:00 2026 GMT
Not After : May 10 09:10:00 2027 GMT
Subject: CN=12098259FA67DB63792B7565BFB39FED8E7321BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:aa:9e:62:c4:42:aa:61:b7:ed:8a:d4:4c:
be:f4:7c:df:8e:d0:2b:a2:57:c6:5a:e6:6d:9d:7f:
c3:82:07:2f:c4:5b:35:cf:8e:b8:7f:5f:33:16:44:
75:c9:82:7c:8c:66:3d:97:0c:20:83:58:b4:56:bf:
62:94:7a:13:69:c4:0a:48:26:05:a2:c3:64:7d:8d:
03:f3:29:c0:5c:f0:f5:a8:23:ca:7f:df:f3:42:90:
10:3b:d1:ca:98:b5:06:2b:93:07:1c:0f:f1:85:78:
12:29:58:a7:91:da:4d:af:d4:22:45:d8:b8:66:e3:
46:24:82:a5:68:61:50:a0:d7:6f:23:8c:3b:33:8c:
32:d7:83:51:28:f3:57:74:88:7c:7a:c9:ab:e4:39:
f3:ff:29:83:aa:14:1f:64:74:51:a8:f8:10:df:13:
a5:2a:ef:7e:bd:ed:e5:d2:4d:48:fb:d9:99:4c:4b:
1e:ea:93:5a:de:95:eb:99:b5:fb:c5:80:ab:ce:4f:
b8:9c:18:16:46:68:eb:dc:a9:1a:1f:cd:a3:6c:67:
17:47:72:44:e2:70:27:f7:34:37:54:58:46:3f:9d:
7f:d5:e2:4e:b0:ad:27:20:78:ff:d0:55:76:ab:2d:
ff:42:22:da:49:05:98:19:cc:a7:3a:da:6b:8f:0f:
27:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:09:82:59:FA:67:DB:63:79:2B:75:65:BF:B3:9F:ED:8E:73:21:BC
X509v3 Authority Key Identifier:
keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e342e302f32342d3234203d3e203436333730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.4.0/24
Signature Algorithm: sha256WithRSAEncryption
22:18:4b:06:f9:f5:f2:60:e2:26:97:fb:4f:00:29:30:fe:b1:
99:a6:4e:96:b1:85:7e:7a:85:a5:92:63:a7:86:2d:b6:30:34:
9a:9c:6f:18:ce:e3:ce:43:a9:5d:b5:a0:a5:cf:10:dd:37:c2:
5b:7c:3c:4e:9f:87:f8:07:66:de:e3:26:1f:8c:02:c5:80:da:
6c:4e:d5:2c:57:12:8f:3a:79:c8:9b:9a:c6:fd:da:8c:1f:71:
b8:6b:cb:38:18:8c:9b:9c:43:ee:ec:96:e9:dd:e9:b1:c1:be:
7c:72:f7:5c:81:cf:3e:eb:9d:a6:f8:67:76:c3:15:ed:d3:68:
ef:26:e4:93:84:f3:e5:ce:af:66:32:8f:7c:ba:85:d6:c2:6a:
e5:d1:05:e8:31:6a:40:28:26:ff:07:9a:cd:61:35:51:1c:e2:
76:b7:37:e1:7e:00:d5:39:91:92:f0:d5:4d:3b:83:1d:e2:4b:
82:dc:1d:c1:98:c2:91:0a:a4:31:fb:f4:ac:c4:35:f1:04:9a:
96:be:56:39:92:02:48:5a:b2:82:23:08:a7:5a:b3:51:8f:ae:
af:65:c7:f0:3c:44:14:ae:94:e9:79:07:98:91:c9:d5:9b:08:
8f:9e:c1:be:d5:91:91:0f:01:39:f2:94:52:8a:91:93:a6:b2:
d6:13:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:53 2026 by rpki-client