Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa
File: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (raw, json)
Hash identifier: yLC1oKoMdjJrSS42z4vH04rNWh8jStXc4dl58WWWeFU=
Subject key identifier: 83:84:82:99:3D:F8:63:8D:AD:D3:65:47:0F:A9:CF:C6:20:9F:5F:19
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 555BA2A8B697EB11D226A1E08220C185F89D50C5
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa
Signing time: Thu 02 Jul 2026 14:48:52 +0000
ROA not before: Thu 02 Jul 2026 14:43:52 +0000
ROA not after: Thu 01 Jul 2027 14:48:52 +0000
asID: 149948
IP address blocks: 193.163.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:5b:a2:a8:b6:97:eb:11:d2:26:a1:e0:82:20:c1:85:f8:9d:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jul 2 14:43:52 2026 GMT
Not After : Jul 1 14:48:52 2027 GMT
Subject: CN=838482993DF8638DADD365470FA9CFC6209F5F19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:3b:0d:eb:b3:5d:24:c2:67:79:88:d7:15:
14:e1:63:4e:93:ea:bf:6d:9e:3b:81:4d:f9:63:8d:
e9:2c:40:f8:28:23:14:e9:6d:12:74:39:30:7e:21:
d3:19:20:96:5a:5a:a6:9e:be:1c:e0:26:64:e7:2e:
0a:b0:0e:0d:55:1f:66:af:77:67:c6:f0:ce:49:2c:
05:7a:1e:42:0f:d7:ef:f5:8f:90:97:25:78:1a:f1:
84:53:04:8e:34:52:2e:f8:5f:87:99:21:a0:45:d5:
5a:62:34:87:0d:82:02:10:08:89:78:fa:d1:ae:8c:
70:38:1d:15:df:11:ae:ce:81:c1:21:dc:24:5a:de:
72:55:58:58:91:8f:63:1f:a6:58:24:bd:4c:61:47:
06:de:82:a6:93:4e:ae:47:fd:6a:55:b1:10:cc:d7:
a3:74:64:f8:1f:dd:4e:b6:47:bc:a7:03:32:4e:0e:
2e:2f:e4:ef:6e:33:a9:66:f7:50:be:b6:0f:f9:12:
99:5e:5a:be:83:fc:5f:61:7c:98:13:c8:07:06:5e:
a2:36:3e:6e:c7:19:f8:5e:21:02:ed:50:5c:df:29:
99:07:cf:d2:86:4c:b5:82:69:82:ff:ea:b7:f9:f0:
3d:15:e8:cd:72:9e:df:fc:1d:bf:0d:0b:f9:c1:1a:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:84:82:99:3D:F8:63:8D:AD:D3:65:47:0F:A9:CF:C6:20:9F:5F:19
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.127.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:50:ce:2c:76:b8:c1:78:45:1d:49:65:69:f7:fe:2a:2c:34:
92:2a:e8:0d:83:36:bb:b0:fc:4c:37:9f:28:e3:75:c0:34:01:
c5:e7:dd:e0:e8:ef:6a:f4:1f:a2:4b:88:a6:9b:7d:fe:f7:24:
8a:fe:85:f4:9d:74:95:44:f2:9f:61:c0:8f:e5:35:94:ff:d5:
60:e0:16:94:b6:ed:f1:82:20:a0:77:8e:3e:cf:2f:eb:08:ca:
0b:89:4f:ab:02:1e:52:2b:e2:f3:10:f4:ce:e6:a9:ac:38:7a:
99:79:a9:2b:6f:9a:4a:e7:23:27:fa:61:c0:fb:fe:c6:5d:9a:
53:dc:d2:1c:68:1f:5f:1a:fc:78:c9:db:e3:39:b5:9f:db:48:
07:2e:36:40:1b:cb:ae:2d:07:d8:45:bc:da:aa:a3:fd:7e:f0:
2f:53:6d:32:45:7c:22:ea:1e:e1:db:d6:38:f5:e7:fb:1a:ec:
3b:ae:2f:3c:a4:62:60:f3:a5:b2:40:3c:f4:d4:6a:e8:80:2c:
2e:db:3b:0f:74:cc:82:50:ba:03:45:22:ae:86:f9:99:b3:c4:
2a:9b:39:d0:b0:f0:a2:57:df:46:a3:74:b2:09:29:b5:ae:66:
f5:be:78:64:8f:bf:35:ce:ec:c2:62:43:64:fe:19:f8:09:98:
4d:d2:a6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:10 2026 by rpki-client