Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139352e302f32342d3234203d3e20313436383133.roa
File: 3139332e3130392e3139352e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: 9DTrz9E58IEURimTvAXdagzUOBVTHr4Ex1S/2AZ1mSM=
Subject key identifier: D6:CD:E6:B0:F0:24:E2:C8:0A:6E:12:1A:C8:19:80:D5:77:15:0E:55
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 21FF5411BFF0E8CB5CFF71AF39C6E4BCCFA1982C
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139352e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 10:45:24 +0000
ROA not before: Fri 25 Sep 2026 10:40:24 +0000
ROA not after: Fri 24 Sep 2027 10:45:24 +0000
asID: 146813
IP address blocks: 193.109.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ff:54:11:bf:f0:e8:cb:5c:ff:71:af:39:c6:e4:bc:cf:a1:98:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Sep 25 10:40:24 2026 GMT
Not After : Sep 24 10:45:24 2027 GMT
Subject: CN=D6CDE6B0F024E2C80A6E121AC81980D577150E55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:b9:1b:36:60:85:75:02:29:f2:4e:60:4f:
05:d4:b4:20:e6:14:d0:7c:8a:a7:b3:d8:c8:99:b6:
ed:63:2a:d5:c1:2c:5a:ac:bc:f8:b4:4c:40:3c:c0:
d4:4d:db:4f:e3:9e:e3:48:b1:e1:8b:b8:4a:f3:b1:
77:c9:99:2c:06:a9:09:14:e0:32:11:01:9b:4c:57:
dd:58:1b:d1:95:48:fe:eb:b9:ba:d4:a7:a9:be:6f:
83:74:cf:72:7f:30:ce:fa:79:10:12:3c:0b:42:ba:
ff:61:8e:a1:e4:73:10:9e:48:9a:4a:5c:57:83:e3:
13:2a:95:fa:8a:37:4a:20:ee:7e:88:5c:08:9f:93:
95:fc:e2:b3:4b:68:d7:fb:73:28:2b:69:62:76:44:
25:cd:3e:81:99:6e:9a:6b:c8:62:f2:7f:70:ae:12:
8d:0c:08:5d:dd:bc:bf:5c:ba:19:44:8a:fd:dc:47:
66:32:16:f2:a3:65:b0:b4:6e:e7:79:8f:e3:5f:3e:
b9:6b:61:b2:19:5b:f1:3e:ac:d8:9a:73:40:2d:25:
1b:83:3d:7c:92:02:fa:b0:25:e9:77:53:bb:45:9e:
00:12:08:1b:ae:12:33:4e:d7:44:7a:74:3b:64:1e:
b4:46:e5:9a:4e:15:f1:a6:1b:69:52:18:b3:a2:63:
6b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CD:E6:B0:F0:24:E2:C8:0A:6E:12:1A:C8:19:80:D5:77:15:0E:55
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139352e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f2:45:80:6f:9e:6c:26:ca:38:02:0d:35:55:1f:9c:19:8e:
f3:74:56:d4:aa:ac:b1:07:fc:cc:e3:4f:11:c3:2b:24:5c:ad:
48:30:46:13:70:2f:cd:8f:3a:e3:d5:50:a9:4c:26:f8:5d:00:
41:be:77:10:94:b6:ab:06:ca:57:b2:a6:8d:51:23:7f:bc:96:
33:8c:af:a6:10:9e:62:ec:35:fe:70:41:e8:14:4b:b6:02:81:
93:03:93:98:27:c6:9e:97:c6:26:45:62:7a:99:13:4d:7b:c8:
87:2d:71:2a:b9:af:6a:ff:0d:90:52:66:f0:82:a7:a0:78:9b:
b9:55:16:28:f3:48:aa:33:21:d1:a1:83:09:44:dd:45:dc:e1:
55:5d:d4:05:de:1e:cb:b8:9a:8b:bd:a8:79:10:63:eb:2c:ee:
b5:66:f8:10:ab:17:c5:59:5e:61:2f:3f:12:8d:ac:3a:16:38:
4d:2e:98:e0:f8:db:b4:3f:1d:71:8a:27:b3:06:c3:70:64:32:
8e:04:90:f5:7c:9e:62:ad:69:48:0c:68:70:03:b9:03:7b:39:
b7:c1:86:62:94:f6:4d:db:7b:17:b6:62:ae:11:d3:b4:eb:3b:
76:37:b4:e4:ee:94:3d:bd:33:f3:3c:8b:1b:37:71:b8:7a:05:
26:7c:39:a8
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUIf9UEb/w6Mtc/3GvOcbkvM+hmCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2
ZmJhYmI4ZDAeFw0yNjA5MjUxMDQwMjRaFw0yNzA5MjQxMDQ1MjRaMDMxMTAvBgNV
BAMTKEQ2Q0RFNkIwRjAyNEUyQzgwQTZFMTIxQUM4MTk4MEQ1NzcxNTBFNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2MLkbNmCFdQIp8k5gTwXUtCDm
FNB8iqez2MiZtu1jKtXBLFqsvPi0TEA8wNRN20/jnuNIseGLuErzsXfJmSwGqQkU
4DIRAZtMV91YG9GVSP7rubrUp6m+b4N0z3J/MM76eRASPAtCuv9hjqHkcxCeSJpK
XFeD4xMqlfqKN0og7n6IXAifk5X84rNLaNf7cygraWJ2RCXNPoGZbppryGLyf3Cu
Eo0MCF3dvL9cuhlEiv3cR2YyFvKjZbC0bud5j+NfPrlrYbIZW/E+rNiac0AtJRuD
PXySAvqwJel3U7tFngASCBuuEjNO10R6dDtkHrRG5ZpOFfGmG2lSGLOiY2vXAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU1s3msPAk4sgKbhIayBmA1XcVDlUwHwYDVR0j
BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi
NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct
NnU0MC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct
MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzOTMzMmUzMTMwMzkyZTMx
MzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMFtwzANBgkqhkiG9w0BAQsFAAOCAQEAUfJFgG+ebCbKOAINNVUfnBmO83RW
1KqssQf8zONPEcMrJFytSDBGE3AvzY8649VQqUwm+F0AQb53EJS2qwbKV7KmjVEj
f7yWM4yvphCeYuw1/nBB6BRLtgKBkwOTmCfGnpfGJkViepkTTXvIhy1xKrmvav8N
kFJm8IKnoHibuVUWKPNIqjMh0aGDCUTdRdzhVV3UBd4ey7iai72oeRBj6yzutWb4
EKsXxVleYS8/Eo2sOhY4TS6Y4PjbtD8dcYonswbDcGQyjgSQ9XyeYq1pSAxocAO5
A3s5t8GGYpT2Tdt7F7ZirhHTtOs7dje05O6UPb0z8zyLGzdxuHoFJnw5qA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 12:30:34 2026 by rpki-client