Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3139332e32352e3137302e302f32342d3234203d3e20343031333632.roa
File: 3139332e32352e3137302e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: BEvg5hkdDxVU/wJ2R3nH/rRQwVSA5SzU4zAT1MeeHZ4=
Subject key identifier: 90:AA:43:1D:5F:4E:D5:24:76:4B:71:A6:B3:06:A8:1A:69:57:9D:E5
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 32F553704BB228F230A82B85FF4BC9C5A0ECF7C7
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3139332e32352e3137302e302f32342d3234203d3e20343031333632.roa
Signing time: Thu 10 Sep 2026 08:16:43 +0000
ROA not before: Thu 10 Sep 2026 08:11:43 +0000
ROA not after: Thu 09 Sep 2027 08:16:43 +0000
asID: 401362
IP address blocks: 193.25.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f5:53:70:4b:b2:28:f2:30:a8:2b:85:ff:4b:c9:c5:a0:ec:f7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Sep 10 08:11:43 2026 GMT
Not After : Sep 9 08:16:43 2027 GMT
Subject: CN=90AA431D5F4ED524764B71A6B306A81A69579DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:a7:e2:31:b0:97:aa:6f:73:6a:52:7f:5d:
6e:ff:cd:51:25:5e:36:c4:e6:3b:15:12:fd:5a:2b:
f3:75:ec:04:26:78:1d:4e:d0:1e:3b:cf:27:73:79:
06:30:b0:09:95:fa:43:1e:f5:86:56:21:bc:2f:9a:
a2:09:95:9c:2f:79:5a:29:bb:f9:2f:e7:9a:38:86:
3a:84:04:cc:9d:22:2b:ec:3b:47:0d:5b:e2:4f:04:
2d:32:c8:e9:73:61:72:0d:7f:ea:d5:62:65:f0:e5:
5b:e8:65:d2:9f:64:0e:f1:73:b8:ad:2a:21:c8:26:
34:51:fa:33:5a:c0:fc:f2:c2:22:a4:ae:b3:d4:9c:
42:ea:f9:d2:d6:11:e9:96:c0:d1:59:c1:b5:a1:a5:
c2:8b:94:a0:64:d1:ca:ad:13:e1:ba:68:07:a1:9a:
bf:3c:25:dc:52:26:b4:f7:9d:5e:99:55:95:02:e3:
93:3c:89:59:5a:d0:30:c7:a2:4d:2b:55:c4:17:e9:
60:61:12:fe:ed:3b:58:04:a4:b8:1a:35:ea:30:0a:
52:af:8c:db:ef:e9:63:06:7b:f5:1b:b3:27:26:25:
80:f9:f5:5a:ce:c9:77:a6:49:47:1c:11:99:8c:10:
77:e0:10:2d:66:c9:c2:f3:17:43:3b:ba:41:f3:e2:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AA:43:1D:5F:4E:D5:24:76:4B:71:A6:B3:06:A8:1A:69:57:9D:E5
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3139332e32352e3137302e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.170.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b6:cd:e7:89:c2:c2:b8:21:27:11:58:97:c4:30:71:bd:2c:
4e:47:dc:58:7e:cd:d8:fa:8d:a0:dc:9e:0e:5b:49:46:8f:8a:
29:66:e4:63:b0:67:04:35:41:77:e4:38:a3:92:65:d2:a4:4d:
f8:45:d3:a7:f3:4e:58:2c:4d:c4:8b:35:4e:98:c9:49:c7:e4:
93:14:72:ba:cb:6f:9f:9a:8f:3f:1a:ae:ec:26:a8:94:5e:f9:
16:d2:29:78:63:71:00:dd:3e:8b:1d:6c:46:5a:9b:69:5a:18:
90:37:90:9e:1c:5f:da:6a:72:71:08:c7:83:8e:44:d4:1d:da:
33:df:a6:44:7e:a0:cc:3a:23:03:ba:45:e5:cd:1a:ce:80:70:
14:77:0b:20:dc:c7:22:9a:88:79:79:75:21:d8:90:4b:fb:94:
0e:20:70:bb:c9:76:ec:b7:ff:31:90:5e:da:2e:18:31:1c:c7:
67:fe:00:ac:d6:84:d7:ed:83:02:54:62:44:2a:0e:2c:7c:90:
c4:70:86:64:55:54:03:40:5f:de:c2:0b:a9:b9:57:35:03:1c:
d4:f5:1f:80:9e:58:f4:e1:b2:a3:6d:a1:f0:31:1e:e5:3a:49:
af:1b:ad:f0:da:ec:a1:10:3a:17:cd:02:5a:fd:90:0d:87:e8:
32:20:a4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:43:59 2026 by rpki-client