Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20313532363938.roa
File: 3139342e33312e3139372e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier: ZNogajkk7b6SX1S+YZ1RLghPbX8A44D5Lwp6Lyc6luE=
Subject key identifier: C0:62:A4:B2:86:0F:F9:F5:3F:7B:CA:82:3E:B0:09:75:39:6D:B2:EA
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 6C99920FE992C86F2AF6F7A4B570999F05E4C7A8
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20313532363938.roa
Signing time: Tue 27 Oct 2026 08:19:55 +0000
ROA not before: Tue 27 Oct 2026 08:14:55 +0000
ROA not after: Tue 26 Oct 2027 08:19:55 +0000
asID: 152698
IP address blocks: 194.31.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 21:57:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:99:92:0f:e9:92:c8:6f:2a:f6:f7:a4:b5:70:99:9f:05:e4:c7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Oct 27 08:14:55 2026 GMT
Not After : Oct 26 08:19:55 2027 GMT
Subject: CN=C062A4B2860FF9F53F7BCA823EB00975396DB2EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:b6:27:59:b8:a8:bb:46:5d:d9:6c:ee:b9:
6e:b9:ea:8a:6b:6b:36:53:e8:55:4a:bb:0c:0a:67:
b9:45:56:0c:df:0d:d5:58:87:1c:eb:29:dd:f9:78:
64:6a:d0:11:78:1c:85:46:a5:4a:27:28:b3:cc:12:
4d:bb:15:bc:82:44:21:2e:21:10:4e:70:ba:c8:ec:
14:3b:79:0a:64:ed:37:ed:8a:f4:35:51:90:d6:61:
40:8b:d4:07:a5:88:e3:a8:00:6c:7f:4e:28:30:00:
fc:d3:f9:90:d5:53:c0:e4:7e:cb:cd:22:e9:19:0b:
ba:b4:fe:af:6d:18:20:a9:a5:aa:d8:39:67:c5:6a:
57:34:33:14:91:f1:1f:7d:45:f5:96:eb:9e:14:e2:
bf:94:70:54:e7:ae:6e:e0:f7:e0:ae:ce:7d:ee:3c:
f6:49:b2:92:bf:6f:6f:13:c9:d3:36:7c:ab:0e:b3:
ce:c4:f9:bb:63:45:43:7c:13:87:bd:b8:7e:bd:87:
0e:23:6d:ca:9e:c2:ff:fa:26:9d:e9:94:df:52:46:
a5:a6:f6:f3:fa:60:68:19:b1:3b:4a:0c:e0:6a:30:
dc:42:98:bc:96:95:35:4c:6b:db:d2:38:ba:86:9e:
ae:bb:38:43:cc:da:54:e1:7c:4b:a0:3d:01:4e:d6:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:62:A4:B2:86:0F:F9:F5:3F:7B:CA:82:3E:B0:09:75:39:6D:B2:EA
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20313532363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.197.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8d:96:c9:8a:5f:82:b4:93:a5:17:cd:67:17:28:e4:99:38:
45:20:c5:c2:c8:6b:84:38:3c:17:8f:66:c0:d7:e1:97:d3:4f:
3b:8c:cd:b3:f7:78:be:4d:e2:83:0e:49:23:4d:6b:64:a5:c9:
ad:6d:ed:44:70:f9:ed:a0:c1:6c:ca:70:5e:fa:0a:a3:24:9d:
d7:87:57:c9:89:d6:b9:63:ae:0f:b7:1a:d3:97:bd:5d:a6:86:
be:28:df:ba:2c:aa:44:97:ff:f6:5b:3b:98:ca:12:d3:03:e0:
fb:25:75:4b:18:f0:ac:fd:ce:30:b0:62:25:14:79:5a:cd:03:
e7:80:a0:18:5f:c2:82:2e:1d:03:64:8d:67:4f:a2:55:f4:58:
2c:20:55:5d:d8:f0:6a:b5:5d:ff:02:6e:d5:ad:ca:55:c8:0a:
6f:60:f4:24:b8:0c:7d:10:91:3a:8c:a8:19:6c:de:90:a4:6c:
89:2a:85:57:a1:8b:d8:b6:4f:4c:1a:69:6e:9f:aa:8d:5e:22:
0c:21:9f:2f:70:eb:1f:06:ec:65:77:26:1e:bb:f9:d9:34:c1:
00:f2:38:e5:d4:85:3f:a3:62:e7:84:f1:0d:87:c4:f9:9a:2e:
00:bf:b6:04:09:85:ed:7d:35:31:25:02:9a:15:e8:58:e5:4e:
28:bc:90:72
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUbJmSD+mSyG8q9vektXCZnwXkx6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjEwMjcwODE0NTVaFw0yNzEwMjYwODE5NTVaMDMxMTAvBgNV
BAMTKEMwNjJBNEIyODYwRkY5RjUzRjdCQ0E4MjNFQjAwOTc1Mzk2REIyRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHqbYnWbiou0Zd2WzuuW656opr
azZT6FVKuwwKZ7lFVgzfDdVYhxzrKd35eGRq0BF4HIVGpUonKLPMEk27FbyCRCEu
IRBOcLrI7BQ7eQpk7TftivQ1UZDWYUCL1AeliOOoAGx/TigwAPzT+ZDVU8DkfsvN
IukZC7q0/q9tGCCpparYOWfFalc0MxSR8R99RfWW654U4r+UcFTnrm7g9+Cuzn3u
PPZJspK/b28TydM2fKsOs87E+btjRUN8E4e9uH69hw4jbcqewv/6Jp3plN9SRqWm
9vP6YGgZsTtKDOBqMNxCmLyWlTVMa9vSOLqGnq67OEPM2lThfEugPQFO1hYhAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUwGKksoYP+fU/e8qCPrAJdTltsuowHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt
MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzEzOTM0MmUzMzMxMmUzMTM5
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzNjM5Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCH8UwDQYJKoZIhvcNAQELBQADggEBAACNlsmKX4K0k6UXzWcXKOSZOEUgxcLI
a4Q4PBePZsDX4ZfTTzuMzbP3eL5N4oMOSSNNa2Slya1t7URw+e2gwWzKcF76CqMk
ndeHV8mJ1rljrg+3GtOXvV2mhr4o37osqkSX//ZbO5jKEtMD4PsldUsY8Kz9zjCw
YiUUeVrNA+eAoBhfwoIuHQNkjWdPolX0WCwgVV3Y8Gq1Xf8CbtWtylXICm9g9CS4
DH0QkTqMqBls3pCkbIkqhVehi9i2T0waaW6fqo1eIgwhny9w6x8G7GV3Jh67+dk0
wQDyOOXUhT+jYueE8Q2HxPmaLgC/tgQJhe19NTElApoV6FjlTii8kHI=
-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:48 2026 by rpki-client