Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e20333937363330.roa
File: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (raw, json)
Hash identifier: u+2585JTvk3QhCvWexMkNxART43r675yedL7x9REYWg=
Subject key identifier: F8:AF:C6:AD:58:04:51:D4:14:D2:1E:FA:32:D8:BA:EC:C9:70:FD:B8
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 48AC5261B5BF322F809D43DA5365D52C7CA86BFD
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e20333937363330.roa
Signing time: Tue 20 Oct 2026 19:49:37 +0000
ROA not before: Tue 20 Oct 2026 19:44:37 +0000
ROA not after: Tue 19 Oct 2027 19:49:37 +0000
asID: 397630
IP address blocks: 194.50.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ac:52:61:b5:bf:32:2f:80:9d:43:da:53:65:d5:2c:7c:a8:6b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Oct 20 19:44:37 2026 GMT
Not After : Oct 19 19:49:37 2027 GMT
Subject: CN=F8AFC6AD580451D414D21EFA32D8BAECC970FDB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:be:21:b5:6e:04:4c:8c:56:9c:34:a6:f2:
45:5c:7c:62:2a:aa:8e:46:4c:b6:9c:c1:31:5a:90:
ca:04:e7:7c:07:c4:e3:f5:d2:a2:8a:2d:0d:2d:db:
57:2d:04:64:a3:62:c1:21:c1:d3:74:68:2e:d6:7f:
9b:b8:9e:0e:07:82:0d:fe:bd:9c:77:2e:17:76:80:
7b:66:97:67:76:99:b9:49:12:c4:eb:32:39:a7:a3:
20:c7:3e:89:79:8c:6c:7b:66:94:fc:f0:6a:2a:cc:
0d:54:ec:f7:6b:c4:81:22:09:72:90:e8:c0:7e:16:
ab:0f:cd:79:24:fb:14:34:7a:aa:03:2c:a4:5f:44:
5b:4d:55:b1:0d:a1:21:ae:cd:fc:75:ed:96:ef:03:
cc:37:d9:c8:98:e2:e4:17:5a:84:0b:d2:79:98:60:
4f:a3:03:40:b3:4c:2b:f0:b1:aa:c3:c2:1d:6f:03:
18:58:6e:16:96:9e:f4:68:6e:b1:d9:bc:8e:2c:bc:
e6:6c:ad:5b:31:98:d9:fd:62:01:7c:a0:fd:83:b0:
15:84:cb:86:1b:10:15:6d:e2:d4:e5:e7:6f:bb:61:
fd:40:c2:45:cf:dd:e6:3f:09:ea:46:de:99:9a:d9:
26:dc:d4:4e:16:ff:20:07:3d:4c:69:e7:d3:af:f2:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AF:C6:AD:58:04:51:D4:14:D2:1E:FA:32:D8:BA:EC:C9:70:FD:B8
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e20333937363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5f:54:2d:13:80:4a:58:c3:e8:4e:1c:b3:32:88:98:9c:6b:
5a:96:76:88:36:dc:a6:cf:e6:1d:7c:67:c4:c8:ab:6a:cc:62:
8b:d1:8d:d5:61:d9:3c:b6:a5:56:db:06:fe:df:87:3d:b3:95:
35:a1:01:da:3c:f0:70:ba:59:ee:20:21:7e:92:52:e7:d2:be:
b9:3c:1f:69:af:16:27:b0:94:6c:33:ba:cb:fa:d7:b7:87:c6:
30:27:8a:b7:48:f1:6c:63:cc:52:7c:0d:cf:53:45:c2:5d:8d:
bb:c8:87:e1:9c:26:45:ba:14:12:24:90:91:3e:1a:52:d2:42:
db:2d:89:b2:dc:98:71:db:21:c7:1e:5a:3d:55:91:6f:2f:92:
84:4d:f2:88:92:05:07:63:5f:f0:90:45:1e:1d:28:57:a4:0d:
fc:35:ae:a6:d6:93:da:1e:12:d5:39:91:c1:be:4a:12:fb:c8:
b4:92:8d:ea:ea:91:79:39:bf:d2:d6:48:79:46:4d:ea:88:23:
19:e7:3c:cc:ce:22:b2:eb:9f:60:15:0b:2c:58:96:2a:83:66:
20:94:d4:24:2c:0f:21:0c:1e:96:b4:4d:04:f4:d6:7f:e8:b1:
df:73:63:96:3e:57:06:a2:b3:a0:40:54:53:da:3f:06:0a:2d:
fc:50:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:09:32 2026 by rpki-client