Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/3139332e3130362e36362e302f32342d3234203d3e203630383630.roa
File: 3139332e3130362e36362e302f32342d3234203d3e203630383630.roa (raw, json)
Hash identifier: 6C7y+fYBD1VfGU5aOUC6YEoLG1qQiLffBU7c4ztP4Ek=
Subject key identifier: CD:C7:99:87:83:A5:7E:E2:56:9B:A8:F7:31:6A:B8:13:F1:45:CD:F7
Certificate issuer: /CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a
Certificate serial: 56E6DD2C0373F4F5591A53F496348185AF69C38D
Authority key identifier: D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/3139332e3130362e36362e302f32342d3234203d3e203630383630.roa
Signing time: Mon 27 Apr 2026 16:45:18 +0000
ROA not before: Mon 27 Apr 2026 16:40:18 +0000
ROA not after: Mon 26 Apr 2027 16:45:18 +0000
asID: 60860
IP address blocks: 193.106.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:e6:dd:2c:03:73:f4:f5:59:1a:53:f4:96:34:81:85:af:69:c3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a
Validity
Not Before: Apr 27 16:40:18 2026 GMT
Not After : Apr 26 16:45:18 2027 GMT
Subject: CN=CDC7998783A57EE2569BA8F7316AB813F145CDF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2f:51:6a:90:c0:08:95:f8:d2:3c:6b:d7:f5:
9b:59:a1:1a:72:de:e8:86:54:fe:be:00:48:8f:83:
9c:4c:bf:f8:b8:c3:2a:1c:9f:5f:b5:52:2a:a2:ae:
d3:18:2b:ce:b1:d3:e3:84:d6:5d:7e:4d:e4:42:5a:
f0:e9:4c:f1:2c:84:b7:aa:f6:ce:fa:f4:c1:9b:08:
1a:01:a7:b1:f2:9b:30:ac:51:6e:39:d3:46:a2:7c:
78:0e:aa:cc:bf:1e:24:73:21:5b:7d:0f:91:ac:ba:
7c:6f:d5:44:38:d0:1f:1e:8b:54:d7:00:9a:63:1f:
39:7d:4b:a1:b7:d0:31:05:bc:72:63:03:b2:2c:13:
a2:16:db:91:2e:17:cb:aa:2b:b6:0d:28:bd:36:be:
25:0d:6c:da:0f:ca:8e:cd:54:55:43:73:46:f7:51:
0c:1a:9e:82:66:26:33:0a:4a:81:f5:37:ef:b1:73:
f8:c1:81:16:71:29:92:b1:f8:87:94:c6:b9:12:17:
44:4d:23:e0:de:98:37:f7:ed:9d:7d:b5:86:a7:02:
dd:b3:eb:3b:a4:14:be:65:4a:78:12:8a:f4:c1:1b:
d0:24:8d:39:c3:d2:04:4e:8b:e5:61:01:af:63:06:
da:a9:09:22:5b:17:a3:b2:75:60:de:98:ed:ae:7e:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C7:99:87:83:A5:7E:E2:56:9B:A8:F7:31:6A:B8:13:F1:45:CD:F7
X509v3 Authority Key Identifier:
keyid:D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/3139332e3130362e36362e302f32342d3234203d3e203630383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.66.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b7:72:08:bd:2b:9f:2a:fd:84:31:fc:bc:ef:31:d3:23:92:
bc:6a:1a:6a:41:36:6e:92:0e:46:0c:6e:47:fb:06:83:59:97:
3f:63:d6:a7:4d:78:81:2e:5f:8b:2c:f8:9e:3b:42:b2:56:5e:
c7:a1:cc:89:a6:02:14:a2:7f:91:14:a4:cb:92:9a:eb:e9:1d:
55:00:2a:86:2c:64:48:e3:58:39:38:8e:17:f8:76:0c:83:49:
69:78:84:ac:21:a2:15:cc:81:50:50:e8:ae:22:54:58:ef:c3:
cf:55:7f:50:06:8d:92:e4:9e:be:09:94:0a:5f:4a:f0:0e:50:
86:4c:fe:39:5c:3c:0f:1e:f4:f8:9c:e5:3c:79:e9:12:48:c8:
2a:d5:07:aa:f4:3d:ff:f7:8c:0d:1c:69:41:86:54:be:fd:a5:
f2:ba:d1:74:8a:9a:b5:78:f8:95:e7:f0:f6:4b:38:33:c2:7c:
d1:a8:6f:38:9b:e9:4c:c5:05:e4:aa:e4:98:f6:97:82:a4:9d:
33:be:62:ef:da:82:60:53:2c:12:c1:ee:6f:ac:ad:16:a1:81:
38:d0:40:85:a5:51:48:70:89:bd:2c:4d:81:37:7a:4e:40:2d:
54:af:f2:19:0e:c3:b0:24:73:80:66:bb:31:c9:6e:2c:05:67:
86:26:d6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:02 2026 by rpki-client