Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e20383334.roa
File: 3134312e39382e34332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: V7Mm5jA+EdxDkBefsUQULNEFstHan6hI2vb0NAqVem8=
Subject key identifier: BA:68:D6:A1:74:A7:C4:5A:22:E4:93:14:1A:79:4D:3F:CA:69:68:D0
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 40CEA408922DFC48F312F8C068303370EE043824
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e20383334.roa
Signing time: Sun 19 Apr 2026 09:23:35 +0000
ROA not before: Sun 19 Apr 2026 09:18:35 +0000
ROA not after: Sun 18 Apr 2027 09:23:35 +0000
asID: 834
IP address blocks: 141.98.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ce:a4:08:92:2d:fc:48:f3:12:f8:c0:68:30:33:70:ee:04:38:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Apr 19 09:18:35 2026 GMT
Not After : Apr 18 09:23:35 2027 GMT
Subject: CN=BA68D6A174A7C45A22E493141A794D3FCA6968D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:03:44:8e:9d:ba:67:f7:1d:43:f1:5c:6f:
6c:0c:53:b9:f3:bd:45:4a:af:a2:f3:ea:f5:99:98:
5d:39:0f:28:6a:f6:84:82:d9:b8:ef:82:4a:17:97:
64:c9:5e:a6:35:99:1b:c3:7d:23:96:47:7a:87:17:
8f:0a:eb:8e:bc:75:da:3b:ed:6b:41:57:96:4e:68:
09:7c:72:d6:1b:29:57:d4:ef:ea:50:98:4d:be:61:
3b:05:59:e2:9b:a2:df:34:45:24:47:3a:cb:6c:64:
69:a6:c8:b5:bf:73:fe:df:89:e7:de:7b:e2:5f:2b:
ae:b8:f0:07:6c:90:93:c6:0d:52:75:69:f1:0c:d3:
63:94:90:1b:3b:fa:08:c1:1a:f0:5a:dd:a0:28:b0:
5c:7e:15:1b:fa:8f:fa:8d:8b:7c:a7:71:9b:e8:93:
94:e1:13:44:e2:a7:24:2a:89:2d:33:97:15:f4:7a:
b8:b3:5f:98:89:7f:5e:33:90:35:13:ab:27:85:78:
32:f2:26:a5:80:37:da:a4:33:d5:47:df:b7:09:af:
95:25:f4:e4:91:01:04:f9:51:9d:25:ef:be:6f:43:
5d:6d:4b:11:c8:e1:a1:29:49:e0:ed:d2:a9:45:70:
f0:90:10:54:a0:f6:f9:26:71:b2:8d:96:18:3a:84:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:68:D6:A1:74:A7:C4:5A:22:E4:93:14:1A:79:4D:3F:CA:69:68:D0
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.43.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:18:bb:23:9d:5c:fd:5a:e2:80:22:61:66:ce:44:56:fe:b4:
53:a4:6d:1a:7d:10:9a:8a:18:33:fe:09:ff:f6:52:5b:b1:0c:
f5:39:65:c4:f1:a7:5d:b3:f0:ae:af:08:17:83:06:06:a5:bb:
0d:c3:4b:53:6d:94:42:fa:fe:21:db:a5:22:2a:8c:67:6d:d6:
c6:79:bc:50:86:ce:69:a0:cf:f1:6b:ab:09:cd:ab:dd:17:e1:
96:26:8d:bf:45:1a:56:b8:d3:0b:11:ac:bf:49:7f:1e:6d:d7:
36:f0:e6:2d:6e:21:d7:a3:67:fa:db:ee:b8:51:9b:bc:7b:fc:
30:1c:44:a7:b5:4b:5b:57:04:0d:46:5f:81:a5:79:4e:27:5e:
52:10:19:2a:0a:71:2a:56:5f:fd:f1:ac:2d:8d:44:2a:1a:f9:
ba:11:6d:09:8a:67:c4:8d:e2:3f:0c:f2:4e:45:2f:27:81:21:
bc:9c:98:f8:fb:7c:49:6c:1c:4c:90:4b:c1:77:2d:ae:03:18:
aa:0a:c5:41:8d:e9:24:ea:7d:f6:da:ef:14:b2:37:48:da:02:
83:0d:93:a1:ce:95:ad:36:72:de:89:af:a5:e3:b0:30:f2:05:
c2:b6:52:b6:22:28:1b:8a:68:ea:e1:1d:05:78:89:18:eb:8f:
18:12:d2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:54 2026 by rpki-client