Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/3139332e32352e3137302e302f32342d3234203d3e2032393134.roa
File: 3139332e32352e3137302e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: WRx1OxGOlgN0/80krwLB6Bvyo5xPwAjYqRsVo8Tmvwg=
Subject key identifier: F9:9E:03:56:75:DD:BA:AB:C1:C5:78:23:80:BD:A5:8C:57:CD:DD:6C
Certificate issuer: /CN=9944737a024fe1405d0b4cf6b53df38938d85b42
Certificate serial: 40F9D86311F12013E5235D32D1790BB7E2550394
Authority key identifier: 99:44:73:7A:02:4F:E1:40:5D:0B:4C:F6:B5:3D:F3:89:38:D8:5B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/3139332e32352e3137302e302f32342d3234203d3e2032393134.roa
Signing time: Fri 13 Mar 2026 11:06:29 +0000
ROA not before: Fri 13 Mar 2026 11:01:29 +0000
ROA not after: Fri 12 Mar 2027 11:06:29 +0000
asID: 2914
IP address blocks: 193.25.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.crl
rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.mft
rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f9:d8:63:11:f1:20:13:e5:23:5d:32:d1:79:0b:b7:e2:55:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944737a024fe1405d0b4cf6b53df38938d85b42
Validity
Not Before: Mar 13 11:01:29 2026 GMT
Not After : Mar 12 11:06:29 2027 GMT
Subject: CN=F99E035675DDBAABC1C5782380BDA58C57CDDD6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:df:52:ae:5e:00:1d:8e:08:b6:fb:64:e0:
e0:9b:42:58:4b:3a:b2:02:6a:99:f9:e2:9a:61:07:
5a:ff:b4:2a:2c:b5:a0:e4:a2:0d:0f:a2:65:49:66:
f3:3c:b7:ff:84:67:47:4f:17:53:cf:8a:27:95:7e:
e3:89:36:7b:26:71:dc:99:70:4c:0c:29:ac:e9:e4:
97:d2:dd:21:5d:4f:1d:8a:5e:e6:79:91:ad:15:61:
1e:1a:1f:53:94:ab:21:cc:d1:29:4f:59:e2:f7:5e:
13:d6:7d:f0:3d:a6:c1:c6:83:11:ec:30:e0:43:10:
72:7b:7b:ab:ca:05:cd:11:77:5c:0c:f5:60:e2:9c:
35:5f:5f:16:ba:c0:29:e8:7e:ee:23:7f:aa:79:81:
c5:3a:56:11:07:22:5f:81:fd:5c:c3:48:60:9c:c4:
53:0f:49:86:1c:6c:f5:da:fb:b1:f9:1d:2c:a4:7e:
a1:65:b8:cd:9f:53:43:55:a9:d0:fc:3e:48:29:39:
90:76:ee:1f:55:73:35:10:47:79:bd:3c:65:8b:f9:
f9:1d:40:ef:fb:1b:da:6a:92:6d:d9:4d:a9:7b:b8:
ab:55:6a:f5:ec:1c:0d:8f:e9:56:71:43:51:82:47:
3a:ac:6e:f2:88:77:92:44:54:d2:91:2e:01:55:97:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9E:03:56:75:DD:BA:AB:C1:C5:78:23:80:BD:A5:8C:57:CD:DD:6C
X509v3 Authority Key Identifier:
keyid:99:44:73:7A:02:4F:E1:40:5D:0B:4C:F6:B5:3D:F3:89:38:D8:5B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/3139332e32352e3137302e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.170.0/24
Signature Algorithm: sha256WithRSAEncryption
59:dd:8f:51:c9:d3:f5:02:60:56:42:00:43:d7:d0:c3:7b:37:
40:25:a4:02:8e:b6:04:de:4d:ca:64:a9:52:11:36:df:70:6f:
26:be:bc:39:79:d0:f9:51:11:2c:92:d7:8a:fe:a3:30:bf:3e:
7f:c4:30:d2:53:5c:d6:7c:40:49:05:07:56:54:0e:8a:42:d5:
d5:20:73:29:03:5e:40:70:1f:06:70:d0:5b:9e:42:e0:82:bf:
c4:8d:99:be:21:c8:50:4b:5f:e9:d1:1c:6f:8e:7b:5a:de:2b:
e9:63:36:80:34:2f:cc:5d:7e:8a:9b:c5:bf:ed:e1:8a:40:c1:
d4:7b:26:24:f2:a6:9e:19:81:9e:b3:f8:3a:94:b2:32:dc:6e:
c4:d8:ed:7b:47:8f:0d:fa:9f:5f:fb:96:24:21:e2:9d:09:41:
fe:40:e9:89:ce:1a:ae:30:46:60:1b:f6:24:4f:3b:55:8e:6e:
c2:09:d0:31:de:20:6e:01:de:59:ad:74:f1:a5:cc:cc:14:20:
26:88:92:14:10:46:77:e4:33:89:c2:a6:0d:72:5c:6f:2b:4b:
89:29:ce:c9:97:42:c3:c1:52:75:78:0f:cc:27:53:09:8e:80:
2b:6a:46:9c:37:10:36:3b:ed:c9:8c:62:17:62:5f:9c:bc:7e:
85:71:ee:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 08:52:16 2026 by rpki-client