Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138362e302f32332d3234203d3e20313937353337.roa
File: 3139332e3136382e3138362e302f32332d3234203d3e20313937353337.roa (raw, json)
Hash identifier: 80wTaOvoTabJZyZFxJjua5dvWYsdpeCdIOaDcFoI0h0=
Subject key identifier: 68:2A:5A:F5:67:86:14:84:6D:D8:2C:BC:C2:58:3E:C4:1C:8E:8D:08
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 043B164273930226B13852DD090E156CD5B5C19C
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138362e302f32332d3234203d3e20313937353337.roa
Signing time: Sun 30 Aug 2026 11:53:25 +0000
ROA not before: Sun 30 Aug 2026 11:48:25 +0000
ROA not after: Sun 29 Aug 2027 11:53:25 +0000
asID: 197537
IP address blocks: 193.168.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 10:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:3b:16:42:73:93:02:26:b1:38:52:dd:09:0e:15:6c:d5:b5:c1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Aug 30 11:48:25 2026 GMT
Not After : Aug 29 11:53:25 2027 GMT
Subject: CN=682A5AF5678614846DD82CBCC2583EC41C8E8D08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:67:e3:48:b5:c4:fa:97:77:3c:95:b1:94:
ff:08:02:de:0c:db:63:b1:8d:e4:20:c2:ef:2c:38:
3a:d9:cf:f4:4e:4f:4a:cf:8c:77:81:52:15:5d:bb:
36:70:c7:d4:85:b5:bc:36:91:5b:3f:68:a7:33:6c:
d4:3e:a6:3a:87:39:3c:fd:d1:e8:8e:2e:d9:89:11:
fa:9c:df:b0:95:2a:0a:b2:1f:a8:47:92:73:8a:68:
df:90:0c:ed:1b:65:22:4b:40:19:17:aa:c8:95:c7:
8c:60:21:41:00:09:6c:e8:3c:43:5d:61:2e:88:a0:
60:b6:2b:41:8e:49:78:fb:ab:4f:bb:e5:86:b4:dd:
cd:e4:07:89:12:16:c0:4d:5e:17:bc:2b:dc:b3:c6:
f0:fc:0a:0d:87:c2:a1:c2:2e:27:73:f8:8f:62:0d:
cd:b6:5d:6f:ea:04:4a:2b:98:42:29:9c:dd:3b:57:
07:c9:44:97:f0:57:85:81:4d:62:5c:e0:f7:95:99:
37:ca:79:86:d5:b8:4d:5d:bb:1b:72:98:9f:9c:71:
db:c9:76:de:fa:62:35:e2:8c:68:b4:6d:b9:ab:39:
cd:aa:58:c9:0a:b2:44:1f:03:83:7c:72:8a:75:8b:
b6:1f:03:83:c9:88:e6:e5:26:ad:16:5b:14:9b:58:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2A:5A:F5:67:86:14:84:6D:D8:2C:BC:C2:58:3E:C4:1C:8E:8D:08
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e3136382e3138362e302f32332d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.186.0/23
Signature Algorithm: sha256WithRSAEncryption
18:c9:07:7c:eb:06:be:36:c6:c8:11:91:05:8b:d3:f2:87:a0:
51:96:07:d4:78:c4:bc:03:8b:14:b3:29:ed:5d:a6:8c:74:72:
20:5c:35:cb:c3:f3:f7:70:c5:c5:85:8c:b2:0c:29:68:33:64:
1b:71:1c:87:b1:b8:18:da:e1:27:ba:39:9b:ef:f5:09:d4:77:
70:4d:2f:c7:10:1c:a8:9f:d1:d0:ce:28:95:03:8f:60:41:65:
dc:33:7f:65:ba:81:50:06:99:64:0f:b9:37:c6:17:ab:25:e8:
d1:36:db:23:07:fb:5f:36:98:96:be:b8:d2:e6:53:9c:00:9d:
fe:a8:6c:e2:ec:47:3e:42:97:57:45:33:3b:16:29:db:44:32:
83:e1:fd:25:8c:bb:17:b4:29:03:e9:75:10:70:23:f9:c4:24:
59:4d:b4:18:5b:df:80:0e:c5:2d:36:c1:8b:5f:06:21:07:e1:
c9:55:3b:3f:a8:0d:5e:bc:7c:bf:e8:17:2a:d6:30:cc:4f:b1:
33:47:85:63:1c:7c:92:ae:eb:16:a7:46:20:10:7f:14:37:7f:
3a:21:f9:c9:e0:a6:ed:eb:28:85:00:c8:ea:8c:fb:aa:bc:c1:
8d:32:ff:7d:94:e5:5d:8a:a5:dd:7f:d4:6a:db:4b:0b:5d:b6:
7d:0a:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:48:59 2026 by rpki-client