Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33372e302f32342d3234203d3e20313437323831.roa
File: 3139342e3234362e33372e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: Je8vOuvO8vmi0C+HW9/2FSLCLUlPSQcN2eHpx1G3DXw=
Subject key identifier: 0B:66:5D:34:4B:A8:08:DA:3C:D4:A6:91:28:76:F8:38:CD:62:CF:E7
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 59694E7B34310080C971AA743F2A9353B4EF669D
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33372e302f32342d3234203d3e20313437323831.roa
Signing time: Tue 25 Aug 2026 18:19:40 +0000
ROA not before: Tue 25 Aug 2026 18:14:40 +0000
ROA not after: Tue 24 Aug 2027 18:19:40 +0000
asID: 147281
IP address blocks: 194.246.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:69:4e:7b:34:31:00:80:c9:71:aa:74:3f:2a:93:53:b4:ef:66:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Aug 25 18:14:40 2026 GMT
Not After : Aug 24 18:19:40 2027 GMT
Subject: CN=0B665D344BA808DA3CD4A6912876F838CD62CFE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:70:4c:b2:15:60:f9:95:7c:bb:dd:10:2e:
42:d6:db:79:f8:b7:44:6c:01:05:70:5b:e4:89:f5:
16:e9:cb:4d:29:de:2c:66:a6:21:a7:49:40:3e:3e:
13:3d:97:18:00:c2:a3:27:0c:cf:2e:f7:04:b0:b5:
26:99:27:4f:57:7d:d3:80:b7:d4:c9:fc:74:ab:a3:
06:b6:c3:2f:96:88:7e:c6:28:33:0d:e0:1c:9d:b7:
5a:a3:a1:e4:ee:84:33:64:cf:ac:2b:c9:fb:4d:a5:
d9:a4:06:2a:7a:f8:5b:7e:bb:71:fd:55:89:24:51:
83:24:96:3d:df:09:50:db:11:ad:93:3f:63:48:4a:
d0:65:21:50:a0:82:48:18:30:70:c5:eb:4d:c6:d3:
df:6a:42:f9:13:6b:a4:98:e5:3f:3d:06:d5:5e:cb:
2b:ab:38:37:7a:44:3c:91:b1:0a:c5:83:eb:10:6a:
a0:8c:5d:e7:5c:7a:3c:90:83:13:fa:5d:6d:3a:e6:
09:99:84:2a:14:bf:ee:30:87:a7:15:2e:9a:fb:ee:
1a:ea:2a:f8:75:42:37:a1:f5:20:cf:46:f7:95:a7:
f4:86:3c:80:e0:91:52:3d:9d:32:dc:e7:0a:cd:87:
00:85:f1:09:a1:0d:75:1b:87:be:63:bf:40:e8:35:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:5D:34:4B:A8:08:DA:3C:D4:A6:91:28:76:F8:38:CD:62:CF:E7
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33372e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f8:87:94:87:32:09:56:ba:54:d7:d3:55:5a:f2:ab:63:c1:
3a:58:b0:b9:a8:c1:14:8b:3b:34:c7:b7:d3:92:5a:54:e3:69:
3a:0d:ba:d0:96:a8:a3:d6:3f:9e:c8:24:ea:23:16:aa:7e:f0:
25:4a:28:52:39:1b:98:4f:3a:1e:07:78:2d:30:b1:ac:48:12:
72:dc:a3:e4:a5:12:af:e4:52:51:bf:87:1c:bc:82:54:95:4a:
7a:23:92:d8:22:67:27:16:ae:1d:ce:e0:ca:3d:0c:a2:18:c7:
e1:04:9f:a0:50:c5:bc:0d:b9:bd:d7:7d:19:97:b2:d1:b6:86:
0e:d2:29:90:9d:18:48:90:72:25:14:ea:59:19:7f:df:37:06:
cf:ce:9c:88:4f:5a:91:d9:fd:46:92:d5:53:43:29:55:c4:56:
9a:96:d7:13:0a:e9:09:d1:50:1a:d3:87:b4:e6:85:f4:c9:df:
8a:96:20:74:6a:10:e0:7e:6a:0b:6a:5b:b7:cb:2f:32:43:59:
0d:9d:49:35:90:49:62:08:41:b2:81:f6:42:69:a9:6d:01:10:
57:2b:ab:c4:f8:e7:4f:37:63:8c:ad:31:2b:d7:92:1c:b0:25:
41:ea:c3:2b:8b:ad:4f:57:1e:28:43:8e:15:5d:39:86:18:4a:
ee:1e:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:58 2026 by rpki-client