Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e203633313939.roa
File: 3134312e39382e34332e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: qIvPiXlQ2pg3f/7mhaP/mlEDh5IakbCDbr6yJGTo5+g=
Subject key identifier: B9:A0:F0:E9:35:26:FE:18:00:36:6E:FB:AB:0B:C3:91:6E:12:0D:F1
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 40A2883733639091CD662D79348A3F7BE44EC733
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e203633313939.roa
Signing time: Thu 19 Mar 2026 09:34:01 +0000
ROA not before: Thu 19 Mar 2026 09:29:01 +0000
ROA not after: Thu 18 Mar 2027 09:34:01 +0000
asID: 63199
IP address blocks: 141.98.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a2:88:37:33:63:90:91:cd:66:2d:79:34:8a:3f:7b:e4:4e:c7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Mar 19 09:29:01 2026 GMT
Not After : Mar 18 09:34:01 2027 GMT
Subject: CN=B9A0F0E93526FE1800366EFBAB0BC3916E120DF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:69:8c:e7:2f:c7:72:33:6e:d9:02:19:fd:b8:
07:46:7c:73:97:7f:5d:21:14:9d:bd:91:63:6b:bd:
bd:7d:4f:80:0b:49:35:6d:f8:f0:e0:36:be:49:b3:
45:31:32:16:fc:b6:56:a5:f9:26:4d:4e:f6:36:68:
a3:7a:4c:9c:9f:a4:10:82:bd:e2:36:4f:fd:59:c5:
87:50:27:ac:ae:d2:ba:bc:01:a0:fc:d6:7e:27:8a:
2e:58:b5:20:5d:e7:b0:74:10:6b:07:e8:5a:6d:2d:
86:79:d2:ef:86:00:cf:73:f7:90:44:12:57:0f:ca:
c8:4d:00:d0:35:bf:af:bc:be:c8:94:1c:7a:0f:e0:
3a:7f:ce:bc:bd:47:24:d5:50:4f:4a:58:8e:a2:da:
60:e3:81:91:cf:73:ed:30:7b:9b:0a:f3:32:48:53:
1c:4b:c5:24:cf:6e:28:30:7f:b8:6b:86:b2:51:cb:
b2:65:2b:15:3a:fa:e4:8e:2b:67:db:33:65:d4:7e:
7c:6b:26:c3:f1:fd:a3:65:18:a6:66:81:b0:b6:52:
1d:9f:63:25:ef:2e:26:c5:77:23:16:27:21:34:ce:
66:28:94:62:da:f9:f9:25:02:f6:99:c7:70:08:75:
70:5a:29:81:c0:55:ae:93:0b:9c:2e:f8:7d:b7:7d:
00:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A0:F0:E9:35:26:FE:18:00:36:6E:FB:AB:0B:C3:91:6E:12:0D:F1
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.43.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9d:67:27:34:da:3f:33:90:3c:d6:ad:e1:78:ec:06:30:94:
e8:5e:3f:dc:26:9e:aa:4c:8c:07:11:3c:6d:3c:f2:71:50:89:
3f:04:2c:49:13:d5:04:2c:4d:bf:be:97:11:47:1b:1c:61:f1:
f2:df:ce:8f:49:dc:2c:c2:31:6d:8e:d1:ae:87:0f:de:6f:06:
c9:64:18:a9:81:72:cc:f9:a0:6e:e8:67:c3:bf:c9:07:ff:5e:
de:de:7c:f1:4b:d3:1a:b1:8f:af:a9:f4:41:92:ad:63:3d:e2:
7e:5f:1b:90:62:5f:25:8d:7f:34:0a:12:03:03:3b:a9:8d:59:
1b:9f:82:51:93:5b:2e:7c:92:47:5d:56:a9:f8:60:e8:0c:27:
9e:60:6c:7e:54:bc:c2:a9:bc:6e:1f:73:b9:57:22:45:ea:d5:
42:cb:df:a2:9e:b9:d1:5e:7c:19:c2:33:8c:c3:8d:8c:21:f7:
b0:b5:03:c7:33:5c:03:54:2b:d0:5d:ae:4f:85:ec:a6:ec:32:
8b:36:c8:b5:8e:cc:8a:7a:83:01:26:d8:05:38:9f:b3:f2:d1:
58:8a:40:81:4f:ab:ec:59:c8:1d:62:30:34:ea:8c:96:7e:4b:
5e:a1:e9:b8:ac:c6:56:4b:ea:f6:77:32:39:6b:16:25:b8:20:
d0:1c:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:42 2026 by rpki-client