Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37332e302f32342d3234203d3e20383334.roa
File: 3134312e39382e37332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lmOifQQOpbYV0CqtnxzAIcQUepO/Ors2XAlNrilnif8=
Subject key identifier: 67:47:00:67:53:E8:2B:FB:69:AA:BC:31:85:C3:8A:7E:00:AA:60:53
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 40547430EADAF3D1958CEFBDD75EA0723489AFAF
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37332e302f32342d3234203d3e20383334.roa
Signing time: Thu 23 Jul 2026 16:36:11 +0000
ROA not before: Thu 23 Jul 2026 16:31:11 +0000
ROA not after: Thu 22 Jul 2027 16:36:11 +0000
asID: 834
IP address blocks: 141.98.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:54:74:30:ea:da:f3:d1:95:8c:ef:bd:d7:5e:a0:72:34:89:af:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jul 23 16:31:11 2026 GMT
Not After : Jul 22 16:36:11 2027 GMT
Subject: CN=6747006753E82BFB69AABC3185C38A7E00AA6053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:e4:39:c5:5e:5c:a9:97:2a:80:c7:16:f8:
e0:ef:f4:23:7c:62:88:81:89:62:75:ba:bd:39:c6:
2a:91:e0:a1:ee:1b:74:90:81:c3:22:15:87:b1:e2:
c0:05:55:02:29:e8:98:88:46:44:3d:2f:0b:72:a3:
81:a0:55:fc:e6:8d:bb:f4:69:52:b3:4d:0e:e8:de:
80:2a:7f:25:cd:c5:97:91:99:ce:6b:e4:d0:eb:b0:
1b:a0:6a:a7:68:5a:1e:cf:b4:1f:2f:70:f6:c0:c9:
61:98:67:8c:64:64:d4:dd:64:72:a8:2d:57:5e:7d:
24:0a:b4:11:44:c7:7c:63:c3:e8:fa:73:f7:45:1b:
0e:d6:4d:c4:f5:0c:66:76:a5:4f:f7:cf:b0:b3:78:
14:a9:aa:07:8e:fd:f3:c2:45:d0:a0:77:bf:49:a3:
7a:c5:28:6a:f8:b3:33:e5:63:65:f2:29:4b:c1:9f:
d6:82:f3:f3:13:bd:f9:9a:0c:02:be:2f:ed:5b:13:
1d:87:f3:0c:c9:e6:f3:39:7f:e7:fb:11:7f:98:b7:
7b:9d:1c:89:6b:1b:39:c8:0e:ab:13:37:24:9e:31:
4c:56:84:34:ce:f5:82:ec:fa:28:88:fb:af:25:13:
5d:5e:e7:04:77:81:b1:6e:02:8c:60:48:44:86:b9:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:47:00:67:53:E8:2B:FB:69:AA:BC:31:85:C3:8A:7E:00:AA:60:53
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.73.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ce:61:d0:62:0a:63:ed:ab:c4:7c:4a:e4:e4:8f:f2:c2:7c:
7f:a0:06:de:1d:58:41:95:0e:92:d0:a8:ab:62:94:fc:ea:8e:
10:ee:fa:78:69:aa:8d:74:dd:9a:ea:df:1d:77:ac:3c:ca:7d:
16:23:09:cd:a3:9f:23:94:30:ed:3a:2c:97:0c:4a:28:a0:b2:
c5:80:c4:30:65:0f:cd:46:49:81:a6:36:a7:73:c2:2d:c8:22:
32:38:ad:6b:4c:90:f1:21:58:63:36:80:34:15:16:fa:36:0e:
1a:3e:6e:96:a8:62:71:f3:c6:88:7a:6a:4e:bb:87:82:d4:bb:
38:6b:07:b6:6b:f0:bd:a8:6c:41:02:13:c0:bb:54:7f:70:64:
2e:1f:38:53:81:08:73:61:12:9d:8e:a1:99:fe:b2:06:6f:fb:
44:bc:95:5a:81:e0:25:27:53:23:3e:ca:38:b3:35:96:d3:d1:
e5:93:5f:36:99:0a:da:71:36:4a:6b:63:bc:50:b2:1f:71:d7:
75:e9:58:92:17:9d:fd:60:23:d8:ea:89:0a:b7:c8:86:05:4b:
9e:a5:e4:9e:61:4f:20:5a:f1:f3:55:65:cc:15:e0:57:d1:be:
74:f7:c4:89:96:8c:f9:bd:62:68:3f:65:6b:c7:fa:fd:6d:f2:
d9:05:1d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:59 2026 by rpki-client