Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3139392e31392e37362e302f32342d3234203d3e20323135343637.roa
File: 3139392e31392e37362e302f32342d3234203d3e20323135343637.roa (raw, json)
Hash identifier: UJGHPLxaZcUv5JhaIhIjGMCv0Gv34qsGQUGpA0N+xDA=
Subject key identifier: 66:3B:28:32:DA:53:A0:4E:2F:D9:42:2F:5E:D0:F2:5C:FE:24:97:F5
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 4AFEBE9F0AE21452AEB8C1BE8FACEA5AFA8BE059
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3139392e31392e37362e302f32342d3234203d3e20323135343637.roa
Signing time: Thu 27 Aug 2026 16:48:38 +0000
ROA not before: Thu 27 Aug 2026 16:43:38 +0000
ROA not after: Thu 26 Aug 2027 16:48:38 +0000
asID: 215467
IP address blocks: 199.19.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:fe:be:9f:0a:e2:14:52:ae:b8:c1:be:8f:ac:ea:5a:fa:8b:e0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Aug 27 16:43:38 2026 GMT
Not After : Aug 26 16:48:38 2027 GMT
Subject: CN=663B2832DA53A04E2FD9422F5ED0F25CFE2497F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f9:b9:b2:31:6f:8e:75:f8:61:bd:f6:b2:1d:
ec:0e:36:77:72:0f:15:07:ec:54:82:33:85:ed:1a:
36:a3:77:d8:ba:68:0c:cd:95:99:59:20:1f:9b:10:
43:02:90:27:2a:9d:85:e9:63:bf:1d:01:0d:51:4a:
8e:a0:74:5d:94:4c:4d:7f:57:54:d0:43:b2:f1:ef:
6e:35:cd:06:f0:84:4d:c0:1c:d6:fd:bd:fe:9b:dd:
86:b7:27:fd:fe:ec:97:41:04:3b:27:dd:d5:5e:ed:
80:a3:a0:78:30:31:18:e9:ae:17:84:6a:78:cc:05:
d9:f7:b1:f2:df:d4:bd:9a:75:da:e4:1e:ef:97:35:
8d:2a:e1:d4:73:f0:fe:2a:04:ab:fd:c2:a3:dc:2b:
02:75:39:29:86:0f:0c:c8:c5:ff:db:47:d2:96:1f:
c0:16:d8:f6:26:21:36:fb:19:e3:45:8c:d9:58:71:
3f:86:6c:ee:bd:82:66:83:9c:da:6b:e5:40:3d:83:
48:7b:26:40:18:18:74:be:87:94:69:2a:9e:89:1a:
07:f4:f0:a5:b1:6a:7a:62:72:e6:8d:b1:54:76:4e:
2d:1d:48:39:e7:f7:7b:ed:a1:8a:87:8b:98:bf:23:
2e:c8:72:49:04:13:b1:0c:d5:d4:1d:e6:45:3f:87:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3B:28:32:DA:53:A0:4E:2F:D9:42:2F:5E:D0:F2:5C:FE:24:97:F5
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3139392e31392e37362e302f32342d3234203d3e20323135343637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.19.76.0/24
Signature Algorithm: sha256WithRSAEncryption
56:33:bf:b4:fe:44:27:14:81:d2:85:71:c3:32:12:34:89:b6:
4d:53:9c:6f:7f:12:c9:6e:7f:2e:ae:50:50:28:d7:bf:1b:91:
78:73:1f:de:b6:2c:29:c1:20:58:c4:32:eb:34:1a:3a:3f:fd:
a7:0f:11:01:ed:11:6f:8e:75:a1:b3:03:18:e4:e8:3e:87:d4:
81:c3:b5:58:fb:f1:53:28:2b:9d:b2:ac:95:9a:59:0d:00:ff:
01:42:d5:6e:84:c5:fa:e9:20:02:c5:f9:6d:7e:d2:e6:9e:d0:
e0:f3:56:24:80:f9:7a:fd:54:e2:53:4d:07:76:4e:17:4d:77:
67:aa:cc:cb:24:9f:09:9e:50:4f:30:0c:10:05:c6:28:b9:3c:
04:e5:5e:b9:4c:68:7e:f8:fc:73:a1:d4:9b:d9:f3:30:16:6a:
61:2e:83:9c:22:76:fe:03:9a:70:ab:6a:8a:b1:cb:c3:4e:49:
24:ea:cc:85:d8:94:79:4b:95:87:75:49:21:eb:a3:53:5e:27:
ac:30:f3:77:f4:fe:92:e8:52:bf:b3:be:ed:3e:41:b5:26:40:
f6:1c:83:a0:da:00:81:04:0e:58:3b:87:fa:8b:0b:02:89:4c:
19:c7:f2:33:06:4d:f6:a2:7e:71:1f:b5:a8:13:3b:ae:e3:4b:
9b:98:6a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:39:45 2026 by rpki-client