Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139382e302f32342d3234203d3e20313436383133.roa
File: 3139332e3130392e3139382e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: 2TDDY+6N8RiynxGNnDjhFrpuWeRGVg5zwyRogIKv75Y=
Subject key identifier: BC:2A:9F:FF:85:A6:A2:47:25:37:02:B8:73:78:4E:BB:7D:18:FA:52
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 2DC6E2B5D265EC07A8BF2DA048D3AC43565B2185
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139382e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 09:57:48 +0000
ROA not before: Fri 25 Sep 2026 09:52:48 +0000
ROA not after: Fri 24 Sep 2027 09:57:48 +0000
asID: 146813
IP address blocks: 193.109.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c6:e2:b5:d2:65:ec:07:a8:bf:2d:a0:48:d3:ac:43:56:5b:21:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Sep 25 09:52:48 2026 GMT
Not After : Sep 24 09:57:48 2027 GMT
Subject: CN=BC2A9FFF85A6A247253702B873784EBB7D18FA52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:3b:67:1b:0f:b0:eb:16:91:bb:84:45:08:
29:a7:3a:bd:18:5f:d8:9e:ea:64:74:72:2e:2e:23:
22:14:74:ae:de:27:12:76:36:5e:8e:70:24:5b:6f:
80:a0:16:83:bf:f2:84:a8:ba:48:9d:9e:c7:d7:56:
4b:43:b6:94:86:18:6d:d1:a0:0d:33:82:ad:a9:02:
c3:72:9c:82:84:22:37:ba:db:62:c7:c7:6e:df:c8:
10:a6:93:c8:11:fc:cb:27:f5:d5:58:d1:b3:90:b2:
17:61:7d:1a:6b:d6:46:a9:40:be:68:89:be:46:a1:
ac:4e:5c:c9:de:5f:b4:19:ba:51:92:1f:63:a1:e1:
6c:54:0b:13:38:25:55:a3:f6:07:0d:b7:6f:0f:2c:
c6:67:9a:0a:6e:72:6a:92:0c:77:bb:30:00:82:34:
14:49:28:c3:75:38:75:fd:fb:b0:97:9b:f6:12:98:
89:0c:91:36:a2:4b:8c:1a:74:ec:4b:a1:cd:03:07:
dc:ae:a2:ed:61:9f:54:64:17:2e:0d:eb:fa:2c:92:
a2:ec:1b:70:f5:42:3e:f6:05:80:03:f5:76:79:74:
c0:17:f3:d5:81:65:55:fd:fe:02:1c:2c:f9:62:eb:
f1:9f:86:dc:37:58:bb:b0:62:39:04:ce:a4:09:cf:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2A:9F:FF:85:A6:A2:47:25:37:02:B8:73:78:4E:BB:7D:18:FA:52
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139382e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f8:6a:81:b1:d1:93:e2:32:fa:54:9f:ed:69:78:23:58:44:
54:30:2d:18:8d:cc:f7:71:76:66:09:5e:3c:73:77:01:3c:7f:
9f:b3:cb:64:21:71:17:96:73:6b:77:e6:28:45:24:99:e2:18:
d0:fb:71:4b:5b:78:ea:48:34:3b:ad:6d:50:cd:27:ac:42:53:
86:9d:e2:0e:f2:66:9b:a0:02:04:89:9f:e5:4b:61:af:2c:e5:
35:b9:87:98:32:8b:48:ee:1a:b8:15:a4:63:d3:a9:45:73:67:
72:eb:b3:3c:36:6f:e0:1f:68:22:ff:f2:c0:02:2f:26:4e:06:
26:e1:1d:ba:67:45:d1:4c:3e:0b:75:69:a3:4d:81:35:99:04:
fc:50:54:84:64:ca:76:b3:99:9b:d1:c1:b4:d9:5b:b3:dc:bf:
4b:57:29:fe:12:13:47:f2:eb:0f:c4:3b:6b:92:2f:58:c0:7e:
d5:3a:1d:ff:03:fd:b8:dc:bf:9f:25:5f:d7:49:da:e6:cf:ce:
e1:5d:ac:ef:f3:a6:78:6b:94:8f:f0:b1:c0:d5:35:28:da:76:
91:ac:c4:e7:0c:33:b2:69:4c:26:8f:11:15:1d:1d:ad:10:c2:
ae:dc:f5:5b:9d:2f:7f:27:d9:0b:b5:c7:13:18:a5:23:7a:4a:
a5:a2:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:02:16 2026 by rpki-client