Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33362e302f32342d3234203d3e20313532313739.roa
File: 3139342e3234362e33362e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: Qgu5Tvm9W5X7SEvK1a2hylvdBTNEStW6QJu77ozFsGM=
Subject key identifier: 71:D1:E0:27:2A:8E:2F:A7:D9:BC:85:FF:FD:54:0F:7D:DF:43:78:51
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 7271C1CC46D8E9D45AAC86F6A88C89EF600D3FFD
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33362e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 08 Jul 2026 01:53:17 +0000
ROA not before: Wed 08 Jul 2026 01:48:17 +0000
ROA not after: Wed 07 Jul 2027 01:53:17 +0000
asID: 152179
IP address blocks: 194.246.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 03:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:71:c1:cc:46:d8:e9:d4:5a:ac:86:f6:a8:8c:89:ef:60:0d:3f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Jul 8 01:48:17 2026 GMT
Not After : Jul 7 01:53:17 2027 GMT
Subject: CN=71D1E0272A8E2FA7D9BC85FFFD540F7DDF437851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7a:e4:cb:be:fc:37:6b:20:44:33:45:a5:c2:
6d:72:5c:61:a2:a0:7b:7a:03:f3:24:0e:4f:71:17:
7d:3e:4b:bd:cd:2f:4d:f3:02:6b:e4:34:7b:2b:c5:
83:7a:fd:db:0f:c7:30:ec:0f:b3:16:37:95:b5:6e:
95:42:cf:b9:fb:0e:e5:ad:7f:f6:36:b5:5a:52:ee:
eb:31:af:c7:b9:c9:1c:09:7f:aa:fe:f3:43:81:8b:
f5:bf:1e:a9:a4:84:28:04:39:d7:13:aa:8e:c7:b5:
55:90:68:0a:c6:c7:06:25:4e:f0:c6:dd:11:ac:88:
09:54:b5:6f:91:27:74:a7:d0:fb:a3:79:17:dd:57:
25:dc:78:04:e0:f0:8f:f1:b7:68:b1:92:f3:14:ff:
dd:58:5a:c1:ee:e0:70:2a:4c:e8:bf:58:ba:9d:97:
92:49:40:da:94:71:a9:e1:67:4d:11:ee:7d:99:b0:
44:ae:5b:f8:53:ff:25:86:9b:f6:62:78:41:b3:01:
b0:e8:d7:bc:eb:53:dd:54:ad:d5:59:70:e6:35:b3:
c6:e1:1e:75:bf:9e:72:d7:96:e3:fe:4b:1e:19:76:
00:48:f1:35:55:6d:99:a2:27:a3:34:97:8c:b7:e5:
f0:32:7d:0c:05:ad:9e:ab:3b:e6:fe:eb:08:40:ed:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:E0:27:2A:8E:2F:A7:D9:BC:85:FF:FD:54:0F:7D:DF:43:78:51
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33362e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4a:7f:dc:8f:4d:48:cb:80:e5:87:26:21:43:f2:d9:74:65:
41:42:2c:ae:1a:ce:74:61:5e:ee:f0:34:19:e9:ec:09:fb:0f:
7a:1e:8b:03:77:91:01:74:5f:5e:aa:ab:cf:24:82:3a:03:bb:
8c:3b:c6:93:20:ad:df:65:ff:60:2f:8c:b9:ef:c6:07:69:05:
76:a6:c0:08:a9:dd:6b:ba:ce:e7:d4:f8:4f:16:c9:fb:79:c0:
d2:9f:fc:4b:b8:89:ba:18:1d:6a:ec:ec:1e:e6:74:9c:5e:46:
88:07:e4:21:ed:34:fe:50:08:e0:5b:4d:46:cb:66:35:49:e2:
32:1a:4b:1c:dd:78:cd:7e:f0:2b:e7:fd:01:b6:91:87:40:af:
4b:33:78:50:2a:52:ce:d2:f9:f8:43:72:48:05:77:0c:b4:4d:
1f:4d:36:06:23:07:ae:c2:85:52:22:60:1f:e7:4d:70:bc:a1:
90:74:7e:07:7e:de:76:e4:35:1a:9a:05:00:9f:12:4e:81:d6:
73:04:9d:8d:a6:a7:ad:ba:2f:e7:e4:f8:62:e6:20:41:a5:6a:
4d:cd:2c:bd:89:22:86:f7:6f:1a:95:76:61:50:bb:f1:b9:95:
bd:e0:8d:3b:2f:41:d9:a1:71:84:aa:f6:a4:46:a9:4a:36:5e:
4d:3b:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:16:53 2026 by rpki-client