Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa
File: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (raw, json)
Hash identifier: VN4e+deu8014Bud4Ylse4hxNH0QvvP4p6XiVLjfDUhw=
Subject key identifier: 87:17:6A:3B:05:39:AF:2C:71:76:87:12:82:D3:DB:44:A8:07:AC:65
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 6A3B31D95300190CC9981ECC47543E25E1B976DC
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa
Signing time: Thu 22 Oct 2026 16:49:38 +0000
ROA not before: Thu 22 Oct 2026 16:44:38 +0000
ROA not after: Thu 21 Oct 2027 16:49:38 +0000
asID: 49468
IP address blocks: 193.203.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:3b:31:d9:53:00:19:0c:c9:98:1e:cc:47:54:3e:25:e1:b9:76:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Oct 22 16:44:38 2026 GMT
Not After : Oct 21 16:49:38 2027 GMT
Subject: CN=87176A3B0539AF2C7176871282D3DB44A807AC65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:93:c8:57:69:0d:b0:e1:6f:40:53:7b:b6:
fa:2c:44:ba:fe:d1:42:9d:e1:7a:44:e8:48:0d:68:
c3:b4:dd:f0:80:05:e8:7c:69:75:59:8e:2b:a5:e2:
d3:a6:ee:6b:85:0f:37:56:36:4b:f6:d7:17:19:48:
ff:a5:c9:0c:b6:13:7d:7e:30:1a:1e:a2:01:79:b6:
8f:8c:d0:d2:ae:ea:47:5c:fb:e5:bc:ef:d9:59:ea:
c8:19:fb:e7:9b:84:94:a6:04:62:a1:de:dc:b8:96:
67:35:03:d9:7f:61:08:63:ce:38:7f:20:5b:47:a8:
4c:c5:2f:ba:64:50:4a:c4:15:05:5a:04:14:1d:01:
b0:86:a9:d7:59:e4:1f:ea:d6:14:07:12:34:a8:e7:
ab:45:42:b1:f1:7c:1c:d5:f0:93:3d:19:cb:b1:75:
44:39:d5:e3:2e:90:a3:33:c1:6f:88:1b:d6:50:e5:
a8:d4:d9:61:27:22:36:97:14:11:23:ca:ea:4b:a8:
74:06:3b:1e:38:5a:9c:e3:06:a6:f8:88:c9:12:76:
9d:c0:92:eb:38:6d:ac:62:7f:46:ad:83:fe:57:3a:
ef:a6:dc:24:da:cf:3a:cd:9f:38:a1:f6:ee:48:a7:
df:5a:9b:46:91:49:03:77:a7:a0:83:de:41:f8:e7:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:17:6A:3B:05:39:AF:2C:71:76:87:12:82:D3:DB:44:A8:07:AC:65
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.204.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9e:e6:85:66:95:ab:b7:14:58:1f:4d:bd:d5:85:20:af:7d:
c5:20:45:09:54:e9:d6:f1:0a:6b:e4:22:a7:62:f4:4a:8f:2e:
95:8c:4d:c8:b7:8c:42:92:79:62:7e:4e:4e:c5:1b:ea:6a:c9:
ce:8d:74:fe:40:42:22:a2:ec:aa:dd:e3:f5:d2:63:bb:84:6c:
c0:df:d2:85:ee:3f:3b:fe:86:1f:12:04:2f:e6:00:cd:24:4b:
94:46:7b:6f:8b:95:57:7a:5c:8d:48:68:52:0a:71:7a:a5:52:
e3:ba:6c:a8:c0:46:af:f7:28:f4:09:f8:5c:70:33:21:9e:59:
4e:70:68:d0:a9:b1:e3:fa:dc:79:9f:45:2e:14:92:50:00:db:
a6:b6:53:cc:18:0f:62:a3:0c:ae:1f:fb:65:05:b8:4f:d8:f9:
9b:a2:04:d2:d3:92:16:ab:ba:fa:75:0c:d4:05:a9:22:2b:c4:
8e:ee:a3:03:fd:24:2a:44:58:5d:f0:5b:02:35:0b:69:31:00:
ab:cd:9f:fd:19:24:9b:37:42:3d:34:1f:cf:69:00:95:f5:78:
f9:eb:4a:46:23:cc:56:38:6d:f5:f7:7b:3d:2c:e9:23:22:eb:
91:8d:11:ef:53:38:36:dd:df:e4:1e:ee:e1:5e:30:5a:f1:4a:
18:62:b3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:48:04 2026 by rpki-client