Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203533333536.roa
File: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier: 2E2zMal9yW/4bKhMOpMwDsUxdwb+r9tYbc5oXigCgVU=
Subject key identifier: C4:AD:04:92:64:CC:2A:3E:5A:4E:3F:23:34:DC:A2:EA:6C:5E:1B:86
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 2C23ADA6D5BA7C5BE1B4AFCF212E1F0110F2C119
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203533333536.roa
Signing time: Tue 28 Apr 2026 13:47:07 +0000
ROA not before: Tue 28 Apr 2026 13:42:07 +0000
ROA not after: Tue 27 Apr 2027 13:47:07 +0000
asID: 53356
IP address blocks: 159.253.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:23:ad:a6:d5:ba:7c:5b:e1:b4:af:cf:21:2e:1f:01:10:f2:c1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Apr 28 13:42:07 2026 GMT
Not After : Apr 27 13:47:07 2027 GMT
Subject: CN=C4AD049264CC2A3E5A4E3F2334DCA2EA6C5E1B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:c8:a8:76:09:16:4f:6e:a8:a1:51:04:c1:
9a:3b:1a:2f:43:40:e9:2a:ef:ea:eb:d0:85:97:f7:
89:28:65:63:cd:3f:aa:9b:5c:6a:4e:cb:18:08:80:
e6:d0:a6:30:b1:98:05:5d:35:b5:6b:89:99:d5:c6:
50:98:78:27:c1:0e:fc:f8:85:7f:f9:58:a9:f8:67:
ba:0e:28:0b:b4:dd:9b:29:11:77:96:50:05:7c:73:
61:67:39:53:3a:f3:b3:41:16:1c:45:25:51:f1:dc:
d3:e9:78:4a:a7:d4:04:95:4e:1f:71:41:e2:ad:76:
61:d9:99:2a:5c:0e:b8:3f:92:47:3b:72:da:48:59:
10:5b:14:cb:ca:59:9f:4c:33:20:7c:a6:2f:a4:97:
34:0e:e6:dd:6c:08:a5:e7:cc:fc:25:fb:a1:1e:31:
7d:12:09:9d:61:64:22:ce:06:a3:53:78:f0:31:22:
49:97:08:6b:d1:ef:ae:70:ea:0e:08:b4:c8:26:d0:
3a:92:d5:08:34:14:e2:a1:a9:6c:9e:39:79:fd:85:
00:19:78:84:5e:b6:d9:66:87:40:85:3a:f9:22:40:
ab:d1:da:7c:18:4b:02:1b:59:86:80:04:a4:9a:68:
7a:00:a0:45:49:8d:79:5a:29:c7:49:8e:a7:00:e7:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AD:04:92:64:CC:2A:3E:5A:4E:3F:23:34:DC:A2:EA:6C:5E:1B:86
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
10:da:b1:f1:b3:3e:50:3f:09:7f:dd:41:61:98:f1:53:f0:55:
cc:b8:f8:f2:fe:a1:ce:33:70:65:68:92:e7:99:c2:51:b0:d4:
3c:83:2c:7c:e2:68:c7:41:ff:90:49:41:01:e1:27:d0:95:71:
f9:03:e1:f6:19:36:91:fe:71:29:74:68:4d:63:4e:e4:ba:07:
29:0d:88:d6:97:8d:98:7b:5e:40:bd:84:eb:35:5a:31:51:a7:
22:2c:d3:c8:d6:d1:b5:db:dc:80:10:01:6e:3e:bd:f9:84:c7:
64:ea:0e:05:32:65:ab:91:db:9a:d4:5e:d4:eb:3b:8b:f2:49:
3f:5b:33:91:53:92:ac:41:f1:85:63:78:e4:cd:97:19:1f:3f:
ff:e9:90:2d:84:5b:1c:a4:8d:74:82:39:10:7a:df:c3:d0:87:
23:48:46:67:8e:7d:b5:30:df:e4:51:fa:33:ad:67:f6:69:e3:
44:59:62:c9:3e:13:b8:bb:56:2e:c6:66:f8:44:0d:84:71:f6:
8a:0c:2c:52:6c:34:71:62:b8:aa:c0:6e:0f:f9:73:98:a6:81:
4e:5e:bf:83:49:ba:76:aa:7c:6c:42:49:85:d9:9c:20:15:1b:
fd:8e:5c:12:22:52:c9:a6:94:dc:dc:a8:9c:25:23:b5:73:2a:
bb:43:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:24:58 2026 by rpki-client