Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e203632343033.roa
File: 3139342e33342e3235322e302f32342d3234203d3e203632343033.roa (raw, json)
Hash identifier: yqnINfgqTqrJdEB+ub9ugFguo27lxXV2a2kAcYnphqk=
Subject key identifier: 6F:2F:B9:5D:15:41:80:41:BC:0C:77:49:F1:9C:6E:1B:5F:A9:D8:EF
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 021F3BCFBE450680A12DBE07A005648A845580D6
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e203632343033.roa
Signing time: Tue 21 Jul 2026 16:06:32 +0000
ROA not before: Tue 21 Jul 2026 16:01:32 +0000
ROA not after: Tue 20 Jul 2027 16:06:32 +0000
asID: 62403
IP address blocks: 194.34.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1f:3b:cf:be:45:06:80:a1:2d:be:07:a0:05:64:8a:84:55:80:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 21 16:01:32 2026 GMT
Not After : Jul 20 16:06:32 2027 GMT
Subject: CN=6F2FB95D15418041BC0C7749F19C6E1B5FA9D8EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:d8:a7:15:e2:ef:35:da:cb:26:0a:e4:f0:
97:90:59:d7:df:40:e1:b0:d8:fe:11:fe:e1:ee:10:
1a:fc:c4:dd:80:4f:0b:ce:a4:b2:86:40:ac:7e:e5:
74:e6:37:85:de:23:d6:6f:6a:83:9f:9c:53:de:e8:
ed:83:16:16:bc:12:27:49:d7:b7:a2:76:09:f1:62:
aa:33:ef:6c:14:6b:f7:6a:ec:53:6e:e6:15:10:c7:
39:fb:9d:ee:e7:98:5d:64:bc:0a:b8:45:85:77:6c:
40:14:17:2a:b6:bc:d5:ac:4e:71:09:2c:8c:bc:98:
be:f0:be:77:4f:75:70:96:00:bd:a8:e8:99:28:1c:
93:4b:15:46:92:0d:c8:5d:d8:56:15:24:1a:0c:8d:
74:54:7d:df:86:35:04:9f:87:4b:bc:b3:11:50:45:
55:56:f5:db:b5:3b:10:c4:4f:78:c0:d4:5d:df:45:
4c:e8:58:4f:82:aa:1f:c1:73:71:8b:cf:1e:c5:30:
7f:86:e7:1d:f9:fd:5e:af:fd:80:51:0c:a4:97:05:
23:b4:f6:26:be:70:6e:a9:eb:d9:2e:78:5a:a3:c5:
b3:9c:8d:9f:d8:30:e4:cd:7a:6e:f7:67:8d:9d:70:
c6:58:04:61:f2:e0:54:09:19:11:f2:cd:07:f9:2d:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2F:B9:5D:15:41:80:41:BC:0C:77:49:F1:9C:6E:1B:5F:A9:D8:EF
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e203632343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.252.0/24
Signature Algorithm: sha256WithRSAEncryption
02:08:27:48:51:da:37:05:10:3e:c5:5b:59:f3:4a:24:5d:0b:
74:eb:71:d3:93:51:b1:c5:e0:2e:00:d1:18:ab:c7:eb:3c:72:
42:92:e5:40:66:94:90:5c:16:2b:62:ea:13:b1:52:6f:5e:24:
0c:de:b0:d4:9a:d5:12:fb:6e:a1:a2:d7:58:31:8c:e6:9e:f1:
53:b8:12:52:5c:fe:5c:6d:65:96:ea:11:e5:c1:30:82:fc:d5:
05:5b:61:f5:ff:49:9c:86:ec:81:c9:9a:b8:56:cd:66:e3:1b:
e9:cc:57:0c:7d:1f:3e:d8:06:07:f1:f5:ec:60:af:1c:bf:e6:
30:93:4a:09:94:a2:ae:43:2c:2b:05:5d:7f:24:26:97:5a:fc:
f1:6c:1d:36:ea:cd:07:66:e9:d9:d8:7a:09:e0:79:dd:29:26:
16:57:12:1c:61:99:54:19:2d:78:e3:25:f9:95:a3:c9:f7:9c:
54:9c:c4:6d:5f:2e:14:fc:d8:d3:f1:21:ca:64:96:24:1e:9f:
f7:b8:0a:6f:37:2b:dd:e7:38:d2:05:ec:bb:9c:89:1f:86:77:
60:89:9e:7a:03:92:dc:09:26:62:03:9a:f0:10:1f:0d:9c:b6:
a8:79:cf:35:c9:74:12:48:b9:9a:50:62:6e:f8:fa:a2:ad:b8:
89:d3:24:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:11 2026 by rpki-client