Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e203634323637.roa
File: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: JUK2rKBRg8+IStreov5pgBUhe2D4dOYzQw0GAtyaEzg=
Subject key identifier: DC:52:DA:36:1B:1E:B6:9E:11:5E:46:BF:93:F3:0C:B5:93:CD:EA:29
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 539BBBB827E5D21B280EC21B7DD0ABD379141BF3
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e203634323637.roa
Signing time: Tue 20 Oct 2026 19:49:37 +0000
ROA not before: Tue 20 Oct 2026 19:44:37 +0000
ROA not after: Tue 19 Oct 2027 19:49:37 +0000
asID: 64267
IP address blocks: 194.50.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9b:bb:b8:27:e5:d2:1b:28:0e:c2:1b:7d:d0:ab:d3:79:14:1b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Oct 20 19:44:37 2026 GMT
Not After : Oct 19 19:49:37 2027 GMT
Subject: CN=DC52DA361B1EB69E115E46BF93F30CB593CDEA29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:79:f0:40:2f:73:2c:e4:49:a8:3a:e3:4b:
90:b9:21:67:c5:f4:23:51:bc:49:07:8d:58:ae:98:
da:a8:85:16:30:34:16:98:ea:07:a3:2c:3d:07:9f:
17:7c:76:e5:9b:e0:f3:90:32:04:57:a8:1c:67:69:
dc:c1:44:72:54:c0:1e:41:09:1c:21:52:da:22:41:
ca:cc:7c:77:10:95:46:7f:e2:44:f8:22:fc:73:4e:
69:c0:1f:78:6a:8c:22:32:eb:8b:b6:85:38:98:20:
2a:6a:e3:cb:03:72:be:a7:1a:9a:fa:46:11:c7:3d:
47:f9:a2:ee:07:f2:be:2a:43:d2:32:63:36:27:27:
00:4d:ae:97:d6:70:e4:5a:1d:6a:ca:cf:82:2f:bd:
26:5d:13:60:ef:97:8a:1a:a2:ac:17:27:e1:c2:69:
9a:93:d8:17:e9:83:80:93:0a:f5:de:3d:d0:8d:e4:
4b:5c:f2:ec:38:d4:e8:ef:5c:9c:44:09:f3:31:6e:
f8:7a:ad:13:c1:24:82:2f:32:a0:59:d1:e1:07:c6:
8f:db:84:2d:ce:ef:e6:e6:2a:d5:31:09:74:8c:5d:
39:42:69:79:6e:f3:4b:fa:f2:f1:42:ff:d8:2e:ae:
dc:7e:7b:84:54:ef:9b:17:56:2f:7c:6a:d2:ca:5f:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:52:DA:36:1B:1E:B6:9E:11:5E:46:BF:93:F3:0C:B5:93:CD:EA:29
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e35302e312e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
59:9d:f4:96:31:11:46:ca:1a:0c:5e:a1:1b:19:f5:04:62:9f:
bc:a1:28:94:b3:01:fb:ad:1c:64:f0:95:44:14:71:41:b8:1f:
8e:29:65:c6:14:52:f0:0e:57:1b:da:8e:98:be:9d:06:ef:11:
9d:b2:3b:02:8f:45:44:7a:c2:b0:9c:f0:69:43:d7:fe:ed:fb:
76:72:29:4a:d2:71:b8:9d:d3:4a:77:5b:b3:ac:fd:d3:ed:46:
fa:9e:e4:e8:36:a5:23:34:c2:66:04:61:39:54:b4:1b:3a:51:
76:2f:b7:c7:f8:ad:09:b2:9e:92:8f:e0:e8:cc:2e:4d:9d:95:
99:ea:c4:6d:94:2d:c8:55:27:8f:e4:37:bf:4a:05:45:3e:7d:
a8:a3:ed:f0:7b:30:c6:7c:21:9e:ee:2a:ff:b8:7c:bf:92:94:
1b:8a:87:a7:f9:1f:d5:3b:78:b3:ea:2f:41:a8:16:c2:09:ef:
d5:38:00:c6:aa:0d:d2:e5:4c:de:06:c9:50:14:ba:01:87:ea:
27:fe:e9:c6:ce:00:33:f9:e9:bd:00:f4:3a:cf:4d:e4:22:60:
40:a0:07:fa:9c:72:61:ff:1c:90:e5:d4:96:c9:fd:76:be:31:
2b:b5:a7:a0:1d:a5:6e:c4:b6:47:7a:34:0b:c8:a0:eb:f0:f3:
2d:24:d9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:46:59 2026 by rpki-client