Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa
File: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (raw, json)
Hash identifier: ckCO7TR7+FOS8cfzD18uh07ljhtm2G97mBL23DKu09I=
Subject key identifier: EA:E3:E5:7E:08:7B:2C:8A:61:06:0E:B1:98:27:34:96:B3:A4:91:A3
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 5593BD72D65E076E1CC5AC6EDCDA1CD3BC1FBC7F
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa
Signing time: Thu 23 Jul 2026 10:49:14 +0000
ROA not before: Thu 23 Jul 2026 10:44:14 +0000
ROA not after: Thu 22 Jul 2027 10:49:14 +0000
asID: 212815
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:93:bd:72:d6:5e:07:6e:1c:c5:ac:6e:dc:da:1c:d3:bc:1f:bc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 23 10:44:14 2026 GMT
Not After : Jul 22 10:49:14 2027 GMT
Subject: CN=EAE3E57E087B2C8A61060EB198273496B3A491A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:90:ad:fe:67:2e:bc:c0:80:a1:78:8c:0b:
12:27:08:f5:fb:eb:d5:6b:69:a5:89:e5:ef:e4:0d:
19:48:71:9f:62:03:11:1b:f6:4a:a0:a4:8a:b1:a4:
0f:db:b3:b6:ca:b1:c9:ef:10:c3:04:9c:0a:a1:43:
ef:2d:b4:b0:8d:17:7a:bb:76:f4:9b:f6:85:91:0f:
aa:76:da:69:ad:aa:75:cc:f4:26:85:c7:44:75:59:
e3:bd:c5:86:40:ef:39:02:64:96:16:d9:54:6a:3d:
a1:8b:14:92:b1:c0:f5:04:ef:8a:dc:a2:4a:62:70:
40:6e:c1:03:84:0e:03:90:4a:3a:98:87:11:c1:17:
d6:1a:cc:4b:14:27:93:f8:91:75:8d:25:ce:af:2f:
5d:6c:14:4f:87:11:15:e2:b8:f4:d1:86:8f:86:2f:
22:b9:e0:9e:f0:a2:21:d5:9e:b2:86:91:a1:d8:b7:
f2:07:f6:05:80:01:59:55:8e:50:bf:ad:33:ee:11:
5a:13:8a:44:92:c4:0b:c1:60:aa:8a:b6:96:b4:bc:
75:d4:59:3c:c0:2f:9f:b4:53:c2:3f:a8:97:3b:2c:
4b:8b:0b:f7:b1:05:e9:4c:5c:4c:82:e7:1e:b2:f8:
1c:dd:a4:77:0d:8a:46:29:a8:0f:e3:29:eb:44:0d:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E3:E5:7E:08:7B:2C:8A:61:06:0E:B1:98:27:34:96:B3:A4:91:A3
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ce:92:c3:9e:49:2b:e5:17:2c:22:0a:59:59:13:a5:5b:72:
2f:a1:ec:0b:46:42:5c:ab:d5:6e:80:db:24:86:e3:f7:93:29:
34:f7:5e:30:b8:48:26:29:4a:eb:d6:df:36:15:a6:1c:a1:95:
d5:10:5a:71:d6:bd:ad:09:42:9c:44:17:f8:88:fd:a1:aa:9f:
fc:1e:f2:28:d1:6b:9f:26:67:04:9c:b2:51:f7:2b:5b:86:a3:
34:41:bd:13:31:1b:1e:14:ad:0a:90:80:f2:bf:86:6f:91:38:
bb:0b:75:40:c0:be:c4:95:18:b2:46:04:5e:43:f4:6e:26:5a:
80:97:0d:81:58:fa:b5:62:ff:23:1b:0f:78:4f:c6:c9:c8:7f:
43:6e:37:36:a2:d8:8e:b8:43:fe:8f:39:5c:20:15:78:7f:0f:
01:c4:1d:81:69:b9:ea:0f:86:9b:2f:61:8f:4f:0a:53:fe:c8:
3a:47:c7:29:1e:c3:00:3a:07:bb:56:dd:81:f2:b6:fd:ea:64:
51:3d:f6:4e:4d:05:d6:d2:20:e6:b5:25:f4:d7:41:2f:8b:c6:
bc:52:fc:f9:dd:40:7d:86:31:a6:6a:54:6d:8e:53:a1:77:89:
6c:70:2d:60:5f:77:a8:ad:f2:ba:06:f8:e3:92:2a:60:8c:5f:
ba:65:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:24 2026 by rpki-client