Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20383334.roa
File: 3139342e33312e3139372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /aWcJFRP1JX1i9dhgwz0sjlzCdHCqJ17Bk77BW+551s=
Subject key identifier: EF:4D:12:67:7F:CF:0F:73:61:4F:9E:19:77:9B:2B:13:E4:57:6A:EF
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 2729CD686B4B893CA5379C05275A6BA492DDA8D2
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20383334.roa
Signing time: Wed 11 Nov 2026 12:56:29 +0000
ROA not before: Wed 11 Nov 2026 12:51:29 +0000
ROA not after: Wed 10 Nov 2027 12:56:29 +0000
asID: 834
IP address blocks: 194.31.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:29:cd:68:6b:4b:89:3c:a5:37:9c:05:27:5a:6b:a4:92:dd:a8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Nov 11 12:51:29 2026 GMT
Not After : Nov 10 12:56:29 2027 GMT
Subject: CN=EF4D12677FCF0F73614F9E19779B2B13E4576AEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:18:d6:5f:a2:e0:72:a7:63:d1:ee:c6:a8:
aa:cb:41:a1:0b:37:20:c5:df:0a:a7:68:03:86:55:
e7:85:e3:82:cb:b7:67:ef:71:b0:b3:e9:28:e7:8c:
a9:a1:72:10:e8:63:70:1a:a6:57:98:a0:30:1a:28:
96:4f:75:ab:05:dc:f0:a8:50:a4:5f:6e:4d:d5:5e:
05:c5:10:7d:a7:ac:bc:0a:e5:f0:17:dc:78:39:5d:
90:60:18:d2:99:b9:4e:ff:06:52:ed:55:35:53:95:
99:4f:4b:6b:76:02:c0:d2:99:23:d5:fd:e9:ee:34:
b9:c5:a7:fb:4b:6f:55:00:74:5d:0c:d9:4d:1d:c9:
9f:36:7f:35:62:1f:aa:bc:9e:27:8c:dc:9c:d5:d2:
60:e8:ff:c8:80:07:df:c6:4d:27:d3:c9:1d:03:c7:
d4:8e:f8:87:87:2c:02:0b:04:f0:2e:be:ad:a9:3c:
5e:b7:35:82:d7:6e:55:48:e1:b2:e5:4a:7a:f0:cd:
e6:26:25:4f:dc:4f:d4:ee:93:24:c2:2e:25:51:70:
94:40:6f:db:44:93:60:73:9c:3c:91:85:d8:b2:ac:
9d:23:27:af:d0:5c:d3:8d:93:61:3a:ab:18:e0:3e:
10:a9:e1:7f:86:72:76:49:55:8d:77:a8:28:98:82:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4D:12:67:7F:CF:0F:73:61:4F:9E:19:77:9B:2B:13:E4:57:6A:EF
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.197.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c1:9d:11:e6:e7:7d:41:21:d2:4f:cf:98:fd:06:ae:49:72:
52:f5:eb:3a:39:39:32:e3:ec:12:75:b0:22:d9:4e:53:be:8f:
da:f1:d1:8b:9b:9a:7e:a6:3e:e6:7c:a4:93:70:91:75:5a:47:
65:05:73:18:76:9e:94:4b:ba:d7:98:3f:9f:2e:68:d3:d5:63:
4c:d6:36:58:b6:e3:de:5f:58:21:50:7a:44:5c:f2:1e:3e:27:
81:f1:05:3d:70:dd:49:ce:7f:c1:3e:f3:7d:8f:b1:25:e9:71:
78:2b:50:51:bd:5b:3f:e5:a8:6b:d2:39:18:65:f6:83:c5:c9:
3a:19:a5:65:de:aa:36:98:0d:9c:25:bf:f9:af:b2:b1:be:52:
ec:22:26:29:c2:29:1a:1a:d7:fe:11:18:17:dd:32:b0:56:21:
91:0e:e5:29:5e:db:dd:c0:af:27:b8:4d:44:45:cb:7f:cd:17:
1e:f1:72:2b:3a:0e:9b:97:c1:5a:4d:c5:69:70:bb:77:ac:80:
93:a0:c4:4d:e3:78:d7:05:34:d5:eb:a3:03:ba:46:51:44:68:
a6:29:a1:13:50:2a:4d:b9:d5:60:a5:98:04:91:30:a9:75:73:
d6:01:11:8d:f4:d1:b5:cc:31:c8:21:6a:d5:7f:6d:2d:14:b2:
8f:d4:54:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:02:12 2026 by rpki-client