Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: iI0GrMiv373MMUml2h8gqNXjz4vZ6ecOv9+2CN6AEHU=
Subject key identifier: EF:92:1C:4C:F5:B1:99:A9:53:22:3C:7A:C7:D7:53:A8:ED:80:67:59
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 20755E8A7C8B9045D357CDABB5A1D2AE9AA0097C
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS0.roa
Signing time: Sat 18 Jul 2026 07:19:13 +0000
ROA not before: Sat 18 Jul 2026 07:14:13 +0000
ROA not after: Sat 17 Jul 2027 07:19:13 +0000
asID: 0
IP address blocks: 193.142.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:75:5e:8a:7c:8b:90:45:d3:57:cd:ab:b5:a1:d2:ae:9a:a0:09:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 18 07:14:13 2026 GMT
Not After : Jul 17 07:19:13 2027 GMT
Subject: CN=EF921C4CF5B199A953223C7AC7D753A8ED806759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:b7:a9:64:6e:b9:fa:f8:a1:99:22:2b:9e:
50:98:07:5b:50:62:2c:0d:d1:ca:2a:af:10:cb:f1:
5a:2a:83:28:6b:74:b7:f5:2a:20:d6:31:7d:3c:ec:
12:03:34:07:86:19:23:28:c6:41:7b:37:9b:97:36:
8b:67:11:70:f4:bd:b1:bc:bd:56:8b:56:bd:67:9f:
f5:86:22:03:13:fa:e5:1f:1d:97:86:ec:84:cf:3b:
24:f0:14:97:fb:e1:c0:71:e1:e0:54:b9:19:fd:64:
a7:44:da:3b:1c:1d:f1:b8:d1:f2:0a:bb:3b:2a:1d:
81:ed:e2:23:fd:56:f4:ba:d5:5f:41:d7:51:6a:48:
32:9c:78:78:0d:ac:7d:77:2f:07:c3:d9:74:8f:a4:
22:fc:66:b2:20:6d:78:ac:55:dd:fa:10:e7:7c:95:
e3:c6:47:5a:13:92:f9:fd:19:50:2e:ae:fc:65:20:
72:2b:a5:50:75:1d:ac:cf:c6:06:63:76:34:60:a8:
e3:c8:da:52:12:e9:bb:a8:b7:79:cd:13:18:3c:f8:
9a:fb:ba:9b:80:b8:cc:1f:15:1e:a4:92:dd:70:6d:
44:de:3f:8f:45:db:09:c8:fc:29:28:0c:2c:20:2a:
92:de:60:3a:7c:59:11:84:86:5b:30:fa:a3:0b:6f:
b3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:92:1C:4C:F5:B1:99:A9:53:22:3C:7A:C7:D7:53:A8:ED:80:67:59
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.18.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cb:2c:a8:dd:12:27:bf:15:37:b8:31:ea:3c:c7:62:54:8c:
0e:9e:bc:b1:e0:e7:8b:70:5f:50:af:77:1b:a1:03:55:ea:79:
3a:43:ff:3d:72:2a:4c:c5:11:04:53:03:78:25:fb:f7:38:0e:
88:0b:bc:26:c1:52:68:a6:c1:d1:55:9d:47:51:e4:36:df:9e:
ba:41:72:7b:07:10:69:85:61:52:07:2e:f7:cc:b3:4c:69:c8:
9b:fa:5d:bd:7c:bc:ca:1d:ad:9f:7d:db:92:00:09:bf:19:2b:
e7:73:c0:a5:c4:b4:f3:3a:32:86:72:19:09:54:e6:8f:75:c2:
4e:75:0f:71:85:8b:14:68:c8:23:f7:c2:d9:eb:75:be:32:36:
ef:e6:5d:c5:ca:4d:3c:f4:37:56:1a:19:f8:15:34:92:56:8c:
39:ff:0c:24:39:4f:9a:9a:b8:21:54:4a:63:15:d3:88:49:54:
9d:49:86:6c:21:b2:99:b1:c9:48:8c:b0:0b:3e:3d:a0:ee:f8:
2f:5a:19:95:65:75:4a:35:63:09:ca:fa:c6:32:65:07:8d:e5:
c4:57:ca:35:b6:a1:82:4a:8e:ad:af:f5:e0:71:68:06:cd:1b:
17:2c:2d:fe:ef:3b:fb:ef:b0:3d:8f:cc:df:46:87:df:e7:0b:
f9:ab:8c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:49 2026 by rpki-client