Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138352e302f32342d3234203d3e20343032343837.roa
File: 3139332e3136382e3138352e302f32342d3234203d3e20343032343837.roa (raw, json)
Hash identifier: YhZwHgO6CoYBi5+MULOnMlnXJHDETwjuA45pSYtaJd0=
Subject key identifier: 01:9C:26:6B:BB:C3:EF:94:97:C8:06:80:BD:13:6C:24:67:FB:CA:64
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 12BD2BF9973925AB6FEEBE231564E3CB992045B5
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138352e302f32342d3234203d3e20343032343837.roa
Signing time: Sun 05 Jul 2026 18:55:14 +0000
ROA not before: Sun 05 Jul 2026 18:50:14 +0000
ROA not after: Sun 04 Jul 2027 18:55:14 +0000
asID: 402487
IP address blocks: 193.168.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 23:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:bd:2b:f9:97:39:25:ab:6f:ee:be:23:15:64:e3:cb:99:20:45:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Jul 5 18:50:14 2026 GMT
Not After : Jul 4 18:55:14 2027 GMT
Subject: CN=019C266BBBC3EF9497C80680BD136C2467FBCA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:ea:b6:d0:51:c8:f4:7f:29:7e:7b:cc:96:
b6:08:eb:e4:8a:60:ca:44:1c:80:ea:92:e9:08:78:
e8:2a:9d:03:88:37:8e:87:e2:47:1d:2d:fd:10:83:
89:4b:3b:57:32:a0:8a:36:5d:aa:67:21:47:3b:2c:
a0:3a:89:18:cf:f4:2a:eb:0c:07:e5:85:b4:e2:d6:
e8:a2:40:3e:d1:d5:9b:9a:6e:c6:1d:20:6c:40:d8:
f4:cc:dd:3e:e7:9b:5e:3b:d5:1a:55:24:68:5c:71:
c2:05:40:69:db:cc:1c:05:e7:ff:0a:af:66:ba:a1:
71:1b:ec:d6:b0:06:b5:8b:41:3a:a2:16:b5:6e:06:
45:f4:8b:97:4e:3a:ea:cd:4d:b8:17:3d:9e:37:72:
ae:f2:96:aa:80:a6:19:53:5d:7b:68:1f:5e:03:ce:
c0:74:0b:3f:bd:77:be:89:36:6d:c2:d9:2e:a8:e6:
eb:9c:0d:44:34:89:76:84:cb:8c:24:7b:54:9a:c0:
5c:c2:95:7c:c6:1b:7b:e5:29:28:8c:57:cd:01:39:
32:0a:af:18:ae:f4:0a:ae:b1:f9:cc:ce:1c:57:ae:
b2:b4:7e:ff:68:bd:df:d4:fa:ee:38:68:f5:21:44:
32:23:33:22:64:39:d3:8c:b3:ca:5c:8e:ab:76:b0:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9C:26:6B:BB:C3:EF:94:97:C8:06:80:BD:13:6C:24:67:FB:CA:64
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138352e302f32342d3234203d3e20343032343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.185.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:b0:29:f1:c5:67:a1:ff:41:e8:44:36:9c:ab:37:24:ad:51:
03:33:fd:48:76:e5:74:be:43:b1:c5:15:88:58:37:79:ac:fd:
ae:90:4c:2b:f1:9e:b3:10:11:6e:49:00:f2:bd:09:dc:d3:f8:
30:69:2a:c4:41:82:07:7e:28:c3:12:56:3a:d4:73:d5:af:48:
c5:ef:91:ce:72:d6:64:cf:76:78:86:e0:37:96:e5:74:d9:c9:
91:f2:93:59:80:bf:51:29:0f:ef:2d:69:90:5d:75:2b:e9:af:
75:a0:9f:20:3a:ad:db:66:c6:f9:3d:62:f5:a5:39:12:c3:ba:
47:df:f6:bf:a4:8f:85:9d:4c:84:e3:b9:ec:f1:9d:cc:53:60:
ca:cd:48:0a:80:d4:71:5c:d4:c4:7a:39:5f:e2:d1:59:87:b2:
6c:27:6f:60:19:ec:05:79:9d:2c:9b:e2:d1:17:ea:01:96:ec:
56:f9:69:78:d0:70:e7:da:36:f4:cf:d7:e9:97:a0:3f:45:58:
0c:89:24:17:f1:1f:7b:e6:85:06:01:fb:04:d8:bc:4c:d9:eb:
e9:bd:eb:92:7b:2a:cb:ca:c0:1c:56:b7:b2:8c:36:a5:a4:a6:
59:bf:2a:4d:6b:05:92:10:fb:55:56:c8:ca:e3:d9:ab:2f:3a:
10:5f:6c:87
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUEr0r+Zc5Jatv7r4jFWTjy5kgRbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0
MWFjZWJiODAeFw0yNjA3MDUxODUwMTRaFw0yNzA3MDQxODU1MTRaMDMxMTAvBgNV
BAMTKDAxOUMyNjZCQkJDM0VGOTQ5N0M4MDY4MEJEMTM2QzI0NjdGQkNBNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXuq20FHI9H8pfnvMlrYI6+SK
YMpEHIDqkukIeOgqnQOIN46H4kcdLf0Qg4lLO1cyoIo2XapnIUc7LKA6iRjP9Crr
DAflhbTi1uiiQD7R1ZuabsYdIGxA2PTM3T7nm1471RpVJGhcccIFQGnbzBwF5/8K
r2a6oXEb7NawBrWLQTqiFrVuBkX0i5dOOurNTbgXPZ43cq7ylqqAphlTXXtoH14D
zsB0Cz+9d76JNm3C2S6o5uucDUQ0iXaEy4wke1SawFzClXzGG3vlKSiMV80BOTIK
rxiu9AqusfnMzhxXrrK0fv9ovd/U+u44aPUhRDIjMyJkOdOMs8pcjqt2sJwrAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUAZwma7vD75SXyAaAvRNsJGf7ymQwHwYDVR0j
BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz
YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH
czY3Zy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt
ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzEzOTMzMmUzMTM2MzgyZTMx
MzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjM0MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMGouTANBgkqhkiG9w0BAQsFAAOCAQEAL7Ap8cVnof9B6EQ2nKs3JK1RAzP9
SHbldL5DscUViFg3eaz9rpBMK/GesxARbkkA8r0J3NP4MGkqxEGCB34owxJWOtRz
1a9Ixe+RznLWZM92eIbgN5bldNnJkfKTWYC/USkP7y1pkF11K+mvdaCfIDqt22bG
+T1i9aU5EsO6R9/2v6SPhZ1MhOO57PGdzFNgys1ICoDUcVzUxHo5X+LRWYeybCdv
YBnsBXmdLJvi0RfqAZbsVvlpeNBw59o29M/X6ZegP0VYDIkkF/Efe+aFBgH7BNi8
TNnr6b3rknsqy8rAHFa3sow2paSmWb8qTWsFkhD7VVbIyuPZqy86EF9shw==
-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:20 2026 by rpki-client