Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3139332e332e3136352e302f32342d3234203d3e20323032333539.roa
File: 3139332e332e3136352e302f32342d3234203d3e20323032333539.roa (raw, json)
Hash identifier: ZX/Vxhz9TnT0WVH3kTHbiDxmDhhEl8r89rQjXgaMGrE=
Subject key identifier: 31:92:FF:C4:1F:62:40:15:20:A4:25:2F:09:9C:5D:B9:9B:11:C4:CB
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 0F272DBCEDC0BD43756132089A108F182BF2EF04
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3139332e332e3136352e302f32342d3234203d3e20323032333539.roa
Signing time: Sun 03 May 2026 13:05:00 +0000
ROA not before: Sun 03 May 2026 13:00:00 +0000
ROA not after: Sun 02 May 2027 13:05:00 +0000
asID: 202359
IP address blocks: 193.3.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:27:2d:bc:ed:c0:bd:43:75:61:32:08:9a:10:8f:18:2b:f2:ef:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 3 13:00:00 2026 GMT
Not After : May 2 13:05:00 2027 GMT
Subject: CN=3192FFC41F62401520A4252F099C5DB99B11C4CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b8:1b:27:64:b1:07:07:b9:f6:5f:1f:44:1b:
75:8f:ad:ad:c7:c3:a4:c2:77:0e:86:d4:0f:59:b3:
dc:86:0c:ad:a2:77:e3:19:56:09:5d:01:12:37:6c:
56:5b:90:83:20:9e:14:70:6e:c1:34:53:d7:ee:c5:
fd:52:6e:61:35:d6:e9:83:f2:38:33:1b:d9:0c:f0:
b8:28:b3:cc:35:6e:13:17:11:84:28:e8:f1:70:8d:
80:3f:9d:9f:13:30:b8:45:5e:b0:4b:f0:f8:ca:52:
87:bd:83:35:52:b7:bd:fa:f3:dc:8b:9f:8b:dc:f4:
cd:ce:2e:25:89:2b:e0:9f:a3:5f:82:81:65:da:78:
e1:64:08:35:d2:e0:fd:19:07:f2:ae:6b:ff:f2:2b:
69:5e:5c:5e:c6:e1:ae:ed:d9:0d:7b:02:ef:05:85:
5d:24:08:8e:50:87:f9:ca:97:9d:31:ac:21:c2:d6:
19:86:10:35:a2:c3:cf:62:0a:2b:ae:a5:7c:f8:2c:
2b:b4:26:cd:72:94:e6:79:91:a0:a3:1e:db:a2:1c:
a3:44:b5:82:3d:f9:d0:07:8c:29:27:b0:29:25:7c:
f8:3d:28:9b:b1:1f:4b:10:f4:d9:f1:be:46:96:ee:
e2:2c:3f:9a:a6:84:01:c2:80:d5:cb:75:97:0e:db:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:92:FF:C4:1F:62:40:15:20:A4:25:2F:09:9C:5D:B9:9B:11:C4:CB
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3139332e332e3136352e302f32342d3234203d3e20323032333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.165.0/24
Signature Algorithm: sha256WithRSAEncryption
86:75:79:6c:aa:e3:22:25:ba:51:f2:21:ba:8f:42:66:ee:2c:
bd:e0:78:01:2f:f8:70:a7:54:47:34:e4:4f:ce:84:eb:ab:63:
76:aa:c6:1f:a7:b4:44:a4:83:35:86:f9:77:21:ec:02:61:14:
46:64:48:b0:2f:92:54:95:f3:2d:61:c5:07:f9:01:0b:35:1e:
10:87:10:6d:a6:55:a8:a3:f2:96:13:5b:24:f4:25:ff:10:c5:
00:76:b1:50:58:06:cb:82:08:04:bb:6c:f2:1b:b2:b3:86:5a:
b0:12:bf:25:ee:96:15:c1:bd:6f:82:4a:c8:17:7e:78:72:64:
5d:8d:3f:7a:be:d3:ef:39:b0:ff:62:17:b3:40:3b:35:46:d9:
3f:b2:40:83:b5:22:44:95:e1:22:7e:70:10:b1:76:5b:d5:c0:
5d:8b:eb:8f:dd:bf:c0:e7:4c:93:4e:d4:9f:8d:dc:b5:f7:1e:
aa:ca:ca:8f:82:af:70:33:e0:d2:23:28:43:3f:e6:89:df:14:
e8:35:3f:42:52:04:2d:3a:6d:4c:72:d3:a2:78:c3:aa:4f:fc:
8d:0d:8f:35:74:20:8c:e9:94:ec:bf:8a:6f:98:3d:ea:d9:05:
29:15:50:a3:61:39:cc:f3:af:e2:dd:6f:40:3e:03:74:76:4d:
eb:41:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:18:44 2026 by rpki-client