Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/3139332e32352e3137312e302f32342d3234203d3e2032393134.roa
File: 3139332e32352e3137312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 3RW0EBFKhtkuyYO0ImclMyJ2bHvWWRGpRtxcprM7Gs0=
Subject key identifier: 96:81:8B:D4:6C:15:25:80:31:F2:5D:D1:87:04:0A:F5:B4:8A:35:D9
Certificate issuer: /CN=9944737a024fe1405d0b4cf6b53df38938d85b42
Certificate serial: 08854FA47D2C77D2767F31ED971C8D07D48D1EC5
Authority key identifier: 99:44:73:7A:02:4F:E1:40:5D:0B:4C:F6:B5:3D:F3:89:38:D8:5B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/3139332e32352e3137312e302f32342d3234203d3e2032393134.roa
Signing time: Fri 13 Mar 2026 11:06:27 +0000
ROA not before: Fri 13 Mar 2026 11:01:27 +0000
ROA not after: Fri 12 Mar 2027 11:06:27 +0000
asID: 2914
IP address blocks: 193.25.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.crl
rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.mft
rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:85:4f:a4:7d:2c:77:d2:76:7f:31:ed:97:1c:8d:07:d4:8d:1e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944737a024fe1405d0b4cf6b53df38938d85b42
Validity
Not Before: Mar 13 11:01:27 2026 GMT
Not After : Mar 12 11:06:27 2027 GMT
Subject: CN=96818BD46C15258031F25DD187040AF5B48A35D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:c2:da:47:7c:a3:be:fb:ca:3b:e3:cf:17:
26:47:c6:2f:e0:a4:5d:42:41:d5:34:3c:dc:22:55:
aa:07:a7:f4:4b:74:68:b8:4e:84:82:84:1c:cf:cd:
57:02:57:df:dd:13:12:8d:ae:c6:72:3b:e7:55:0c:
d9:fc:42:98:e6:29:d9:65:ca:fc:03:1f:b2:9b:eb:
9b:7f:79:a3:a9:03:62:54:eb:6a:e9:5f:cc:e8:d8:
1c:6a:7a:8c:cf:10:3f:dd:c8:61:21:10:25:77:ce:
be:7a:c5:99:4e:92:d3:97:95:68:eb:f3:98:3c:c1:
b6:51:65:f8:b9:77:d9:9c:2b:8d:4c:fa:4f:e6:60:
f8:38:a7:84:19:38:d1:68:1d:67:19:5d:82:b8:21:
fc:9f:01:74:0f:ee:3b:69:b1:60:f5:6d:44:e5:6b:
a0:54:d3:4d:e2:46:6c:04:97:e3:e3:a4:08:1b:8f:
07:75:24:3c:71:0f:36:f7:3a:2d:ce:e4:7e:d6:32:
64:06:ad:59:32:15:4c:ea:d1:6b:e8:d2:f7:89:dc:
c5:a9:b3:71:6a:fd:80:9a:ea:b7:b9:c7:e9:e2:8f:
8d:26:ab:56:e1:ab:60:06:67:9b:c7:6e:49:b4:54:
fd:8c:49:ae:dd:47:a6:95:7a:5c:7d:77:82:70:41:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:81:8B:D4:6C:15:25:80:31:F2:5D:D1:87:04:0A:F5:B4:8A:35:D9
X509v3 Authority Key Identifier:
keyid:99:44:73:7A:02:4F:E1:40:5D:0B:4C:F6:B5:3D:F3:89:38:D8:5B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/3139332e32352e3137312e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.171.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6f:cd:61:7c:66:54:a0:c7:96:35:5c:53:1a:9e:b9:6d:8f:
8a:9d:45:a6:e3:1c:2a:e6:66:0c:26:d3:c1:58:32:41:13:89:
35:d0:e0:83:7e:08:f9:91:1c:0f:a8:4a:1f:47:35:54:71:b7:
f6:94:8b:5b:75:90:71:d6:0b:82:bc:d9:f4:7a:6b:64:35:6c:
1d:c6:60:af:08:6c:73:ec:05:ef:55:4b:50:ba:cb:65:38:71:
7a:de:a4:b3:00:2c:49:b7:45:48:93:47:90:ad:79:99:ea:52:
f3:ef:17:d4:7a:57:78:67:43:a2:c3:6e:af:86:d3:85:ff:fd:
69:ad:2f:3c:e0:62:3f:c0:34:31:4b:49:9a:34:b2:86:09:9f:
cf:8b:8c:63:f2:7b:de:c3:34:6c:e4:8c:ba:ab:95:ef:29:47:
03:65:eb:b0:e6:b1:00:3e:56:50:43:e5:a4:4c:f2:b6:b4:21:
90:3e:1d:ca:19:7b:ba:94:00:5e:40:cb:8f:e4:90:7a:f3:3a:
f8:2c:03:63:59:11:7c:2e:39:f7:d9:45:c8:6c:11:7e:79:f9:
24:ec:48:aa:e1:14:00:9e:ea:52:8b:5a:50:1e:52:38:e8:1b:
9a:03:fb:a0:b5:60:ed:20:74:d3:6e:a3:1a:76:58:3d:af:b8:
a8:2c:1b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 08:52:09 2026 by rpki-client