Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e312e302f32342d3234203d3e203235313938.roa
File: 3139332e32342e312e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: tu1VWADpDVIR+YbpiB1AkhOtamaNSmGBU07mI/bDM1c=
Subject key identifier: 86:1C:7A:EE:D9:E8:3F:96:A2:C9:83:46:46:F8:69:11:C3:39:04:C1
Certificate issuer: /CN=1f84a2481d280de0a103598276db0c954193c755
Certificate serial: 46535A6EAB66E853898BD0701CB1102DEF69C4C5
Authority key identifier: 1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e312e302f32342d3234203d3e203235313938.roa
Signing time: Tue 30 Jun 2026 21:12:00 +0000
ROA not before: Tue 30 Jun 2026 21:07:00 +0000
ROA not after: Tue 29 Jun 2027 21:12:00 +0000
asID: 25198
IP address blocks: 193.24.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:53:5a:6e:ab:66:e8:53:89:8b:d0:70:1c:b1:10:2d:ef:69:c4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f84a2481d280de0a103598276db0c954193c755
Validity
Not Before: Jun 30 21:07:00 2026 GMT
Not After : Jun 29 21:12:00 2027 GMT
Subject: CN=861C7AEED9E83F96A2C9834646F86911C33904C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:bc:04:6a:c1:f2:4c:46:b0:97:b1:5a:6c:
3d:78:10:fb:12:69:55:e8:05:60:bb:57:f0:b8:cf:
f8:29:2d:2b:8b:9a:8a:dd:b5:d6:2b:60:d3:dc:a5:
8a:0a:86:45:63:65:31:6b:fb:8b:9c:f3:d8:53:a4:
e3:6f:e4:25:2f:0e:74:00:fc:0c:90:10:bc:f1:c7:
dc:fc:ae:36:29:0b:61:0a:ba:43:6c:e3:a2:e8:65:
f4:fb:c2:9f:67:ad:39:f4:b7:95:65:24:5e:d5:0b:
bf:6e:f6:0e:d1:ba:2b:f9:5c:6c:33:48:cb:d4:bb:
56:e4:af:30:48:22:84:ec:da:ed:19:8d:26:41:5b:
ba:a2:60:73:7b:e3:d5:9f:0f:2c:1a:fe:89:cd:29:
8e:e1:66:ff:4d:10:13:91:19:49:ef:e3:fc:c2:17:
48:29:4a:48:4a:98:d6:89:11:44:bf:76:ec:09:e0:
9e:0d:de:0a:0a:ab:7d:9e:ae:c3:0f:b9:42:a6:81:
ce:b5:fb:41:fd:e1:ec:cf:82:aa:1d:52:e2:33:d6:
59:4e:83:54:b8:0d:56:41:18:c8:fd:3e:b0:b0:39:
c5:3e:bd:ba:7b:06:f6:82:20:3c:83:3b:a0:2f:d4:
e8:00:a1:09:e0:6b:2a:98:24:5b:80:90:a1:b9:1c:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:7A:EE:D9:E8:3F:96:A2:C9:83:46:46:F8:69:11:C3:39:04:C1
X509v3 Authority Key Identifier:
keyid:1F:84:A2:48:1D:28:0D:E0:A1:03:59:82:76:DB:0C:95:41:93:C7:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/1F84A2481D280DE0A103598276DB0C954193C755.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4SiSB0oDeChA1mCdtsMlUGTx1U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/45e648c3-1481-478f-83e2-b25127fa95cd/0/3139332e32342e312e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:21:1f:ab:2f:af:82:96:48:ae:a7:b6:31:d9:c4:97:96:32:
b6:27:fe:f0:4f:2a:3b:db:ed:8c:03:47:75:a7:80:5c:ee:5d:
ee:5c:e3:1c:53:4c:ce:c3:b0:42:94:b8:02:63:e6:2e:ab:0b:
92:a3:90:91:05:a8:94:cb:82:d9:ea:9c:21:06:6e:23:0e:6d:
7a:29:e8:c1:d9:00:fc:d1:59:69:71:f7:88:1a:49:6b:c1:ef:
42:d2:00:f4:3e:3e:79:1a:3e:22:11:64:95:62:8f:30:c9:5f:
20:10:96:fb:e6:7b:f3:d2:04:cf:af:26:b3:63:f7:0b:ca:22:
ad:af:9e:a6:75:84:0c:d6:03:0c:83:e9:7d:d5:cd:d0:a5:72:
7b:df:d1:e2:9f:b5:72:2f:95:f5:0c:a8:72:c5:1e:34:d5:30:
8f:17:60:13:45:9d:fe:11:6b:16:9b:f5:94:33:ea:fa:5a:8a:
ff:55:bb:0c:04:32:3a:38:69:90:51:47:38:56:d5:e8:cf:ca:
de:fe:e4:5a:0c:5e:8c:bc:4a:af:9d:de:2b:02:db:c6:0f:da:
76:ec:a6:27:c5:2a:d3:7e:d1:82:d1:0a:93:11:b1:47:85:81:
6d:14:a0:7d:e8:42:79:59:54:8b:8f:4c:0a:d2:82:de:2b:b6:
c9:45:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:26 2026 by rpki-client