Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e203534323532.roa
File: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: S6i9RVlfNwjI2ZfSBw+GgK1pcQIbzEdp7qut1eHkW3A=
Subject key identifier: 95:97:EC:57:B9:9D:7A:BF:F0:02:89:54:45:78:68:25:D7:AA:DC:E8
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 700D3271EE78EE869A46FDA1A73B362E27FDE141
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e203534323532.roa
Signing time: Tue 20 Oct 2026 19:49:37 +0000
ROA not before: Tue 20 Oct 2026 19:44:37 +0000
ROA not after: Tue 19 Oct 2027 19:49:37 +0000
asID: 54252
IP address blocks: 194.50.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0d:32:71:ee:78:ee:86:9a:46:fd:a1:a7:3b:36:2e:27:fd:e1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Oct 20 19:44:37 2026 GMT
Not After : Oct 19 19:49:37 2027 GMT
Subject: CN=9597EC57B99D7ABFF002895445786825D7AADCE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:e6:69:52:66:d6:7e:a7:25:d3:d6:2a:7f:
4a:fc:e4:6e:d5:74:65:9f:f1:25:8d:ab:49:72:c9:
2c:66:1f:bc:21:de:75:2c:60:bb:7a:ba:69:43:ac:
a8:eb:85:eb:18:98:ba:22:30:40:10:09:ba:3a:0a:
30:f7:27:ce:8d:d0:3f:05:24:de:c0:73:c4:96:1f:
72:94:14:d2:ba:25:ce:8a:7f:7e:a9:98:e1:52:ee:
fc:19:f3:2d:ee:58:c3:34:2f:49:a2:82:03:dd:d3:
1a:bd:f2:5c:23:db:27:14:43:35:49:e5:6d:ed:a7:
40:67:e8:5c:31:71:cb:f8:16:22:7b:c0:e7:c7:c1:
5a:87:a9:87:bc:9f:f1:29:a4:8c:7c:6c:9e:dc:05:
21:4b:7d:b3:18:6a:75:46:c9:ce:c5:7c:33:f1:6f:
fe:d2:21:0e:34:c7:35:1a:c7:0e:45:cf:d7:70:fe:
b6:2e:e8:7b:9b:48:7d:d1:12:f4:69:81:15:05:27:
18:69:79:dd:8a:86:9c:ad:78:e2:36:51:4a:83:aa:
33:2c:3f:3e:4a:40:9e:03:a2:56:49:e5:2e:07:70:
f2:88:d4:7d:d7:13:f0:f5:e8:48:62:66:81:6a:55:
fe:14:ce:d8:07:c6:1f:93:f7:c3:95:52:ad:be:fb:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:97:EC:57:B9:9D:7A:BF:F0:02:89:54:45:78:68:25:D7:AA:DC:E8
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
30:aa:29:e5:a8:e0:ef:d4:1a:07:96:e4:66:f4:15:29:29:60:
98:83:85:e2:c8:06:25:f5:ea:57:33:cc:89:8b:9f:58:0d:3a:
1a:63:2a:18:ca:c9:38:32:11:ca:47:53:06:ec:ed:48:26:0a:
77:9b:fd:ac:1d:79:a0:01:76:49:b5:a4:27:b2:27:1c:d4:69:
24:26:f8:c0:4d:e7:91:f6:12:cb:0a:e2:af:ae:65:32:1e:7c:
e6:fd:2b:27:18:78:a9:21:14:56:af:3a:df:4e:ec:83:3e:a3:
98:88:7b:6d:31:ed:28:f6:a1:3f:e1:b9:69:f6:9a:3f:cf:bb:
05:ee:07:60:4b:10:cb:65:54:cb:4b:22:1c:03:81:03:b5:5b:
ee:41:08:73:e7:39:3d:f4:a9:5b:7a:bb:d2:5f:1f:08:5c:cf:
19:f7:f0:2a:2d:6b:b0:be:76:5a:88:24:39:e4:21:32:90:fb:
a6:cb:35:a6:6c:fb:fb:01:cb:fa:6f:73:b5:0f:14:47:a9:ef:
0e:02:26:c3:81:36:a2:d4:1c:33:16:68:ce:92:d5:b0:07:ed:
61:9a:4d:5d:83:da:b4:58:1f:a1:9e:15:d7:57:ba:07:24:d4:
64:fc:88:b4:74:08:41:f4:cb:8d:e9:5c:51:5b:8a:4a:0c:43:
9a:b9:cc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:23:56 2026 by rpki-client