Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e342e302f32342d3234203d3e20313335343032.roa
File: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (raw, json)
Hash identifier: F98d/FympCBtN9lHMDCUVdUPWLgbnNgcKgQazPb2R2o=
Subject key identifier: 1F:39:6C:80:AA:1E:6A:1E:2C:72:DE:F1:5D:82:C9:68:57:47:B1:48
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 185B18258F6C26E85E5FB013F80B78FCBE9DA8BA
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e342e302f32342d3234203d3e20313335343032.roa
Signing time: Thu 23 Apr 2026 09:47:05 +0000
ROA not before: Thu 23 Apr 2026 09:42:05 +0000
ROA not after: Thu 22 Apr 2027 09:47:05 +0000
asID: 135402
IP address blocks: 193.246.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:5b:18:25:8f:6c:26:e8:5e:5f:b0:13:f8:0b:78:fc:be:9d:a8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Apr 23 09:42:05 2026 GMT
Not After : Apr 22 09:47:05 2027 GMT
Subject: CN=1F396C80AA1E6A1E2C72DEF15D82C9685747B148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:24:ce:3e:42:65:f9:3e:a5:e9:21:fb:74:
5c:eb:8a:60:17:7d:17:3e:ce:b1:6b:38:fa:64:27:
70:73:0d:0c:1f:19:ee:6e:80:2e:99:5f:5d:03:8a:
5c:61:34:2b:8e:79:ab:6d:2a:cc:00:23:6a:79:eb:
ca:39:a8:0a:68:67:7d:a8:03:2b:74:dc:41:2b:17:
c9:a5:e4:2d:29:5e:e5:4b:c8:de:c1:2a:b9:7a:e9:
76:31:3f:0b:92:d7:5c:d8:59:f4:4b:cb:09:b2:d1:
d2:dd:9d:f7:82:2f:75:d9:32:b5:f6:2e:2b:c8:69:
97:4a:47:3d:a2:db:05:cd:75:db:ed:ab:b1:50:12:
b9:0b:0a:71:d7:21:0c:44:09:53:a2:76:82:b6:b5:
7d:84:1f:08:86:ec:fb:ad:13:3b:05:6a:cf:6e:44:
4d:14:87:e7:23:ac:6a:b8:de:97:b7:43:b4:f7:bc:
2e:5e:15:c5:76:d2:b8:10:88:c8:e5:1c:a9:3d:de:
db:81:64:cc:1d:13:ce:95:88:17:25:fc:1e:13:e3:
4b:e4:dc:62:9f:85:d3:3a:be:15:d8:23:6d:37:ef:
7c:ac:20:c4:04:4e:41:4d:d7:32:f4:c1:47:e4:9a:
e1:a8:99:96:64:94:de:77:2c:ad:8f:8f:0b:25:a9:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:39:6C:80:AA:1E:6A:1E:2C:72:DE:F1:5D:82:C9:68:57:47:B1:48
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e342e302f32342d3234203d3e20313335343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.4.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:57:9a:cb:97:63:c7:1e:00:5d:10:19:45:5c:ad:5a:98:34:
42:a4:f5:98:aa:bc:10:b8:55:38:d4:89:86:e5:e1:2f:43:89:
3a:11:34:e0:00:d9:f3:09:43:de:58:f4:bf:ff:82:bd:af:b0:
fa:3c:ba:d1:d9:b3:8a:63:c1:f5:3c:9e:69:50:6a:75:0d:a0:
19:cf:e3:5f:c5:4a:68:19:68:0a:2f:a2:5a:97:ee:81:e5:e9:
06:0a:1c:d7:11:3b:79:d1:24:03:02:6c:bc:99:69:09:e5:82:
20:64:08:8f:e2:0c:4a:9a:f6:8e:c7:1f:a4:72:62:6e:6e:aa:
a9:c2:d4:67:19:52:eb:fe:69:06:36:a7:d8:05:f8:83:94:e7:
b8:d1:f9:1f:05:f6:bb:19:4a:f0:ab:a3:e9:b9:94:94:40:21:
d4:86:02:33:98:e3:55:06:f0:c5:3f:05:62:8e:73:f7:2b:fe:
e0:6d:0e:fc:99:89:b9:fe:bf:fe:58:e6:ac:78:6a:99:cb:43:
59:ec:72:c4:3b:d5:0d:5f:86:78:9d:dc:73:1b:9a:0b:cd:33:
f1:9a:c2:bb:79:87:f3:6e:8d:4d:c4:d3:b1:61:98:b1:42:5d:
e7:dd:d0:ce:56:2f:24:32:ba:4c:2d:38:54:56:4a:4d:ea:20:
18:b3:3d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:11:57 2026 by rpki-client