Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32352e302f32342d3234203d3e20323030303137.roa
File: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier: WMZ7MG9ZqwsJalfql9TxbC+4SKvPKZ02fi2O1Vc8m7o=
Subject key identifier: A3:E0:6F:FD:03:6A:4F:3B:0B:A9:B6:D2:92:9E:3C:4D:E1:B3:C3:3D
Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial: 7249EF002FA9F5A1A10A2891450B5F410D707A21
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32352e302f32342d3234203d3e20323030303137.roa
Signing time: Tue 28 Apr 2026 08:47:06 +0000
ROA not before: Tue 28 Apr 2026 08:42:06 +0000
ROA not after: Tue 27 Apr 2027 08:47:06 +0000
asID: 200017
IP address blocks: 139.28.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:49:ef:00:2f:a9:f5:a1:a1:0a:28:91:45:0b:5f:41:0d:70:7a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
Validity
Not Before: Apr 28 08:42:06 2026 GMT
Not After : Apr 27 08:47:06 2027 GMT
Subject: CN=A3E06FFD036A4F3B0BA9B6D2929E3C4DE1B3C33D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:24:09:b8:be:38:05:ea:0a:13:d9:e2:09:
0a:e6:a6:33:7c:57:84:6d:16:ef:16:4a:a6:db:5b:
49:91:b6:6d:4f:b7:3a:41:11:cc:23:ac:c0:7c:1b:
a5:91:26:2a:1f:41:1d:0d:85:cc:f8:53:57:f3:11:
24:d6:b3:05:b5:e3:55:59:f7:78:2d:65:06:f4:5f:
5d:9e:68:fe:04:75:3f:4e:6e:76:f9:1e:f9:ea:87:
a3:27:83:b9:05:b9:59:b0:0b:69:a1:a5:21:ea:12:
61:5b:d5:52:0e:bc:37:dc:b2:95:ee:bf:95:f7:f2:
14:43:65:43:a3:52:83:7f:07:f0:b8:16:e1:d5:a4:
ff:88:e2:0d:a8:34:8e:e0:09:75:13:60:af:e4:40:
5a:eb:d0:23:81:0e:18:0c:20:ac:76:3a:fb:a9:c2:
80:27:47:45:0d:10:20:50:fc:de:94:b4:97:3c:f3:
c0:69:a2:e9:4c:7c:6f:9a:35:48:59:d9:07:62:4b:
de:f9:cb:09:79:58:d4:ef:93:2d:30:60:07:27:c2:
43:53:49:69:53:72:72:57:bb:86:a8:ac:af:54:8f:
21:fa:29:59:24:f6:ea:66:72:e3:99:d4:92:f1:f5:
3b:08:bf:fb:a2:d9:0a:ad:8e:96:e3:d0:60:ff:3c:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E0:6F:FD:03:6A:4F:3B:0B:A9:B6:D2:92:9E:3C:4D:E1:B3:C3:3D
X509v3 Authority Key Identifier:
keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32352e302f32342d3234203d3e20323030303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.25.0/24
Signature Algorithm: sha256WithRSAEncryption
74:09:58:c0:78:75:c3:13:4b:0a:cc:c5:44:66:9c:cb:a0:e5:
d4:4d:bb:e0:da:a2:17:cf:86:87:38:30:53:92:8a:a6:66:09:
38:dc:42:13:cf:58:17:46:02:c0:63:c7:09:c5:91:82:3b:d9:
30:dc:8c:61:79:5a:a1:f4:0c:a0:fb:ac:21:c6:7d:d1:79:32:
0c:1a:17:35:10:4b:6b:e3:7d:bb:7e:97:77:17:9f:58:0e:55:
80:9c:42:40:ae:1d:59:0c:c7:0f:86:98:c0:d3:29:90:5e:59:
d9:92:20:ac:0c:fc:7a:05:96:e8:4d:46:bd:b3:10:a8:09:80:
2d:ba:05:a0:48:83:c1:5c:aa:42:a3:ad:e4:97:2c:84:37:fb:
19:62:2f:97:d6:d5:f6:97:a0:9f:6d:b4:32:21:00:79:e1:62:
76:60:f4:53:2a:95:2e:24:bc:db:f0:1b:e7:e8:f7:94:fd:ea:
bf:5a:f7:2e:a4:e8:6b:eb:95:98:c0:f4:85:42:8c:59:5e:04:
37:71:a3:0f:ba:ff:71:eb:9e:8d:33:99:39:3b:35:0c:c2:f2:
99:19:c5:36:be:86:4d:97:5d:61:78:02:2d:75:05:cb:f7:4a:
9f:05:60:68:6e:76:77:86:60:13:57:7c:7c:07:80:8e:41:63:
01:8b:c9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:54 2026 by rpki-client