Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3139342e31352e39382e302f32342d3234203d3e20323039323633.roa
File: 3139342e31352e39382e302f32342d3234203d3e20323039323633.roa (raw, json)
Hash identifier: m3/hDo6YE2S2t43wZcWXQ1Ewsm7RpzIVB6uJScSUTDE=
Subject key identifier: 7F:B4:A5:2C:31:A0:CC:8D:5E:AD:A2:DB:2F:AD:C1:1C:F9:2A:81:77
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 271A8FE59F7AE613DB7F40C9A14B63340DF51CB8
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3139342e31352e39382e302f32342d3234203d3e20323039323633.roa
Signing time: Thu 26 Mar 2026 09:00:55 +0000
ROA not before: Thu 26 Mar 2026 08:55:55 +0000
ROA not after: Thu 25 Mar 2027 09:00:55 +0000
asID: 209263
IP address blocks: 194.15.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:1a:8f:e5:9f:7a:e6:13:db:7f:40:c9:a1:4b:63:34:0d:f5:1c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:55 2026 GMT
Not After : Mar 25 09:00:55 2027 GMT
Subject: CN=7FB4A52C31A0CC8D5EADA2DB2FADC11CF92A8177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:52:93:0c:81:fd:d1:70:10:e2:7c:f2:70:
5e:4a:a1:11:d5:e9:b7:21:95:2b:f2:12:8e:83:63:
5c:56:2e:e9:db:df:82:27:86:e4:d9:7f:4a:26:0e:
7d:3d:0e:43:83:34:bb:92:a8:52:bf:51:84:52:53:
c9:6b:39:81:96:e0:81:69:d2:c5:3f:0b:e3:2b:eb:
58:27:ac:d3:69:a3:69:5a:c7:e1:49:a0:e3:b5:08:
e9:27:ee:f4:c4:46:86:77:ee:0e:b9:53:5f:26:e9:
3b:94:43:d4:35:dd:e2:57:30:14:0e:30:5b:10:96:
97:59:95:d9:ca:57:8e:e3:b4:4e:81:63:f4:3f:af:
60:eb:91:e5:1a:bb:d5:25:c2:21:e8:61:89:b0:ce:
11:65:4c:6e:d0:5f:af:a4:30:c0:67:07:14:e4:2c:
fe:03:e0:71:37:a8:84:ba:e5:32:d5:f6:1d:4e:e9:
3e:7f:cc:78:00:a1:06:e9:e7:9d:ca:9f:a1:5a:a0:
ce:b0:98:3e:d8:32:d5:4e:32:f2:5a:7d:c5:fc:3f:
c5:85:a9:7c:78:83:ea:05:6e:7a:8a:ec:a1:e0:4d:
c7:cf:6b:87:0f:c0:a7:fa:a9:df:16:34:72:51:c7:
c7:87:53:a2:5b:bd:89:a3:b8:6a:ec:7f:ca:72:55:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B4:A5:2C:31:A0:CC:8D:5E:AD:A2:DB:2F:AD:C1:1C:F9:2A:81:77
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3139342e31352e39382e302f32342d3234203d3e20323039323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.98.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ab:e2:2e:41:5c:cd:2f:2e:3f:84:92:40:24:44:ad:cc:4d:
90:d0:62:f5:8d:bd:63:0b:e1:18:e9:47:9d:5b:46:54:9c:f1:
1c:57:fb:c0:89:0a:c3:a3:ed:ba:78:bf:e4:6e:bc:50:bd:ac:
27:ae:78:a3:41:5c:a4:cd:0d:77:d5:50:82:b3:e4:18:10:cb:
