Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa
File: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (raw, json)
Hash identifier: HBNUOQKudEQDcJp49GkJ9KtZ4GtR0YuEZnBMnkiRWNc=
Subject key identifier: 53:AF:9A:12:50:22:3E:62:56:88:0E:93:57:C1:12:69:30:FC:03:97
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 4D947E917D4984B17594D58558737CDB10603DD5
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa
Signing time: Thu 22 Oct 2026 16:49:38 +0000
ROA not before: Thu 22 Oct 2026 16:44:38 +0000
ROA not after: Thu 21 Oct 2027 16:49:38 +0000
asID: 49468
IP address blocks: 193.203.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:94:7e:91:7d:49:84:b1:75:94:d5:85:58:73:7c:db:10:60:3d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Oct 22 16:44:38 2026 GMT
Not After : Oct 21 16:49:38 2027 GMT
Subject: CN=53AF9A1250223E6256880E9357C1126930FC0397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:1e:96:5c:f0:39:db:1b:ed:b2:b2:e7:13:
4b:0e:bb:56:38:db:59:49:64:18:5b:cd:69:6e:ed:
e5:fe:97:08:1b:6e:34:6f:2a:e5:65:73:46:37:c9:
10:ad:9a:ac:41:b4:11:94:4d:e7:c6:9a:1c:70:36:
7e:71:ca:14:d5:37:12:bb:0a:d3:b7:78:ae:7b:2c:
a0:3a:fd:ad:df:7d:c1:15:b7:3c:03:32:e3:8a:6d:
39:46:f0:9f:7a:3b:34:89:67:b3:67:ae:f6:4a:47:
93:ad:85:8e:39:ef:12:ca:70:26:6a:e8:5d:6f:c4:
ad:bb:a4:d3:02:e8:63:f9:11:ca:a9:3c:00:4e:3e:
23:18:39:55:43:e4:6e:a0:1a:b9:dd:2c:85:a5:e9:
d5:26:95:a3:76:08:26:f9:f8:cb:d4:fb:2d:8c:3d:
74:94:a3:f1:49:6d:03:25:be:45:e3:7e:d4:2a:a1:
1c:04:22:77:d1:df:10:55:94:7e:fa:1a:20:fe:ea:
3f:d3:d2:ad:8e:d0:27:c7:2d:2b:05:0c:08:cc:be:
69:76:91:cd:5c:94:de:8b:fe:9f:80:ca:e4:db:04:
14:e8:7b:8e:1f:e5:c1:2b:6a:c5:a7:9f:f5:0e:c6:
bc:7f:b2:d7:ce:33:6d:0e:4a:b3:27:34:75:e2:a6:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AF:9A:12:50:22:3E:62:56:88:0E:93:57:C1:12:69:30:FC:03:97
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:56:80:16:8b:93:02:ae:24:88:b3:67:72:49:ab:d3:94:c0:
22:f2:d5:9c:73:dc:60:5a:24:82:85:61:a2:0a:fa:43:f3:d2:
70:e2:f6:42:8e:f9:b7:de:5f:b6:ef:f8:12:2a:e4:94:7f:c1:
2a:e2:21:02:4b:1f:ea:f3:38:b5:67:2d:9f:4e:0f:56:16:78:
0e:4d:cd:dc:51:37:76:94:b5:43:39:78:9a:db:bb:ce:a2:0e:
b7:55:55:6a:28:08:1b:63:26:3d:71:b9:82:79:83:f2:8f:26:
00:63:b6:e1:f1:7d:8f:6e:1b:d6:3b:4c:ad:f8:ac:da:02:3d:
a6:3d:92:4f:ea:7e:16:be:1b:90:68:81:1a:02:53:50:ef:7a:
fa:91:a6:b8:c8:59:e8:43:a4:83:c5:13:b7:d3:ec:8c:f9:f6:
1b:a2:65:9a:ce:c6:e8:c1:54:c5:f8:63:34:d4:3f:dc:16:f5:
a3:6a:dd:da:61:04:47:b0:e2:36:d8:56:4f:e7:53:d3:68:fc:
f9:13:30:ef:3b:dc:1c:ff:4d:6a:93:c4:ff:93:f6:aa:78:0f:
e6:e8:c2:15:9f:74:3f:95:3f:b9:fb:9f:dd:2b:fd:60:d7:46:
6c:ad:16:7d:01:9a:cd:31:a7:3e:21:c8:99:9a:27:ea:e3:02:
a6:07:be:97
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTZR+kX1JhLF1lNWFWHN82xBgPdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi
ZmEyY2NhNDAeFw0yNjEwMjIxNjQ0MzhaFw0yNzEwMjExNjQ5MzhaMDMxMTAvBgNV
BAMTKDUzQUY5QTEyNTAyMjNFNjI1Njg4MEU5MzU3QzExMjY5MzBGQzAzOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ph6WXPA52xvtsrLnE0sOu1Y4
21lJZBhbzWlu7eX+lwgbbjRvKuVlc0Y3yRCtmqxBtBGUTefGmhxwNn5xyhTVNxK7
CtO3eK57LKA6/a3ffcEVtzwDMuOKbTlG8J96OzSJZ7NnrvZKR5OthY457xLKcCZq
6F1vxK27pNMC6GP5EcqpPABOPiMYOVVD5G6gGrndLIWl6dUmlaN2CCb5+MvU+y2M
PXSUo/FJbQMlvkXjftQqoRwEInfR3xBVlH76GiD+6j/T0q2O0CfHLSsFDAjMvml2
kc1clN6L/p+AyuTbBBToe44f5cErasWnn/UOxrx/stfOM20OSrMnNHXiprzrAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUU6+aElAiPmJWiA6TV8ESaTD8A5cwHwYDVR0j
BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz
Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt
aXpLUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt
N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzEzOTMzMmUzMjMwMzMyZTMy
MzAzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzNDM2Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBy80wDQYJKoZIhvcNAQELBQADggEBABtWgBaLkwKuJIizZ3JJq9OUwCLy1Zxz
3GBaJIKFYaIK+kPz0nDi9kKO+bfeX7bv+BIq5JR/wSriIQJLH+rzOLVnLZ9OD1YW
eA5NzdxRN3aUtUM5eJrbu86iDrdVVWooCBtjJj1xuYJ5g/KPJgBjtuHxfY9uG9Y7
TK34rNoCPaY9kk/qfha+G5BogRoCU1DvevqRprjIWehDpIPFE7fT7Iz59huiZZrO
xujBVMX4YzTUP9wW9aNq3dphBEew4jbYVk/nU9No/PkTMO873Bz/TWqTxP+T9qp4
D+bowhWfdD+VP7n7n90r/WDXRmytFn0Bms0xpz4hyJmaJ+rjAqYHvpc=
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:01:43 2026 by rpki-client