Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3139332e32352e3137312e302f32342d3234203d3e20323139323832.roa
File: 3139332e32352e3137312e302f32342d3234203d3e20323139323832.roa (raw, json)
Hash identifier: aCsicXdDXRUV481f9C44VoGSgJMkBW3XWuEqN3PJHEk=
Subject key identifier: 31:DB:42:FA:FF:BB:54:7A:EB:B6:89:A6:EA:FE:01:9C:7F:F2:AB:DA
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 5C722EAA7CFDFEB5EC39B325D700472DB853D348
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3139332e32352e3137312e302f32342d3234203d3e20323139323832.roa
Signing time: Thu 09 Jul 2026 04:20:33 +0000
ROA not before: Thu 09 Jul 2026 04:15:33 +0000
ROA not after: Thu 08 Jul 2027 04:20:33 +0000
asID: 219282
IP address blocks: 193.25.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:72:2e:aa:7c:fd:fe:b5:ec:39:b3:25:d7:00:47:2d:b8:53:d3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Jul 9 04:15:33 2026 GMT
Not After : Jul 8 04:20:33 2027 GMT
Subject: CN=31DB42FAFFBB547AEBB689A6EAFE019C7FF2ABDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:2e:9a:3f:5c:52:d3:16:50:16:6e:62:31:
67:8b:12:bd:48:8e:b4:03:ec:bf:c0:4b:6e:9f:db:
2f:a7:ea:67:82:8d:b8:2a:1d:43:8e:b2:e1:fb:b7:
de:3c:fa:fc:f2:a3:a8:33:d5:a8:30:6c:b0:06:a1:
7b:88:a0:b0:88:c7:1a:35:89:a1:1f:ca:9b:5f:cf:
64:4d:e3:4e:bb:ef:28:b0:1d:bc:d9:dc:30:78:12:
c7:4c:a1:6b:69:a8:e7:6e:fa:9b:9d:83:c5:cc:60:
03:49:8c:19:91:5f:17:35:ac:0c:4e:6a:43:c9:a7:
40:58:7f:89:1a:2a:67:60:c0:c9:8e:43:55:6a:59:
9d:27:c3:95:b0:54:cc:a5:fb:6f:34:6c:b2:c6:6f:
a9:4a:00:21:c8:9c:23:8b:4a:77:81:4a:88:d0:41:
c4:4d:19:21:e9:78:74:70:6c:73:e9:0d:22:39:ad:
8d:32:94:9f:5a:2f:04:da:af:1e:d5:88:db:03:65:
a5:90:39:87:4c:80:31:0e:55:66:2f:37:b3:f7:12:
46:0f:66:8c:dd:0e:9b:df:1e:b3:89:41:2e:b9:4e:
ec:ed:1d:b5:62:77:ae:65:ca:0b:d9:9b:55:5c:77:
12:56:01:e8:56:1a:c1:54:27:bb:f3:02:a1:46:25:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DB:42:FA:FF:BB:54:7A:EB:B6:89:A6:EA:FE:01:9C:7F:F2:AB:DA
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3139332e32352e3137312e302f32342d3234203d3e20323139323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.171.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f6:c8:7f:fd:00:ff:b5:1b:4c:54:3c:5a:87:e5:ab:e2:93:
4f:4e:be:dc:12:b4:d9:bd:5a:a6:2d:4a:76:0d:0f:7e:09:5e:
b3:64:4b:04:bc:e6:dd:a8:9f:4a:97:d8:32:b8:38:bc:49:c8:
17:61:f9:37:fe:c8:94:d9:79:4b:20:11:12:10:91:f0:38:2a:
63:14:dc:b4:e9:16:da:e9:9f:5a:18:78:9c:0e:e2:c5:1a:63:
a9:3a:c7:e0:bb:51:b7:35:3e:7f:2e:cc:6f:43:88:98:47:38:
db:e1:b2:e6:06:eb:b2:ea:26:b2:43:fa:f2:84:cf:88:53:2e:
0d:ea:4d:b3:19:de:9d:55:d7:f5:4b:a2:c4:db:68:5c:02:81:
9e:a9:fa:a1:ad:91:1a:81:85:be:8e:c1:36:87:e2:cb:44:b5:
ef:af:7a:f6:15:72:65:bc:cc:0a:c1:3d:02:42:3a:e2:a3:eb:
0b:1f:90:c8:fc:0c:55:6b:b4:54:35:b9:c7:c2:59:f7:d1:d2:
a5:c1:34:0a:00:17:1e:bb:dc:a7:d0:2c:b9:f6:0b:fb:08:2b:
cb:15:0c:d7:0f:5a:a7:dd:ae:c1:3a:22:5f:11:fe:ea:0c:c2:
39:eb:39:a8:d6:64:c2:eb:a9:b1:04:88:ed:81:a8:78:ec:ae:
c1:f2:ee:4d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXHIuqnz9/rXsObMl1wBHLbhT00gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj
Yjk2NjdmZjAeFw0yNjA3MDkwNDE1MzNaFw0yNzA3MDgwNDIwMzNaMDMxMTAvBgNV
BAMTKDMxREI0MkZBRkZCQjU0N0FFQkI2ODlBNkVBRkUwMTlDN0ZGMkFCREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Ei6aP1xS0xZQFm5iMWeLEr1I
jrQD7L/AS26f2y+n6meCjbgqHUOOsuH7t948+vzyo6gz1agwbLAGoXuIoLCIxxo1
iaEfyptfz2RN40677yiwHbzZ3DB4EsdMoWtpqOdu+pudg8XMYANJjBmRXxc1rAxO
akPJp0BYf4kaKmdgwMmOQ1VqWZ0nw5WwVMyl+280bLLGb6lKACHInCOLSneBSojQ
QcRNGSHpeHRwbHPpDSI5rY0ylJ9aLwTarx7ViNsDZaWQOYdMgDEOVWYvN7P3EkYP
ZozdDpvfHrOJQS65TuztHbVid65lygvZm1VcdxJWAehWGsFUJ7vzAqFGJeOfAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUMdtC+v+7VHrrtomm6v4BnH/yq9owHwYDVR0j
BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4
ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1
V1pfOC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMt
MTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4ZjIyLzAvMzEzOTMzMmUzMjM1MmUzMTM3
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzkzMjM4MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBGaswDQYJKoZIhvcNAQELBQADggEBABz2yH/9AP+1G0xUPFqH5avik09OvtwS
tNm9WqYtSnYND34JXrNkSwS85t2on0qX2DK4OLxJyBdh+Tf+yJTZeUsgERIQkfA4
KmMU3LTpFtrpn1oYeJwO4sUaY6k6x+C7Ubc1Pn8uzG9DiJhHONvhsuYG67LqJrJD
+vKEz4hTLg3qTbMZ3p1V1/VLosTbaFwCgZ6p+qGtkRqBhb6OwTaH4stEte+vevYV
cmW8zArBPQJCOuKj6wsfkMj8DFVrtFQ1ucfCWffR0qXBNAoAFx673KfQLLn2C/sI
K8sVDNcPWqfdrsE6Il8R/uoMwjnrOajWZMLrqbEEiO2BqHjsrsHy7k0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:59 2026 by rpki-client