Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133352e302f32342d3234203d3e20313334393236.roa
File: 3139352e35382e3133352e302f32342d3234203d3e20313334393236.roa (raw, json)
Hash identifier: QpMWGK6S5I3qQ+qu8dr+zlt0sser18tOcrfaVpAuVw0=
Subject key identifier: 79:C5:D7:04:5A:90:44:06:3C:77:6D:C8:81:50:00:F2:F2:B6:09:D2
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 5912022EE120A45F9634DE994F3DA03489E33593
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133352e302f32342d3234203d3e20313334393236.roa
Signing time: Fri 03 Jul 2026 17:34:56 +0000
ROA not before: Fri 03 Jul 2026 17:29:56 +0000
ROA not after: Fri 02 Jul 2027 17:34:56 +0000
asID: 134926
IP address blocks: 195.58.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:12:02:2e:e1:20:a4:5f:96:34:de:99:4f:3d:a0:34:89:e3:35:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 3 17:29:56 2026 GMT
Not After : Jul 2 17:34:56 2027 GMT
Subject: CN=79C5D7045A9044063C776DC8815000F2F2B609D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:8f:b3:d6:aa:cd:db:35:d3:67:6f:e3:26:
29:b4:85:5c:15:d3:17:ac:33:97:59:03:ad:fa:f6:
45:ec:84:4d:64:15:03:61:d2:a4:d2:d2:72:ec:d2:
b2:1d:ec:6f:3c:94:61:ce:ff:83:6c:6c:fe:d8:b6:
5e:a9:10:ad:53:5f:7b:8f:eb:8c:f3:f9:4a:9b:e6:
4e:e8:34:57:d0:17:64:a7:6a:b4:ac:52:d3:a8:c4:
ba:23:a9:11:97:17:2e:c0:d5:5b:3c:be:17:08:80:
51:94:cb:f2:6e:5f:59:5c:19:2a:f8:2e:ac:13:4b:
fc:f8:6a:8b:ae:7e:a1:84:d5:e3:b5:c2:c9:ca:7c:
fa:1e:39:54:3c:96:0a:42:b1:b5:aa:e3:32:42:50:
29:02:a2:04:62:4b:c9:2d:a4:4b:e4:95:70:08:17:
16:be:8c:ad:11:44:3b:fa:6e:76:a1:e5:5b:b5:be:
2a:8d:b0:90:e4:f3:af:6a:6a:2e:96:68:de:08:30:
44:2a:64:90:55:cb:c0:81:88:60:ba:8a:ef:88:38:
8c:60:9f:83:6e:6e:9b:78:a5:38:4d:0d:7e:28:b4:
db:cb:43:83:2a:11:83:a1:e2:c4:6c:0c:90:1d:ac:
ce:30:84:ec:6c:0b:da:47:8f:56:b2:1f:0f:c9:82:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C5:D7:04:5A:90:44:06:3C:77:6D:C8:81:50:00:F2:F2:B6:09:D2
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133352e302f32342d3234203d3e20313334393236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8a:8c:fc:a5:f2:8c:fa:6e:cd:18:d6:68:50:13:d2:29:c9:
63:5d:77:12:2b:b9:c0:de:1d:41:b2:31:dd:a3:64:4a:cb:80:
f0:64:a9:fc:f1:58:3c:df:e6:e5:dd:95:64:47:da:c7:f9:90:
93:12:20:6b:14:90:62:b3:d8:26:e9:9f:f7:fe:ad:ca:1d:38:
3b:73:cd:3c:36:60:da:9d:ef:9f:81:77:3b:b9:db:70:d0:f3:
c5:e3:55:03:2d:3b:22:16:fb:5a:c7:a4:d6:e1:0a:73:48:1e:
d1:60:7e:a5:ba:e5:5a:39:9e:f7:30:0d:11:9a:09:96:ae:f3:
a2:28:68:d1:21:4c:49:dc:7b:e7:e4:4d:c9:71:f9:cb:12:c3:
21:6e:21:42:4d:b7:70:4e:35:85:51:d0:3a:86:33:b0:cd:a9:
45:a1:e1:71:2f:6f:11:9f:fa:2a:c4:c5:66:ef:5f:1a:d5:e2:
1a:58:db:de:f3:eb:e4:4d:cc:92:0b:cc:7c:e4:51:5c:1b:b7:
36:3e:be:6e:97:bf:ce:17:0c:b6:b4:94:2a:15:88:3b:ed:aa:
f5:37:07:b7:89:90:fa:c0:f6:a6:ad:70:ad:e7:57:25:39:65:
5d:7c:a9:d5:22:53:92:db:57:c6:4a:d1:39:63:b4:f0:59:57:
9b:53:7e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:25 2026 by rpki-client