Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e20323134313433.roa
File: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: CTftoPGHrXXBqNwBsk+JB6aMh5FTruF9zBOslkFrnvc=
Subject key identifier: A7:B6:0D:9F:70:71:74:31:F9:21:14:44:CF:0D:9D:B8:C1:AE:D6:3A
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 24E5C8F9C1F1979722C922B529C7CCA0C11B250E
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e20323134313433.roa
Signing time: Sun 05 Jul 2026 16:48:56 +0000
ROA not before: Sun 05 Jul 2026 16:43:56 +0000
ROA not after: Sun 04 Jul 2027 16:48:56 +0000
asID: 214143
IP address blocks: 159.253.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e5:c8:f9:c1:f1:97:97:22:c9:22:b5:29:c7:cc:a0:c1:1b:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Jul 5 16:43:56 2026 GMT
Not After : Jul 4 16:48:56 2027 GMT
Subject: CN=A7B60D9F70717431F9211444CF0D9DB8C1AED63A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:17:3e:52:75:1e:61:6f:52:68:6a:44:fb:
8e:50:fb:f0:2a:3f:25:44:10:87:41:12:95:f4:a5:
a2:d2:93:5a:13:b6:00:ef:0f:6a:e4:84:5d:20:85:
61:c4:1a:9f:30:6b:0b:9d:86:8c:22:82:ab:4c:42:
f2:fa:b6:eb:f8:16:7a:4b:9f:5e:f5:1f:ad:0a:f6:
c5:3a:80:a6:f5:a4:47:7d:a1:a7:21:e5:2f:c4:ef:
de:5d:bc:29:9d:fe:88:2c:ba:e4:f5:70:92:50:58:
4a:58:c9:0a:3c:d4:1d:91:e8:f5:55:fd:1c:df:91:
fb:5f:b1:b8:1a:7a:65:71:dc:3d:7d:19:40:2d:27:
42:66:93:04:73:28:d8:3c:7b:4b:13:b2:a1:ec:0a:
b6:e1:ba:80:f6:0b:80:24:fa:2c:15:f6:43:92:3e:
09:86:0f:65:57:e2:40:b1:55:41:7a:6c:ec:55:eb:
d2:48:b1:9a:e5:ab:db:2d:5f:e0:34:99:ec:a5:1a:
e9:e1:0c:01:7e:2b:59:92:da:ca:de:c9:08:8d:b9:
2f:ac:bb:e4:95:b3:0c:02:7e:6f:19:44:e0:6a:4e:
ad:3e:26:c9:cf:12:12:c6:f2:dd:49:55:3a:e4:c4:
20:04:6c:68:94:8c:32:23:f2:b6:ba:1c:a5:6d:bd:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:0D:9F:70:71:74:31:F9:21:14:44:CF:0D:9D:B8:C1:AE:D6:3A
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.6.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d5:9b:67:cf:e4:97:86:c2:3c:85:f1:7e:b8:d2:75:eb:b1:
48:d4:fa:01:fc:20:b1:cd:37:73:d9:23:9d:10:80:3e:fb:d7:
b1:06:c8:c3:af:43:b1:9e:17:e8:f4:e7:84:4a:59:ad:60:3d:
96:65:de:ec:20:e2:33:36:74:4d:da:2a:7c:a4:ea:b5:44:a2:
5c:f4:cb:bd:1d:f6:d3:2c:ac:b6:e3:4f:6c:86:65:0b:77:25:
a1:ee:85:ad:da:84:49:ba:ca:20:f3:d0:ba:63:6b:2f:10:db:
5a:66:be:6b:c3:0f:3a:7c:04:87:7d:94:7a:3f:45:f0:70:c2:
82:e8:69:f4:dc:b5:23:38:2f:fc:67:aa:ee:9f:7c:50:dc:fb:
e9:5f:25:8e:63:8b:d7:a4:82:78:ca:26:79:52:69:7f:82:52:
ca:ca:f3:83:67:6b:32:75:f6:1f:d3:4b:e7:3a:aa:a7:eb:b1:
92:55:cd:28:b3:04:5a:9b:44:be:df:2f:08:f3:47:1a:46:b9:
c4:7c:fc:27:5a:28:b7:34:27:53:13:cd:92:dd:73:ad:0b:68:
a8:40:b4:ce:a7:04:c2:e6:6b:a1:cb:70:f5:4f:57:dd:67:fe:
43:03:e5:5c:b3:88:ee:e3:b1:5a:8f:4a:dc:c5:ae:3a:a1:aa:
aa:e2:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:49 2026 by rpki-client