Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa
File: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (raw, json)
Hash identifier: fdALPGopwtGvbJEhx+/96pp78JBOCpIXPSPl4+ufmoE=
Subject key identifier: E3:0A:3E:6B:55:DB:34:0A:48:F6:BD:D7:91:D4:FB:2F:C1:E3:99:12
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 33F60F4863AB679C6DF6AB2BFA8DE4FC424AB335
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa
Signing time: Wed 24 Sep 2025 09:44:48 +0000
ROA not before: Wed 24 Sep 2025 09:39:48 +0000
ROA not after: Wed 23 Sep 2026 09:44:48 +0000
asID: 216138
IP address blocks: 193.246.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f6:0f:48:63:ab:67:9c:6d:f6:ab:2b:fa:8d:e4:fc:42:4a:b3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Sep 24 09:39:48 2025 GMT
Not After : Sep 23 09:44:48 2026 GMT
Subject: CN=E30A3E6B55DB340A48F6BDD791D4FB2FC1E39912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:25:20:d1:39:49:26:d5:25:37:a1:37:c1:04:
67:6a:b7:20:83:19:31:66:8f:ae:11:f1:cb:d2:9f:
1a:a1:d2:31:88:4d:ef:65:e7:8e:ec:89:67:dd:a1:
cc:03:7e:d5:62:36:12:37:01:07:78:ee:36:f8:b0:
5e:b4:92:d5:ca:dc:69:55:bc:d1:41:b2:01:6a:5c:
6c:f4:8b:1e:42:bc:b2:59:ec:a7:ff:d0:f3:7e:85:
5b:9f:d8:38:07:93:b5:47:b9:e2:24:00:53:c9:84:
4c:1e:7c:c9:f7:56:ff:ce:80:de:7d:1e:b3:dd:17:
56:81:32:b5:73:21:1a:9c:99:74:ad:b6:63:92:58:
49:bc:b7:93:ab:95:99:de:44:2b:05:ca:17:d9:7f:
87:2e:02:9b:78:2b:61:b4:95:50:40:5f:7f:39:8d:
2f:d9:43:f4:83:53:e3:1f:21:3d:10:33:77:27:b4:
30:6f:e4:74:45:53:68:76:10:70:53:26:6a:db:9d:
39:8c:e6:04:b5:f8:73:9c:0b:bc:eb:d8:a6:60:71:
7c:7e:71:32:6d:ad:44:9c:16:a7:b7:e1:08:57:bc:
a3:4f:c6:c9:f9:01:8d:20:ab:d8:ad:62:83:d5:80:
12:74:72:fe:3f:45:b9:e7:97:1d:dd:bc:b1:30:32:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0A:3E:6B:55:DB:34:0A:48:F6:BD:D7:91:D4:FB:2F:C1:E3:99:12
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.103.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d6:42:53:ed:07:af:4d:12:92:8b:8e:d4:4a:d4:7a:b6:2d:
4b:2f:60:33:18:fc:01:e4:9e:9e:89:14:ed:95:37:80:b3:8f:
f0:5d:04:ca:d9:27:76:fb:87:34:16:50:16:38:a3:b8:a9:1a:
2b:78:e7:d6:29:57:f7:9f:ab:ff:c0:80:28:73:b8:33:65:08:
2b:79:ff:50:d3:c4:d7:53:8d:b2:94:4e:0f:0e:e3:89:73:2b:
e7:6c:35:bf:39:88:45:44:c8:2a:30:b1:df:5d:7e:3c:71:f6:
e6:4a:d4:3c:4f:8d:96:55:0f:07:5b:79:9b:c4:de:86:3a:b0:
f0:57:c4:8f:02:2d:0f:ac:bf:1a:61:10:ed:91:56:b9:40:ab:
86:8a:5f:58:05:a4:f0:84:89:4f:04:26:f0:b5:c8:c8:a3:7b:
57:80:39:64:30:b4:83:5f:82:4c:8f:1d:12:2a:2f:c7:50:7c:
82:cb:ee:d3:98:37:fc:13:91:47:ef:f5:aa:0c:57:ca:a1:fe:
f8:06:f7:e9:47:24:8e:7a:95:9c:e9:3f:d2:42:21:49:70:99:
14:67:2b:10:b6:24:d4:87:19:3d:c5:61:c5:74:87:37:21:84:
73:42:e4:38:74:d1:83:cc:24:dc:52:d8:66:62:6f:86:25:7f:
5a:13:90:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:17 2025 by rpki-client