Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa
File: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 7bLO5behIIxh8QOWdCdYKrNmYUJrIUwnhfkYG+jVAro=
Subject key identifier: 16:75:53:7B:A8:0D:92:9B:80:83:3A:A7:92:71:63:ED:35:32:A8:ED
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 01ED1F56C5854F38339DCD165900D1F0AACF9A53
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 16 Jul 2026 20:49:13 +0000
ROA not before: Thu 16 Jul 2026 20:44:13 +0000
ROA not after: Thu 15 Jul 2027 20:49:13 +0000
asID: 212238
IP address blocks: 194.156.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ed:1f:56:c5:85:4f:38:33:9d:cd:16:59:00:d1:f0:aa:cf:9a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Jul 16 20:44:13 2026 GMT
Not After : Jul 15 20:49:13 2027 GMT
Subject: CN=1675537BA80D929B80833AA7927163ED3532A8ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:2a:01:02:d5:4e:86:8a:b4:bf:be:d3:47:
ee:17:1f:99:d7:d6:cf:aa:13:9c:cb:f2:a4:ed:e0:
3c:9a:32:cb:b8:24:9a:37:4d:d3:41:c7:3b:87:25:
c5:d3:8e:58:7b:4c:9c:5c:dd:ae:d3:aa:51:e0:2b:
a3:1d:4b:88:20:e2:51:c5:77:31:04:fa:0b:de:75:
0e:2e:8f:85:61:df:e2:24:81:dc:8f:26:73:c7:78:
d0:42:8f:ee:96:b0:15:37:6c:21:93:35:d4:91:83:
98:b1:42:76:e5:2b:a1:87:b2:d2:30:96:55:9c:ae:
e7:cd:97:a0:73:70:09:1c:50:f8:fb:fc:a2:e8:cc:
d2:1e:aa:29:04:7c:b0:01:42:cd:d1:90:51:c4:9f:
18:60:ac:ca:41:3f:6c:82:02:89:fd:61:85:5b:fe:
3f:e1:b1:06:3f:ac:e0:14:bf:cc:0a:bf:e2:79:29:
a1:ec:53:41:d3:e1:6e:36:7a:86:ea:bf:06:c6:6b:
75:61:40:44:fe:6a:34:c6:2f:ec:99:ec:34:7d:e1:
40:50:b0:f4:7f:55:38:7c:f4:27:90:99:bb:1a:d7:
e9:6d:d8:45:fd:33:af:22:2c:08:86:4d:f0:5f:02:
0f:86:f6:b2:08:be:5e:2e:f4:dd:91:2b:df:3a:97:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:75:53:7B:A8:0D:92:9B:80:83:3A:A7:92:71:63:ED:35:32:A8:ED
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:46:68:2a:fa:87:de:75:3e:90:7c:9b:e6:3a:e8:6a:3f:19:
f1:a9:40:e3:00:88:28:62:b6:e4:ce:1e:50:8d:10:8c:34:03:
27:a5:fb:84:7b:44:7c:84:d7:11:f4:81:d4:a4:66:f5:54:7b:
87:2e:1b:c3:c4:f6:75:7b:4b:55:0d:bf:b5:06:d6:37:39:89:
5d:f7:d0:22:79:2d:0e:2c:73:dc:91:10:21:5d:39:99:5a:ff:
4a:47:81:0f:0c:07:26:f8:f6:39:18:ad:73:69:b4:8e:35:ac:
74:86:c8:58:26:ee:fe:8b:07:2c:9a:19:23:6f:8c:a0:f3:f8:
16:50:8b:f5:75:65:35:bd:d5:6b:5f:17:6b:8e:b5:17:a4:f6:
8a:7f:d6:b6:de:ac:bf:c1:c9:7f:15:99:49:52:0a:32:57:71:
55:a0:be:6c:9c:08:ce:c3:58:eb:a8:1c:b4:5d:d2:7e:d2:e9:
e5:33:42:e1:90:3e:0f:36:87:46:68:3d:d6:b7:69:67:05:a6:
41:c8:ba:09:ea:28:c6:46:a7:28:f3:d7:4f:5f:77:2d:f5:bb:
b1:d3:0b:09:8f:a7:eb:69:f9:62:91:d5:cf:4d:8e:6a:31:69:
64:61:9b:f3:06:63:2c:db:be:f8:7d:33:47:d9:4e:54:5a:5e:
a8:4a:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:07 2026 by rpki-client