Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32392e36302e302f32342d3234203d3e20323034313730.roa
File: 3139332e32392e36302e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: i9vmsTKyFVC6faW3DeK8u16szVUMT3ewP7rl8yt58Hg=
Subject key identifier: 44:94:F6:BA:A8:19:D9:76:20:C9:CD:AF:63:6B:04:BD:AF:6E:01:B4
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 77EE3862C9B7313262563DF442C655AB3AC6ABC9
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32392e36302e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 28 Apr 2026 23:23:55 +0000
ROA not before: Tue 28 Apr 2026 23:18:55 +0000
ROA not after: Tue 27 Apr 2027 23:23:55 +0000
asID: 204170
IP address blocks: 193.29.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ee:38:62:c9:b7:31:32:62:56:3d:f4:42:c6:55:ab:3a:c6:ab:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Apr 28 23:18:55 2026 GMT
Not After : Apr 27 23:23:55 2027 GMT
Subject: CN=4494F6BAA819D97620C9CDAF636B04BDAF6E01B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:c6:65:78:01:76:1c:80:07:6c:0b:11:28:
05:df:01:e6:40:51:ff:50:7a:da:91:12:b7:6b:03:
40:17:4e:81:5e:6c:db:ab:fd:47:26:d3:fd:0f:4b:
93:9b:8c:c0:7e:bc:a1:c2:48:9b:9a:cd:96:66:4d:
9e:44:56:0b:12:9e:23:a9:6a:81:18:ec:ce:7c:23:
b2:40:2a:b8:11:ee:38:dc:92:68:51:02:f5:24:53:
0b:20:88:42:9a:a1:71:8c:5a:48:82:1e:70:a5:cb:
15:24:3e:f1:f1:30:91:42:0c:cc:ef:54:ff:63:0e:
7c:40:78:49:67:f4:b1:8e:d3:b1:44:80:2f:5a:1f:
ca:b5:0c:40:9d:9e:3e:da:bc:51:aa:dd:87:ad:61:
32:6b:15:21:10:be:a5:64:24:63:d0:56:78:75:27:
07:ff:19:2e:be:22:98:9b:9c:e6:ad:04:7b:f8:64:
06:b1:f9:07:0b:0f:87:2c:c3:3d:48:98:f2:43:8f:
1b:23:0f:4b:cd:4f:0e:de:dc:e9:16:ed:aa:74:a7:
8a:e8:1c:5c:75:bf:31:49:41:5c:fb:e0:16:eb:3a:
cb:2b:9e:26:cc:77:aa:61:06:fc:50:0f:b2:cc:de:
65:44:81:b2:45:47:c6:f8:1d:5d:01:d9:74:65:47:
83:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:94:F6:BA:A8:19:D9:76:20:C9:CD:AF:63:6B:04:BD:AF:6E:01:B4
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32392e36302e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.60.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ff:cf:b8:ab:60:08:5f:23:b9:d9:48:eb:2b:47:6c:73:d4:
74:32:14:9a:03:23:8f:d7:3d:17:11:81:46:f8:87:b7:1a:bb:
38:c3:34:9a:a5:36:cc:9b:bb:72:e0:fe:74:36:7e:84:64:77:
5c:ca:f5:53:4e:80:f4:f6:4c:63:74:ee:5f:59:66:7c:c7:74:
df:95:f8:fa:ba:e3:a2:10:4c:44:61:fa:79:c8:04:fa:4f:0f:
88:b6:d1:dc:3b:99:87:6f:a4:eb:49:7a:e7:9b:b8:93:4d:d5:
53:b8:23:67:47:10:06:0b:7a:85:ae:b8:e4:30:c9:10:b7:94:
c9:f7:cf:92:61:17:af:9b:dd:5a:8c:b9:b0:6e:38:8b:64:db:
97:74:ff:82:15:6d:22:8f:63:bd:5d:f9:4f:ae:6c:2f:c1:78:
fa:85:15:92:66:e7:fb:35:f8:d0:a5:47:a1:fa:a1:5d:67:cf:
7c:8f:ea:3b:ac:0d:f6:a7:87:07:c5:84:67:ec:bd:3a:88:15:
7a:5c:6b:02:5b:56:13:53:3c:fc:94:ab:b1:f5:57:26:3c:af:
a0:c0:b7:b5:14:ce:17:bb:24:8c:6d:ea:bb:44:f5:ac:4c:4a:
b9:47:eb:b6:a4:38:94:89:9b:72:85:b6:0f:c8:f9:de:69:be:
da:b7:67:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:56 2026 by rpki-client