Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3139342e31352e39392e302f32342d3234203d3e20323133363037.roa
File: 3139342e31352e39392e302f32342d3234203d3e20323133363037.roa (raw, json)
Hash identifier: DB/BGjNTe9IgNr+lSDRib7L9JBQSbBmWEE3f9sdeUus=
Subject key identifier: 38:7D:CC:CC:CF:4E:BD:7C:0D:9C:FD:37:C4:9A:9A:4A:01:82:1D:BD
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 0E4745A538AFD5DDB90A71EDFB1751138E97053E
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3139342e31352e39392e302f32342d3234203d3e20323133363037.roa
Signing time: Thu 26 Mar 2026 09:00:55 +0000
ROA not before: Thu 26 Mar 2026 08:55:55 +0000
ROA not after: Thu 25 Mar 2027 09:00:55 +0000
asID: 213607
IP address blocks: 194.15.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:47:45:a5:38:af:d5:dd:b9:0a:71:ed:fb:17:51:13:8e:97:05:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:55 2026 GMT
Not After : Mar 25 09:00:55 2027 GMT
Subject: CN=387DCCCCCF4EBD7C0D9CFD37C49A9A4A01821DBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:82:e9:a5:59:63:7e:c2:6c:33:ad:80:6c:
40:89:d7:24:6a:5c:07:75:50:37:e6:5d:88:15:cd:
36:d6:6c:e4:50:c4:1b:50:74:57:83:f4:54:c0:d7:
39:c6:54:5a:e4:96:1e:a6:a2:35:ab:b4:38:bd:8a:
e4:a9:7c:88:ea:4c:56:5e:2c:7e:ac:81:16:a0:8e:
93:22:4c:a0:6f:95:93:dd:29:ad:7a:a6:35:3c:a0:
c4:a0:81:45:20:b7:c1:7f:86:45:e1:cc:92:e4:fe:
18:97:ec:54:4a:af:5a:f2:2e:f6:a2:f8:b5:6c:85:
f2:12:f4:9a:cf:8e:27:8d:e0:60:be:e4:3d:c4:de:
89:bd:9e:34:91:b9:1f:07:ec:1b:22:d9:fe:a7:3b:
3a:03:30:40:7d:4a:1b:b4:aa:c6:e1:a2:8e:fd:bb:
60:3a:60:29:87:16:92:42:ff:9b:de:35:09:51:e8:
23:3e:75:34:5d:17:27:8c:27:2c:8c:e7:77:00:27:
c5:93:f6:a5:12:1b:47:21:9b:b6:5d:4b:4e:2b:31:
47:35:aa:8a:93:bb:a0:1c:dc:e1:28:37:79:57:ed:
7f:35:75:58:9c:83:c8:e9:13:fe:fa:1d:6b:17:c0:
cc:2c:8b:65:8a:45:82:67:70:16:8d:f7:ea:cd:d3:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7D:CC:CC:CF:4E:BD:7C:0D:9C:FD:37:C4:9A:9A:4A:01:82:1D:BD
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3139342e31352e39392e302f32342d3234203d3e20323133363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.99.0/24
Signature Algorithm: sha256WithRSAEncryption
47:eb:13:44:b6:2e:35:b3:04:64:86:60:03:d8:53:26:35:b7:
26:15:72:ca:13:84:a8:c7:4e:6f:12:c4:32:58:c9:4e:29:5a:
06:4e:7b:13:77:0a:5c:1e:20:a8:07:86:dc:19:4a:cf:bd:df:
4c:b7:7f:6a:3c:32:d1:1a:e3:56:c6:24:43:02:f8:59:c4:ee:
b2:1c:45:b9:85:38:85:3d:f5:20:59:e4:09:73:7f:d7:8f:6b:
e8:82:04:77:55:ca:bc:a0:29:f2:13:1b:19:16:44:71:61:d2:
1b:08:ab:ea:00:5d:bd:03:35:1c:0c:2f:69:f1:2a:31:15:92:
1d:d1:89:fb:04:29:32:22:42:72:42:d3:d6:bd:d9:0b:04:11:
87:62:06:8a:5e:11:08:3e:f1:03:0e:62:b9:6f:9d:77:ab:1c:
d2:51:c8:f9:7c:d9:5c:8a:0d:68:79:6c:b6:12:b0:d9:9c:52:
77:77:06:85:9b:be:61:38:28:0e:6c:0c:eb:1e:cc:86:8b:12:
fc:ad:f8:fd:85:04:82:74:3b:fd:ef:ab:09:0d:65:2d:d4:86:
d6:fa:fe:71:bb:c4:dc:14:d2:4e:37:c5:a2:94:23:ea:61:cd:
8e:2d:1d:80:06:e0:a6:71:3f:9d:a7:df:a7:4f:f0:13:3d:3c:
9d:04:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:18:31 2026 by rpki-client