Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa
File: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (raw, json)
Hash identifier: MdfTVQ7HqQE/BTej48Bfu9Pqv6K4PX/zinQBHh0QPbw=
Subject key identifier: 69:C0:9D:09:91:E9:15:6A:7F:9B:94:2F:F6:27:87:AE:55:85:3F:84
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 46FBC000DB434F38E34E2971E35FFAE24B8CD95F
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa
Signing time: Mon 20 Jul 2026 12:49:13 +0000
ROA not before: Mon 20 Jul 2026 12:44:13 +0000
ROA not after: Mon 19 Jul 2027 12:49:13 +0000
asID: 216159
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:fb:c0:00:db:43:4f:38:e3:4e:29:71:e3:5f:fa:e2:4b:8c:d9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 20 12:44:13 2026 GMT
Not After : Jul 19 12:49:13 2027 GMT
Subject: CN=69C09D0991E9156A7F9B942FF62787AE55853F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:c2:b2:d2:fb:6f:ee:f0:75:32:83:ce:41:
00:3b:72:37:96:ca:af:5a:98:91:a4:e1:a6:3c:50:
f2:0e:c1:b7:83:dc:df:69:0f:2b:02:ce:7e:66:e9:
23:4a:cd:25:6b:8d:b5:16:94:3a:e1:a6:3c:88:4b:
75:bb:d2:79:e5:56:33:c9:d3:2f:0f:ac:0e:87:ed:
7b:a0:53:e8:3a:44:ce:42:17:73:a1:dd:91:fe:c0:
c4:65:65:c7:d4:64:18:c5:9d:71:05:a0:1b:8e:f9:
47:d9:53:aa:f6:2f:dc:42:29:49:24:08:40:02:3c:
fb:d5:48:42:73:e5:0e:8e:b9:b5:76:a8:76:0c:6f:
ef:a7:9c:72:a2:c9:01:c1:b5:a6:c0:14:19:4c:f9:
a8:0b:4c:af:9f:c7:3a:1d:ea:9e:a4:e3:18:79:cd:
7c:91:1b:66:40:08:de:4c:3f:ea:01:0c:f5:8f:2b:
74:40:14:7c:8c:b7:75:5f:ba:83:dd:c3:93:fa:ac:
6a:c6:ec:ed:29:37:26:4b:a2:90:3f:ea:7c:95:c1:
1d:77:54:d7:c6:1e:42:db:cc:04:41:a0:a7:d0:7d:
cf:87:4b:97:da:49:cf:40:3e:46:b1:8a:87:ac:ff:
19:b3:d8:1a:17:75:d5:83:ac:6b:ac:8b:21:14:eb:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C0:9D:09:91:E9:15:6A:7F:9B:94:2F:F6:27:87:AE:55:85:3F:84
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
19:60:69:28:10:54:df:0a:60:e1:25:f4:d1:88:71:22:d9:eb:
96:ca:57:be:5c:7f:58:a0:2f:60:fc:97:cc:eb:fc:89:c1:59:
3e:30:9b:10:bd:12:af:58:f4:a6:69:e8:de:6e:24:f5:77:a6:
7b:b5:c9:8f:72:46:75:2a:9a:51:79:af:cc:22:38:05:3d:11:
bb:df:88:70:53:77:0f:dc:53:d4:71:6d:10:e9:19:32:b4:6c:
68:d4:c1:be:da:66:b8:20:34:30:a9:fa:d5:01:bc:7e:03:0c:
d6:ff:f7:dd:57:36:89:84:c8:9a:4d:50:ed:e3:91:80:a7:51:
88:22:91:19:03:b2:3e:ec:c9:69:1f:87:9b:98:ec:66:a0:bc:
53:d8:2b:55:bf:9f:47:74:7f:cd:48:c0:85:05:7e:6b:ad:a4:
d9:7b:f6:fe:4f:65:c3:88:79:fe:77:e6:00:f1:a3:7c:b9:1c:
57:4c:37:3f:13:75:df:d4:97:fb:65:0d:2a:01:0c:9a:db:02:
53:e0:f1:8c:2d:e4:6a:5a:a4:8c:8e:fa:1a:b4:2a:90:fc:ea:
5f:9a:2f:ac:48:df:00:a4:9f:47:79:93:43:68:1f:f1:03:c2:
e2:e0:e0:aa:24:1d:d2:f8:cb:e3:bf:4b:e4:1c:8d:de:78:e7:
77:ab:5e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:22:25 2026 by rpki-client