Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3139332e32352e3137302e302f32342d3234203d3e2032393134.roa
File: 3139332e32352e3137302e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: yzeJy7dYT+jl4VhGxOCrUaWlHT1VskDn5phrnOjvQYI=
Subject key identifier: D7:61:47:7E:B9:C7:91:63:67:81:A4:C3:16:6F:CC:F5:35:9F:A0:49
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 66901D9BB93E2DB34868F6E89F870BC976AB17ED
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3139332e32352e3137302e302f32342d3234203d3e2032393134.roa
Signing time: Tue 31 Mar 2026 07:39:19 +0000
ROA not before: Tue 31 Mar 2026 07:34:19 +0000
ROA not after: Tue 30 Mar 2027 07:39:19 +0000
asID: 2914
IP address blocks: 193.25.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 09:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:90:1d:9b:b9:3e:2d:b3:48:68:f6:e8:9f:87:0b:c9:76:ab:17:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Mar 31 07:34:19 2026 GMT
Not After : Mar 30 07:39:19 2027 GMT
Subject: CN=D761477EB9C791636781A4C3166FCCF5359FA049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:44:47:48:69:2a:d4:e3:b0:14:ee:a7:cc:
1f:77:59:15:4a:8c:13:1d:9d:ee:78:46:a3:d5:b3:
d4:31:70:52:41:07:0d:c1:da:ee:13:3f:5c:8a:ef:
03:98:5f:11:d9:94:91:17:ab:21:7a:e9:24:4d:92:
20:03:69:38:70:d2:c1:c7:15:b9:3b:de:80:58:e6:
f3:10:2a:ab:b1:f3:cf:ed:0e:3d:c1:4e:b3:fc:cd:
9c:63:d1:a0:64:74:ba:da:01:f5:c7:bc:9f:31:d5:
9d:0c:e6:94:48:b7:4a:3c:b4:f5:22:65:bc:35:4a:
63:65:4a:28:22:52:32:e1:3e:43:00:dd:16:aa:2a:
de:a7:43:e0:01:c4:9f:14:7a:70:ed:2d:43:26:3c:
0a:be:4e:74:bc:61:46:c8:76:61:87:67:12:05:63:
2d:5d:ca:02:b4:c5:27:e3:ac:1c:df:3b:d3:6a:ee:
52:73:c8:21:f7:e0:c4:b9:69:c7:f8:e5:d9:66:5f:
83:41:bf:8d:bd:b1:f7:5c:15:8f:fc:4b:12:f8:27:
a2:18:a2:95:cf:03:2a:77:77:c7:0a:2b:62:78:c3:
24:22:d6:07:83:ad:5f:72:27:7f:f9:cf:7e:42:51:
19:b4:e1:3f:a5:3e:13:9d:ed:51:d5:8c:25:f5:8a:
e5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:47:7E:B9:C7:91:63:67:81:A4:C3:16:6F:CC:F5:35:9F:A0:49
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3139332e32352e3137302e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:88:7c:63:6e:66:73:b1:eb:6c:33:34:96:85:98:c8:e0:fc:
51:0d:1d:1b:04:05:97:8b:4f:80:20:ee:9c:9f:b5:24:38:2f:
c3:be:d8:e7:dd:b2:16:1a:fe:ac:1b:ab:e9:6c:5b:31:d1:5b:
15:2b:bf:a1:5e:91:74:d8:49:6f:8b:e6:49:39:82:5f:70:c8:
ee:82:5e:3d:d8:d5:d1:bd:a3:c0:9b:28:e2:63:ef:6b:7f:33:
fb:ee:da:6c:5b:5a:c8:9b:42:35:80:33:57:95:10:2e:51:21:
a8:46:5f:a1:4b:26:5c:0c:2b:b3:bb:77:08:0c:f8:e2:d8:2e:
ba:d1:20:dd:6d:81:70:d6:41:71:25:c4:fb:05:4e:f5:c8:f5:
a6:9b:32:48:ca:14:19:5c:10:01:70:76:75:f2:83:78:57:ac:
eb:80:25:c6:4e:a8:83:2e:e1:cf:1e:ef:4e:51:c1:98:06:64:
36:28:b9:e1:e7:c1:4c:92:24:68:ae:e6:12:73:7b:ba:e9:e9:
1f:ee:c0:50:3d:6d:7c:68:15:32:5f:05:63:d2:0c:b7:a2:f2:
c1:51:87:dc:61:c6:49:8e:a0:aa:da:c1:dc:25:a5:b7:19:9f:
78:5e:f3:df:e4:23:82:54:96:b2:fb:ea:34:78:6e:77:3c:e6:
28:26:39:0d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUZpAdm7k+LbNIaPbon4cLyXarF+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj
Yjk2NjdmZjAeFw0yNjAzMzEwNzM0MTlaFw0yNzAzMzAwNzM5MTlaMDMxMTAvBgNV
BAMTKEQ3NjE0NzdFQjlDNzkxNjM2NzgxQTRDMzE2NkZDQ0Y1MzU5RkEwNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsnURHSGkq1OOwFO6nzB93WRVK
jBMdne54RqPVs9QxcFJBBw3B2u4TP1yK7wOYXxHZlJEXqyF66SRNkiADaThw0sHH
Fbk73oBY5vMQKqux88/tDj3BTrP8zZxj0aBkdLraAfXHvJ8x1Z0M5pRIt0o8tPUi
Zbw1SmNlSigiUjLhPkMA3RaqKt6nQ+ABxJ8UenDtLUMmPAq+TnS8YUbIdmGHZxIF
Yy1dygK0xSfjrBzfO9Nq7lJzyCH34MS5acf45dlmX4NBv429sfdcFY/8SxL4J6IY
opXPAyp3d8cKK2J4wyQi1geDrV9yJ3/5z35CURm04T+lPhOd7VHVjCX1iuUfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU12FHfrnHkWNngaTDFm/M9TWfoEkwHwYDVR0j
BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4
ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1
V1pfOC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMt
MTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4ZjIyLzAvMzEzOTMzMmUzMjM1MmUzMTM3
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEZ
qjANBgkqhkiG9w0BAQsFAAOCAQEApIh8Y25mc7HrbDM0loWYyOD8UQ0dGwQFl4tP
gCDunJ+1JDgvw77Y592yFhr+rBur6WxbMdFbFSu/oV6RdNhJb4vmSTmCX3DI7oJe
PdjV0b2jwJso4mPva38z++7abFtayJtCNYAzV5UQLlEhqEZfoUsmXAwrs7t3CAz4
4tguutEg3W2BcNZBcSXE+wVO9cj1ppsySMoUGVwQAXB2dfKDeFes64Alxk6ogy7h
zx7vTlHBmAZkNii54efBTJIkaK7mEnN7uunpH+7AUD1tfGgVMl8FY9IMt6LywVGH
3GHGSY6gqtrB3CWltxmfeF7z3+QjglSWsvvqNHhudzzmKCY5DQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:27:30 2026 by rpki-client