Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31302e302f32342d3234203d3e203630393832.roa
File: 3139322e3130392e31302e302f32342d3234203d3e203630393832.roa (raw, json)
Hash identifier: ggMQzGuqIKZXkiLxgSJT1gAHORK6NzvTKCdbJcAceMk=
Subject key identifier: E7:CE:12:50:25:1B:01:0D:6B:63:03:7B:12:6B:9F:92:AC:6C:AA:E4
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 45CC4F95C39800C8D528D49C7A55EE82277F1A87
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31302e302f32342d3234203d3e203630393832.roa
Signing time: Fri 13 Nov 2026 13:55:08 +0000
ROA not before: Fri 13 Nov 2026 13:50:08 +0000
ROA not after: Fri 12 Nov 2027 13:55:08 +0000
asID: 60982
IP address blocks: 192.109.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:cc:4f:95:c3:98:00:c8:d5:28:d4:9c:7a:55:ee:82:27:7f:1a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Nov 13 13:50:08 2026 GMT
Not After : Nov 12 13:55:08 2027 GMT
Subject: CN=E7CE1250251B010D6B63037B126B9F92AC6CAAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:cf:db:db:e5:68:0d:22:48:3b:36:32:96:
8f:40:bc:7f:77:9e:57:2c:40:b1:57:ad:cb:59:b8:
d7:4a:c7:c6:6b:9c:50:ea:e6:54:a6:c8:0d:11:bf:
1b:2b:42:7b:e6:93:af:07:fc:cf:3c:19:14:e5:d8:
55:c6:42:05:46:14:b8:af:3a:21:2e:91:3d:e2:b5:
de:18:1b:46:53:f4:ee:4c:c8:6f:07:a9:3d:43:a4:
ea:5f:ba:f6:6f:be:94:a4:4d:d8:78:db:ac:eb:55:
cd:e1:ed:cf:d4:f8:11:33:6c:79:9f:2c:6c:3c:80:
43:7a:d8:56:48:4b:e6:84:a2:fc:8f:d2:e8:2a:0e:
df:42:ee:83:d9:ca:61:1b:e9:1d:18:9a:55:2a:3e:
37:da:50:4e:6f:f8:29:b0:dc:7d:3a:d6:f5:b3:8e:
2e:f3:7e:a0:fa:47:2e:3e:f3:b5:bc:4d:72:0b:3e:
69:34:07:f6:d2:aa:bf:42:ed:57:1d:0c:bd:6d:a1:
56:d6:ea:08:0d:53:5e:28:cc:fa:0e:18:25:55:62:
19:09:84:17:41:19:6e:ea:80:15:70:85:48:d4:d4:
4d:31:66:48:d1:c6:1d:31:4e:6a:08:d9:fe:7f:37:
64:31:d7:5d:ff:f2:40:85:7b:1c:c6:0f:fd:b4:cf:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CE:12:50:25:1B:01:0D:6B:63:03:7B:12:6B:9F:92:AC:6C:AA:E4
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31302e302f32342d3234203d3e203630393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.10.0/24
Signature Algorithm: sha256WithRSAEncryption
17:05:ae:0a:42:9c:a9:96:56:dd:c3:b4:78:2c:af:83:82:3f:
9a:27:c2:97:e2:28:99:79:d5:04:33:5a:04:98:e5:1b:b1:4c:
fd:0e:d8:0e:a5:fd:2b:a8:17:bc:29:e9:50:60:ab:4e:e9:18:
98:3e:27:ed:a2:64:63:c0:ae:54:f6:b3:41:eb:f9:e5:a5:df:
1a:7e:3a:89:8a:1a:46:ca:39:35:a6:62:f5:c6:30:ec:fe:60:
4e:63:99:b6:84:77:cb:9c:4f:7c:11:83:41:ed:3c:a4:f3:cb:
cd:ec:7b:13:8f:d4:a7:d4:35:be:0b:75:fe:ef:7e:f6:b9:1e:
ab:b3:62:8d:d6:1f:d0:c1:fc:40:23:d0:cf:aa:73:46:68:7e:
20:d3:70:96:a0:8d:94:0b:79:e1:6b:0b:57:4e:d7:4c:61:3d:
e8:71:be:3f:3a:d6:9e:e2:60:85:53:f0:ba:bd:71:62:72:a7:
37:96:90:a0:77:7a:46:10:9c:a8:ab:02:67:7e:79:eb:45:43:
03:c3:e5:34:a6:e6:c6:43:f9:2c:a9:08:97:d0:08:00:f0:45:
24:e3:56:5c:6e:ae:41:1a:56:3c:2c:b9:73:bc:b0:24:23:c8:
66:33:02:f5:af:1e:18:f3:2d:03:33:d4:44:c2:aa:d7:20:a5:
55:21:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:25 2026 by rpki-client