c0:38:25:9c:84:2e:e2:d4:6d:f8:24:96:f9:b4:74:85:16:da:
15:15:4c:b6:64:62:e8:96:ef:01:dc:ee:6b:ce:48:bc:11:8c:
10:2b:e9:14:bd:57:81:5f:ad:02:28:89:b3:b4:6d:91:1b:a4:
e8:13:e8:3a:82:a5:f7:7a:57:11:c7:52:02:4b:ef:81:18:36:
bf:36:3d:1c:88:cb:c6:81:2f:4e:09:b1:31:dc:02:be:ce:3a:
5a:f8:15:df:44:c3:d1:b2:6f:cb:01:76:c9:57:9e:1a:28:2a:
09:25:01:a9:37:ae:21:6a:9f:52:cc:fb:ca:84:3d:b6:fd:2c:
95:94:cf:28:8a:40:5e:7e:86:11:ac:b6:f7:e2:c8:63:0e:6e:
2c:f6:b2:16:1c:13:dd:83:67:74:2b:d9:e1:f6:5d:1b:81:94:
a8:ef:d2:1d:69:92:88:69:90:d5:d9:89:ea:52:7b:32:85:52:
21:5c:f3:9e
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUJxqP5Z965hPbf0DJoUtjNA31HLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM3NGJjNmQwMjUxMzViZWQ5NTM5Nzc5YTAzZmRkNjRh
YmViYTExZjAeFw0yNjAzMjYwODU1NTVaFw0yNzAzMjUwOTAwNTVaMDMxMTAvBgNV
BAMTKDdGQjRBNTJDMzFBMENDOEQ1RUFEQTJEQjJGQURDMTFDRjkyQTgxNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5plKTDIH90XAQ4nzycF5KoRHV
6bchlSvyEo6DY1xWLunb34InhuTZf0omDn09DkODNLuSqFK/UYRSU8lrOYGW4IFp
0sU/C+Mr61gnrNNpo2lax+FJoOO1COkn7vTERoZ37g65U18m6TuUQ9Q13eJXMBQO
MFsQlpdZldnKV47jtE6BY/Q/r2DrkeUau9UlwiHoYYmwzhFlTG7QX6+kMMBnBxTk
LP4D4HE3qIS65TLV9h1O6T5/zHgAoQbp553Kn6FaoM6wmD7YMtVOMvJafcX8P8WF
qXx4g+oFbnqK7KHgTcfPa4cPwKf6qd8WNHJRx8eHU6JbvYmjuGrsf8pyVbGbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUf7SlLDGgzI1eraLbL63BHPkqgXcwHwYDVR0j
BBgwFoAUc3S8bQJRNb7ZU5d5oD/dZKvroR8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTQyNTg1ZjctYmMxYi00OTcwLWJkMzQtZGJmZDJiMjE0
N2QyLzAvNzM3NEJDNkQwMjUxMzVCRUQ5NTM5Nzc5QTAzRkRENjRBQkVCQTExRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzUzhiUUpSTmI3WlU1ZDVvRF9kWkt2
cm9SOC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTQyNTg1Zjct
YmMxYi00OTcwLWJkMzQtZGJmZDJiMjE0N2QyLzAvMzEzOTM0MmUzMTM1MmUzOTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzIzNjMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wg9iMA0GCSqGSIb3DQEBCwUAA4IBAQBeq+IuQVzNLy4/hJJAJEStzE2Q0GL1jb1j
C+EY6UedW0ZUnPEcV/vAiQrDo+26eL/kbrxQvawnrnijQVykzQ131VCCs+QYEMvA
OCWchC7i1G34JJb5tHSFFtoVFUy2ZGLolu8B3O5rzki8EYwQK+kUvVeBX60CKImz
tG2RG6ToE+g6gqX3elcRx1ICS++BGDa/Nj0ciMvGgS9OCbEx3AK+zjpa+BXfRMPR
sm/LAXbJV54aKCoJJQGpN64hap9SzPvKhD22/SyVlM8oikBefoYRrLb34shjDm4s
9rIWHBPdg2d0K9nh9l0bgZSo79IdaZKIaZDV2YnqUnsyhVIhXPOe
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:10:12 2026 by rpki-client