Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32352e302f32342d3234203d3e20323131343135.roa
File: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (raw, json)
Hash identifier: 7kMffwl/Ww8QHzZihIgTjgdiu2o56NccWGqsrPQPDA8=
Subject key identifier: 31:18:35:96:91:C6:2B:5F:22:65:B4:30:1D:FA:45:C8:DE:7A:45:1D
Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial: 4B15F510938ACFDB4C17DEFDBBC1E622C4A4F6C9
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32352e302f32342d3234203d3e20323131343135.roa
Signing time: Fri 31 Jul 2026 15:49:16 +0000
ROA not before: Fri 31 Jul 2026 15:44:16 +0000
ROA not after: Fri 30 Jul 2027 15:49:16 +0000
asID: 211415
IP address blocks: 139.28.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:15:f5:10:93:8a:cf:db:4c:17:de:fd:bb:c1:e6:22:c4:a4:f6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
Validity
Not Before: Jul 31 15:44:16 2026 GMT
Not After : Jul 30 15:49:16 2027 GMT
Subject: CN=3118359691C62B5F2265B4301DFA45C8DE7A451D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:08:e9:16:9d:11:b2:02:83:49:1f:cc:a3:a9:
fc:32:16:50:dd:7c:48:da:75:cc:24:38:c6:fd:c8:
f4:ec:b8:3a:c7:f2:c0:ad:6a:be:cf:16:2d:17:41:
0b:cc:1e:c6:1f:53:7e:b6:38:4f:8a:c3:4e:47:fc:
b5:bc:ea:75:41:90:38:4c:65:18:61:ea:70:92:bd:
91:01:b0:8e:a3:ac:5f:c2:bb:33:91:cf:12:c4:b2:
fe:e8:dd:e6:64:0e:bd:14:d9:0b:86:96:48:c4:dd:
6c:91:b8:f6:c0:09:0a:ec:dd:84:a0:60:c6:b8:26:
31:dc:f0:75:0d:e5:7f:99:63:8a:c6:d2:b0:ec:d8:
db:f3:55:62:5e:64:cc:98:3e:25:d9:75:92:86:28:
63:95:b2:01:bb:c5:02:fc:03:72:e4:79:36:42:91:
3e:0d:2a:f0:b3:26:9e:aa:ed:32:da:77:8e:2e:7f:
75:16:54:b4:97:78:8d:76:ed:63:e5:77:62:69:c3:
85:ac:e1:ed:63:bb:22:20:dc:b5:5b:e3:e3:4d:69:
e4:dc:98:04:66:19:22:65:fa:51:03:ca:d8:b3:46:
0b:a2:e0:d3:a1:89:48:58:00:07:4c:7d:e6:db:2d:
ab:e6:9a:9e:ce:eb:87:58:1e:56:76:33:ed:62:eb:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:35:96:91:C6:2B:5F:22:65:B4:30:1D:FA:45:C8:DE:7A:45:1D
X509v3 Authority Key Identifier:
keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32352e302f32342d3234203d3e20323131343135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.25.0/24
Signature Algorithm: sha256WithRSAEncryption
35:86:f6:9f:28:4c:c5:17:bd:df:c2:f2:58:ee:d4:1b:ca:f1:
f0:d9:ea:d2:df:dc:b8:9a:94:28:7d:f9:b4:85:9e:0c:88:5d:
02:ce:d1:a0:60:44:15:2f:47:6c:15:7d:03:c1:e4:bd:04:20:
ac:2b:a0:57:bb:10:ce:59:e5:89:3a:66:0c:9a:46:6f:f7:ed:
bd:ac:b4:f0:e0:33:80:bc:7f:40:80:b1:1d:c3:8e:24:87:13:
32:e1:a3:f5:8f:d8:46:04:8a:36:8f:15:ea:6e:37:b8:19:f9:
69:af:30:dc:9c:c9:af:e8:db:87:d4:26:e1:f3:cd:74:26:f9:
03:68:d0:09:5b:69:e9:81:3b:fb:bc:19:8b:19:77:bf:87:ff:
40:d5:e6:a1:bc:73:c7:cd:34:3b:c8:0e:9c:50:4d:6a:4c:d7:
fa:87:cc:e8:c7:43:95:b6:7f:d7:d9:7c:86:05:39:2f:ac:0c:
a3:95:d0:9d:f5:f2:cf:af:3f:df:c2:2e:69:8f:12:5c:8e:65:
ef:54:7f:d4:a3:7b:05:84:0d:a4:45:ca:4f:99:33:80:47:ee:
8a:85:ed:13:47:c3:44:ba:4d:d8:88:7d:9f:56:f1:cd:3c:4a:
c5:60:29:40:11:c6:59:07:60:9f:26:1c:a8:17:f6:55:f4:da:
95:89:dc:b7
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSxX1EJOKz9tMF979u8HmIsSk9skwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4
ZGIzNDkxYTAeFw0yNjA3MzExNTQ0MTZaFw0yNzA3MzAxNTQ5MTZaMDMxMTAvBgNV
BAMTKDMxMTgzNTk2OTFDNjJCNUYyMjY1QjQzMDFERkE0NUM4REU3QTQ1MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4COkWnRGyAoNJH8yjqfwyFlDd
fEjadcwkOMb9yPTsuDrH8sCtar7PFi0XQQvMHsYfU362OE+Kw05H/LW86nVBkDhM
ZRhh6nCSvZEBsI6jrF/CuzORzxLEsv7o3eZkDr0U2QuGlkjE3WyRuPbACQrs3YSg
YMa4JjHc8HUN5X+ZY4rG0rDs2NvzVWJeZMyYPiXZdZKGKGOVsgG7xQL8A3LkeTZC
kT4NKvCzJp6q7TLad44uf3UWVLSXeI127WPld2Jpw4Ws4e1juyIg3LVb4+NNaeTc
mARmGSJl+lEDytizRgui4NOhiUhYAAdMfebbLavmmp7O64dYHlZ2M+1i6683AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMRg1lpHGK18iZbQwHfpFyN56RR0wHwYDVR0j
BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm
N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y
elNSby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQt
ZDM3ZC00OTQyLThlOTQtOTFkZDg1M2VmN2UzLzAvMzEzMzM5MmUzMjM4MmUzMjM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMxMzQzMTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
ixwZMA0GCSqGSIb3DQEBCwUAA4IBAQA1hvafKEzFF73fwvJY7tQbyvHw2erS39y4
mpQoffm0hZ4MiF0CztGgYEQVL0dsFX0DweS9BCCsK6BXuxDOWeWJOmYMmkZv9+29
rLTw4DOAvH9AgLEdw44khxMy4aP1j9hGBIo2jxXqbje4GflprzDcnMmv6NuH1Cbh
8810JvkDaNAJW2npgTv7vBmLGXe/h/9A1eahvHPHzTQ7yA6cUE1qTNf6h8zox0OV
tn/X2XyGBTkvrAyjldCd9fLPrz/fwi5pjxJcjmXvVH/Uo3sFhA2kRcpPmTOAR+6K
he0TR8NEuk3YiH2fVvHNPErFYClAEcZZB2CfJhyoF/ZV9NqVidy3
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:04:02 2026 by rpki-client