Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138352e302f32342d3234203d3e20343032323135.roa
File: 3139332e3136382e3138352e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier: TDJgCeQCJxBSfVOPrbAfERkImIMWOoKCryLNPb7Vqp8=
Subject key identifier: 41:19:37:47:7B:56:A2:19:5E:F9:9C:11:EF:8E:E2:BB:4B:72:F0:24
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 3E6FC7B90CA32E42A83854B38DBC0C969BA52639
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138352e302f32342d3234203d3e20343032323135.roa
Signing time: Tue 07 Jul 2026 12:25:59 +0000
ROA not before: Tue 07 Jul 2026 12:20:59 +0000
ROA not after: Tue 06 Jul 2027 12:25:59 +0000
asID: 402215
IP address blocks: 193.168.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6f:c7:b9:0c:a3:2e:42:a8:38:54:b3:8d:bc:0c:96:9b:a5:26:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Jul 7 12:20:59 2026 GMT
Not After : Jul 6 12:25:59 2027 GMT
Subject: CN=411937477B56A2195EF99C11EF8EE2BB4B72F024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:a0:c2:4c:46:c2:f4:16:49:9f:40:e5:48:
bf:d0:8a:dc:a2:79:9d:fb:58:8e:8a:4f:bf:2a:9a:
ca:e7:05:af:6d:b8:c3:34:20:54:b3:13:26:f9:67:
43:11:62:a3:a9:43:51:c8:14:df:5e:f5:57:5b:50:
58:5b:48:ab:6e:f9:69:e7:ba:8f:39:d2:c7:99:50:
28:1b:31:b1:e8:44:84:6d:31:7c:fa:46:76:f7:f9:
a1:e5:30:ba:c1:de:51:2b:4e:5a:35:3b:69:08:2f:
8d:15:4d:14:4f:2d:e0:c5:a1:8c:2b:7a:38:13:8b:
35:3b:01:f9:05:48:6c:2c:15:99:6c:58:b9:cf:53:
55:35:5e:fd:5a:2d:c5:69:a0:25:0c:2d:52:3a:8b:
e4:4a:91:57:e6:7c:5a:7a:ba:fb:3e:1b:84:62:9b:
90:bb:76:bf:5c:ed:30:1b:fe:b2:d3:d9:da:2a:b1:
e9:c9:d7:62:2e:b5:18:0b:78:e7:b3:b6:70:f2:54:
3b:45:65:c3:38:80:75:6e:d4:a5:ab:37:f4:5c:42:
62:f8:f9:26:64:aa:19:8f:b5:5e:ef:ed:a1:31:b6:
98:dc:5c:25:35:49:92:86:d2:47:11:e8:d6:59:57:
ff:dc:68:df:9e:e5:74:21:e4:52:ca:92:11:1f:5e:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:19:37:47:7B:56:A2:19:5E:F9:9C:11:EF:8E:E2:BB:4B:72:F0:24
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138352e302f32342d3234203d3e20343032323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.185.0/24
Signature Algorithm: sha256WithRSAEncryption
79:29:e9:27:ca:be:67:0d:7e:e7:68:3d:96:f3:9c:32:18:05:
a7:92:83:36:a3:50:42:62:a1:a9:46:7c:24:1b:1e:cf:8b:1b:
42:04:42:e8:ad:c4:78:b2:03:5b:18:30:ef:13:be:fc:e9:d3:
2e:01:ea:d0:d5:6c:27:16:50:7a:d7:7c:54:5f:ce:63:fe:f3:
27:02:9a:a7:54:db:8c:5b:c1:95:bf:51:5c:10:51:33:67:ef:
4d:24:93:97:0d:d0:8c:5f:71:14:4e:78:3f:88:e5:3e:1e:f6:
fa:1a:6b:dc:d0:80:06:80:78:23:65:f8:af:1e:b6:bb:2e:63:
97:83:46:1d:e6:1d:2b:0e:97:b2:22:8f:dc:b8:81:9e:62:5f:
f3:cd:88:99:6f:fa:6b:74:73:ad:ab:e7:0b:17:b8:6b:83:2c:
5f:f9:e3:db:6d:35:0f:a7:cc:92:79:2e:20:1f:fd:69:33:00:
23:99:bf:89:34:79:15:05:09:6e:50:30:ea:57:65:be:22:96:
a3:4d:ab:33:1f:83:0a:da:1a:1e:b6:da:ef:83:14:48:b0:da:
48:78:09:cf:d6:2e:4a:6a:48:c2:b6:fd:0d:cc:45:46:76:f2:
9b:7a:b0:7a:08:71:43:46:72:53:25:b0:f6:97:78:f3:f1:c0:
d2:b8:5c:14
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUPm/HuQyjLkKoOFSzjbwMlpulJjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0
MWFjZWJiODAeFw0yNjA3MDcxMjIwNTlaFw0yNzA3MDYxMjI1NTlaMDMxMTAvBgNV
BAMTKDQxMTkzNzQ3N0I1NkEyMTk1RUY5OUMxMUVGOEVFMkJCNEI3MkYwMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNPqDCTEbC9BZJn0DlSL/Qityi
eZ37WI6KT78qmsrnBa9tuMM0IFSzEyb5Z0MRYqOpQ1HIFN9e9VdbUFhbSKtu+Wnn
uo850seZUCgbMbHoRIRtMXz6Rnb3+aHlMLrB3lErTlo1O2kIL40VTRRPLeDFoYwr
ejgTizU7AfkFSGwsFZlsWLnPU1U1Xv1aLcVpoCUMLVI6i+RKkVfmfFp6uvs+G4Ri
m5C7dr9c7TAb/rLT2doqsenJ12IutRgLeOeztnDyVDtFZcM4gHVu1KWrN/RcQmL4
+SZkqhmPtV7v7aExtpjcXCU1SZKG0kcR6NZZV//caN+e5XQh5FLKkhEfXgznAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUQRk3R3tWohle+ZwR747iu0ty8CQwHwYDVR0j
BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz
YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH
czY3Zy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt
ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzEzOTMzMmUzMTM2MzgyZTMx
MzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjMyMzEzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMGouTANBgkqhkiG9w0BAQsFAAOCAQEAeSnpJ8q+Zw1+52g9lvOcMhgFp5KD
NqNQQmKhqUZ8JBsez4sbQgRC6K3EeLIDWxgw7xO+/OnTLgHq0NVsJxZQetd8VF/O
Y/7zJwKap1TbjFvBlb9RXBBRM2fvTSSTlw3QjF9xFE54P4jlPh72+hpr3NCABoB4
I2X4rx62uy5jl4NGHeYdKw6XsiKP3LiBnmJf882ImW/6a3RzravnCxe4a4MsX/nj
2201D6fMknkuIB/9aTMAI5m/iTR5FQUJblAw6ldlviKWo02rMx+DCtoaHrba74MU
SLDaSHgJz9YuSmpIwrb9DcxFRnbym3qweghxQ0ZyUyWw9pd48/HA0rhcFA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:20 2026 by rpki-client