Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138352e302f32342d3234203d3e20323138383632.roa
File: 3139332e3136382e3138352e302f32342d3234203d3e20323138383632.roa (raw, json)
Hash identifier: ltSD4D4U2cqEHjkYW3j2nn+LPuo2jjAIM2inOgi7twQ=
Subject key identifier: 6C:7E:EB:1D:C4:E9:08:1E:B5:F1:11:91:F9:83:7A:33:70:9D:4D:3A
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 49091B360A0FB6CD01C68D0D36387C593BAF1EE3
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138352e302f32342d3234203d3e20323138383632.roa
Signing time: Mon 19 Oct 2026 11:45:24 +0000
ROA not before: Mon 19 Oct 2026 11:40:24 +0000
ROA not after: Mon 18 Oct 2027 11:45:24 +0000
asID: 218862
IP address blocks: 193.168.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:09:1b:36:0a:0f:b6:cd:01:c6:8d:0d:36:38:7c:59:3b:af:1e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Oct 19 11:40:24 2026 GMT
Not After : Oct 18 11:45:24 2027 GMT
Subject: CN=6C7EEB1DC4E9081EB5F11191F9837A33709D4D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f0:b6:b5:33:fa:0a:5b:ed:bd:9e:9f:01:c9:
b2:8f:fd:c4:e2:51:48:55:74:e2:ee:65:ef:16:1d:
93:c0:95:45:70:1b:ab:3b:8f:0c:65:05:0d:ed:e3:
d7:f9:76:b0:58:36:c8:89:e1:6a:79:10:1a:44:32:
ee:2d:44:aa:55:ed:74:16:33:e3:cc:13:89:da:e0:
09:41:8a:1a:9d:a5:18:2e:b3:4e:f6:cd:fc:ed:d8:
69:32:d2:a2:b2:d8:12:68:98:ce:2b:4d:ac:82:bd:
50:46:23:45:49:5d:cc:11:4f:3b:b8:95:48:18:ea:
6e:61:ee:b8:9d:19:fc:d7:4f:95:a3:74:ac:e3:b3:
59:2c:ff:91:ae:a6:cd:fb:85:32:cb:43:0d:df:0b:
9a:cf:39:5c:83:ae:81:40:66:c4:69:7a:ec:23:36:
31:91:3e:27:9b:79:29:d8:b0:44:14:bf:64:e0:6a:
18:48:59:9f:dd:c1:4d:af:8e:73:82:58:d3:02:73:
1a:2e:5c:1e:d0:a3:03:f2:1f:1d:ff:75:0a:74:e4:
25:c0:32:e0:e9:bd:0c:7c:46:8a:86:4d:e4:23:c5:
4e:b3:08:f7:7b:18:a9:51:eb:9f:49:0d:74:64:df:
e7:a0:cc:e2:3a:44:c0:ae:16:d1:f7:de:4e:22:c0:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7E:EB:1D:C4:E9:08:1E:B5:F1:11:91:F9:83:7A:33:70:9D:4D:3A
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138352e302f32342d3234203d3e20323138383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b2:d6:38:43:f7:ee:bb:97:e2:83:70:69:90:31:4d:5f:4d:
a3:d4:32:16:cb:7e:76:cf:68:68:c1:2c:f9:8d:29:3a:0d:70:
84:60:9b:07:6b:25:3a:53:e8:f5:98:de:44:d0:5a:a7:88:b2:
d4:1b:ea:67:a4:84:39:4b:92:d7:fd:27:e0:46:74:81:3d:7c:
bb:fa:0f:a6:6f:d3:6f:2d:e5:89:d2:c5:5e:f3:66:be:49:f2:
02:15:73:37:55:ce:ae:b6:22:eb:e0:a3:de:00:09:9a:d3:b4:
a8:fd:48:74:0d:37:37:71:92:15:d9:cd:d5:65:16:dd:6b:cb:
1e:09:42:d4:0a:6f:6d:f8:ae:57:da:53:77:e6:90:b7:29:16:
3c:d2:ba:4a:77:f5:6f:10:17:65:43:be:77:02:13:07:52:b5:
f6:6c:69:bb:53:40:d6:41:85:c8:e3:22:48:07:e3:a9:44:05:
b1:1f:94:5e:ce:ed:82:59:8a:3d:3d:5c:25:92:e5:3b:6f:49:
57:c2:06:f0:c0:8a:a3:61:88:93:d8:ac:94:a1:66:94:e6:41:
19:8a:36:a5:6d:49:a5:7f:e3:42:47:fb:28:3c:76:c7:e9:9a:
49:4d:5c:59:e6:92:4b:b1:c7:16:77:cc:8f:26:65:7d:f5:d7:
7f:c2:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:49 2026 by rpki-client