Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20313532373236.roa
File: 3139342e33312e3139372e302f32342d3234203d3e20313532373236.roa (raw, json)
Hash identifier: fnlzFjlZYHqGcwGwrVLYX0etb5xRMldIiM5/qioqJCc=
Subject key identifier: 2C:D3:C3:2D:5E:9B:7C:E1:DA:5C:C5:F7:9F:65:89:86:5C:9E:B4:F6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 13DAD2448A5B9B44056577460C77841854925B3C
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20313532373236.roa
Signing time: Sun 11 Oct 2026 13:01:21 +0000
ROA not before: Sun 11 Oct 2026 12:56:21 +0000
ROA not after: Sun 10 Oct 2027 13:01:21 +0000
asID: 152726
IP address blocks: 194.31.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:da:d2:44:8a:5b:9b:44:05:65:77:46:0c:77:84:18:54:92:5b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Oct 11 12:56:21 2026 GMT
Not After : Oct 10 13:01:21 2027 GMT
Subject: CN=2CD3C32D5E9B7CE1DA5CC5F79F6589865C9EB4F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:fc:18:34:be:e9:4d:85:86:a2:d0:dd:1c:
19:3a:89:73:7d:fb:c8:c0:93:14:cf:7a:cd:b7:91:
ce:c9:24:10:07:51:6a:d4:f3:20:83:f7:5b:e7:37:
d3:73:a4:53:b6:db:e8:f0:30:f0:83:f4:c5:e6:92:
97:ca:d6:fd:f5:8b:a0:d4:d6:f9:52:86:6d:05:4f:
2c:f8:f1:5c:9d:c8:74:95:05:74:64:4d:44:71:45:
c6:1c:2c:c3:41:84:25:e9:e2:4e:02:38:de:40:c3:
fc:45:87:b4:f8:68:21:86:0b:ce:ca:d2:f9:4a:bc:
43:32:f3:b8:3c:b6:96:12:8d:e5:45:3d:72:02:0a:
13:5a:67:d2:31:5b:00:26:48:28:f8:12:8e:8e:eb:
17:de:dc:02:9d:51:e4:3d:85:f4:65:89:46:e5:e6:
fc:b1:4d:42:ba:b4:c7:1e:c1:4c:00:49:49:8b:ff:
03:75:2e:51:29:92:9f:f0:5a:e7:3f:d3:c8:67:c3:
4e:bd:c4:2a:6f:b8:55:f2:c9:20:9f:d4:3a:a9:14:
aa:d3:49:5f:64:f2:87:eb:d0:5c:fb:22:64:ad:16:
b4:e9:c3:6f:64:eb:60:ce:b3:4c:35:ff:18:e0:4a:
d5:ec:f1:7d:b3:e0:9f:7b:d8:b9:4f:99:92:17:38:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D3:C3:2D:5E:9B:7C:E1:DA:5C:C5:F7:9F:65:89:86:5C:9E:B4:F6
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20313532373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:40:d4:00:bb:13:9e:82:d8:f8:9b:2c:b8:3a:60:b2:7b:c0:
c5:25:d2:fa:3b:c6:cb:4e:e3:fe:1b:c3:17:10:a7:7d:37:e5:
22:6b:10:db:7a:3d:19:c7:3c:62:ea:d8:bd:d6:dd:4b:a4:2f:
69:d4:95:86:ef:fb:55:51:6b:31:74:d4:51:40:39:46:a3:ab:
9d:64:42:14:a6:0e:08:46:74:b3:a5:b4:75:65:56:ac:29:0e:
6e:f2:3d:a5:3e:68:7d:eb:dd:30:5d:b2:88:f3:46:b5:24:d7:
52:05:28:ed:e1:18:29:2b:5f:fd:1a:1d:dc:b5:7a:31:63:4f:
47:2d:a3:0a:1b:61:6c:31:70:b1:af:f4:82:0b:32:0a:d0:44:
e8:12:04:f0:e0:1f:c5:35:74:20:21:d3:05:ae:25:40:c4:ee:
a1:ce:73:e5:57:1a:63:ed:1f:d2:6e:de:48:7d:be:66:66:54:
2b:ba:cd:bf:fc:c8:e6:fc:d1:f9:f7:f9:3c:c6:b0:0d:6d:e9:
37:a9:95:c4:42:82:04:19:85:c5:0d:62:38:56:48:9e:9c:d8:
cf:39:63:7d:0c:3b:d6:32:f6:6d:83:a4:a2:85:ca:bd:57:7b:
e5:d0:93:fb:9d:85:95:e4:e2:58:12:69:05:e6:5f:0e:2b:a1:
9d:cc:8a:8d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUE9rSRIpbm0QFZXdGDHeEGFSSWzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjEwMTExMjU2MjFaFw0yNzEwMTAxMzAxMjFaMDMxMTAvBgNV
BAMTKDJDRDNDMzJENUU5QjdDRTFEQTVDQzVGNzlGNjU4OTg2NUM5RUI0RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6/wYNL7pTYWGotDdHBk6iXN9
+8jAkxTPes23kc7JJBAHUWrU8yCD91vnN9NzpFO22+jwMPCD9MXmkpfK1v31i6DU
1vlShm0FTyz48VydyHSVBXRkTURxRcYcLMNBhCXp4k4CON5Aw/xFh7T4aCGGC87K
0vlKvEMy87g8tpYSjeVFPXICChNaZ9IxWwAmSCj4Eo6O6xfe3AKdUeQ9hfRliUbl
5vyxTUK6tMcewUwASUmL/wN1LlEpkp/wWuc/08hnw069xCpvuFXyySCf1DqpFKrT
SV9k8ofr0Fz7ImStFrTpw29k62DOs0w1/xjgStXs8X2z4J972LlPmZIXOM/XAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQULNPDLV6bfOHaXMX3n2WJhlyetPYwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt
MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzEzOTM0MmUzMzMxMmUzMTM5
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzNzMyMzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCH8UwDQYJKoZIhvcNAQELBQADggEBADpA1AC7E56C2PibLLg6YLJ7wMUl0vo7
xstO4/4bwxcQp3035SJrENt6PRnHPGLq2L3W3UukL2nUlYbv+1VRazF01FFAOUaj
q51kQhSmDghGdLOltHVlVqwpDm7yPaU+aH3r3TBdsojzRrUk11IFKO3hGCkrX/0a
Hdy1ejFjT0ctowobYWwxcLGv9IILMgrQROgSBPDgH8U1dCAh0wWuJUDE7qHOc+VX
GmPtH9Ju3kh9vmZmVCu6zb/8yOb80fn3+TzGsA1t6TeplcRCggQZhcUNYjhWSJ6c
2M85Y30MO9Yy9m2DpKKFyr1Xe+XQk/udhZXk4lgSaQXmXw4roZ3Mio0=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:45 2026 by rpki-client