Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35392e302f32342d3234203d3e20313335343032.roa
File: 3132382e302e35392e302f32342d3234203d3e20313335343032.roa (raw, json)
Hash identifier: Kav8/X9Mtkxa+0+LDrrZ67/2CAO23Hwc5JtnOrOg9cE=
Subject key identifier: 6F:FA:52:47:0C:92:CD:D1:9C:CA:C2:12:D7:90:21:E7:79:10:6D:D9
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 0921B0AD1491C52A5C037E692DF86D1F766FCC53
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35392e302f32342d3234203d3e20313335343032.roa
Signing time: Mon 19 Oct 2026 07:58:11 +0000
ROA not before: Mon 19 Oct 2026 07:53:11 +0000
ROA not after: Mon 18 Oct 2027 07:58:11 +0000
asID: 135402
IP address blocks: 128.0.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:21:b0:ad:14:91:c5:2a:5c:03:7e:69:2d:f8:6d:1f:76:6f:cc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Oct 19 07:53:11 2026 GMT
Not After : Oct 18 07:58:11 2027 GMT
Subject: CN=6FFA52470C92CDD19CCAC212D79021E779106DD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:0d:3c:5b:92:94:af:36:01:46:5e:9b:41:
e0:9d:32:66:d6:88:6f:35:61:a9:d6:bd:80:b4:bd:
f7:3c:0e:45:7f:92:6b:31:82:11:89:5a:3a:47:a0:
8c:82:10:33:ba:39:8d:15:03:54:d1:c0:62:4b:c1:
83:b2:77:74:af:07:40:49:ff:67:7d:e2:92:7e:ea:
ac:c5:d2:f6:19:e3:89:2a:e9:04:3c:56:33:71:46:
dd:5e:39:b5:c2:85:a5:2f:7f:18:c1:bd:d9:e2:95:
87:ac:3e:8d:04:45:58:0f:fd:8c:58:d8:3a:ac:eb:
6c:06:f4:6d:5e:73:ce:c8:d9:56:9b:23:9e:0d:b2:
fc:b8:21:bc:a7:f6:0b:c8:6f:fc:8f:47:d9:d3:70:
3c:6f:2a:a6:57:d5:48:50:eb:da:83:ed:1a:58:e1:
4b:c7:23:17:2a:ba:3c:75:90:4d:cf:7d:63:24:98:
24:41:bd:08:7c:37:b0:b6:c6:65:95:60:27:47:03:
5a:73:01:ee:b6:1b:d3:85:f6:ba:3f:57:42:06:4a:
ee:c3:b1:29:1f:e4:14:e8:1e:23:31:d2:1c:08:6c:
39:79:c8:51:12:2e:5d:86:9b:32:98:7c:82:80:51:
a6:8f:ec:b2:f9:cc:c6:77:3a:54:83:5a:8f:ff:ea:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:52:47:0C:92:CD:D1:9C:CA:C2:12:D7:90:21:E7:79:10:6D:D9
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35392e302f32342d3234203d3e20313335343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.59.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9c:1e:e7:6e:d4:25:f3:09:39:67:a5:98:3f:1a:11:41:ef:
c9:99:42:2e:d3:0c:21:c6:2d:34:7e:64:7d:4b:9e:6c:1b:8c:
46:44:8d:b1:9f:86:4d:6f:dd:1f:25:bc:d8:b3:d9:7c:75:2b:
0d:8a:4a:df:46:96:f3:bc:64:8b:11:d4:42:d1:ff:e7:1c:96:
8d:f2:88:68:05:eb:38:bf:c0:61:ce:51:62:c8:ea:89:a3:50:
3d:44:63:2d:b6:f9:5c:85:20:b3:ba:82:bd:73:aa:a9:2c:fb:
36:f3:04:d5:24:08:fd:97:23:66:a1:47:1a:33:11:80:c1:60:
d4:43:4f:4a:ee:57:3c:bb:a8:bb:a2:83:d7:4e:61:58:dd:e6:
55:99:d6:9c:5f:b5:80:57:32:84:bd:03:3d:a4:13:4e:23:fa:
2e:9a:b0:82:3e:0b:fa:05:53:76:e7:32:eb:fc:48:c2:0e:ea:
eb:54:ab:63:6e:0d:b9:0b:22:d9:22:dd:f5:c3:21:5c:ad:ed:
3f:af:55:cd:0a:7d:70:9e:cd:04:eb:82:5b:6d:22:97:df:19:
e8:ce:57:d3:02:a9:3a:b2:39:18:96:f3:b9:9c:db:1e:e4:94:
36:7b:cf:a4:3f:c0:a0:43:79:09:45:01:92:74:bf:6c:6e:0a:
bf:d8:13:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:29 2026 by rpki-client