Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa
File: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (raw, json)
Hash identifier: a0Ek779jWidO7GQD9NTwKLJ9ubCa4GWeB3JTADIV10M=
Subject key identifier: 4F:1A:1A:B6:E1:54:AF:79:11:0E:23:19:5B:71:3F:E3:85:3A:55:82
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 0F6FB2C9568BDE4DBC0944DDD51C8170D58F71DE
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa
Signing time: Tue 20 Oct 2026 19:49:37 +0000
ROA not before: Tue 20 Oct 2026 19:44:37 +0000
ROA not after: Tue 19 Oct 2027 19:49:37 +0000
asID: 137517
IP address blocks: 194.247.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 16:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6f:b2:c9:56:8b:de:4d:bc:09:44:dd:d5:1c:81:70:d5:8f:71:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Oct 20 19:44:37 2026 GMT
Not After : Oct 19 19:49:37 2027 GMT
Subject: CN=4F1A1AB6E154AF79110E23195B713FE3853A5582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:75:ba:cd:7a:6a:71:9a:a3:f6:6f:96:02:
55:22:b3:a9:08:c0:b3:14:83:e2:dc:0b:03:6f:bf:
be:43:98:95:22:48:b4:60:8a:6e:38:8f:94:68:8c:
81:a9:7d:56:05:8f:83:0e:f8:7d:93:ed:d0:3b:cb:
b4:b6:3f:24:5b:a5:f0:af:b1:2b:12:84:fc:f9:f2:
28:0e:c7:2f:0c:ea:cd:c1:c4:e8:a2:4b:83:7e:89:
ad:8d:e1:40:f1:8e:f7:4a:50:f2:f3:ec:b1:28:cc:
ff:91:4d:20:85:ab:5b:88:74:70:f2:25:1f:08:ec:
2e:cb:75:d7:df:ca:a1:06:57:a5:d3:de:aa:fa:4c:
a1:df:c5:d1:b2:4b:38:3d:f5:04:bf:ab:6b:95:d6:
9d:ca:76:eb:d0:b1:14:a0:6e:99:41:52:3b:65:84:
2d:4e:70:4f:6d:0e:64:51:da:fc:ec:12:01:89:53:
14:6d:33:d3:19:55:42:c1:8f:6e:5b:5f:d5:4f:61:
ab:9c:37:2c:4a:ea:a2:af:71:f5:4b:6c:26:0a:ab:
96:aa:2f:41:c2:e0:18:35:0c:33:b0:c7:9f:d0:57:
f6:d5:b6:c9:73:d2:63:6d:92:e3:a7:95:b8:a2:fe:
b1:48:77:21:20:85:9e:c0:81:a8:3f:41:51:26:0a:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1A:1A:B6:E1:54:AF:79:11:0E:23:19:5B:71:3F:E3:85:3A:55:82
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.45.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c7:54:36:cd:27:07:c4:43:76:43:53:ef:84:7c:d1:05:93:
cb:e4:f1:18:90:4e:3f:8a:ca:39:a9:e5:2c:e9:b4:75:5b:fa:
b0:86:17:c3:22:73:ef:b0:8f:ce:a4:63:67:65:55:29:84:86:
5b:b8:de:64:9f:4d:2d:54:77:96:de:9f:db:18:62:af:0d:6a:
d7:56:8f:96:51:8f:78:44:89:93:54:03:58:38:69:52:87:9f:
8b:be:56:89:a7:ca:85:ff:d4:97:97:29:77:1d:04:3e:0a:be:
e2:f3:4d:bb:20:41:ae:72:41:96:85:22:ef:ed:42:f5:b4:82:
36:76:9a:af:6f:8c:f9:0e:fa:d4:25:bc:c9:56:09:a3:c3:74:
a3:1e:e5:fe:aa:cc:0e:51:1a:bc:c4:af:d7:b4:c8:ce:d9:42:
a7:69:aa:71:6c:31:fd:47:3b:e9:e4:db:02:e5:86:fb:cb:d3:
71:bd:2f:84:51:31:ec:08:0b:54:4f:68:4b:84:38:86:28:51:
0d:b0:65:c6:6b:43:c0:ce:52:dc:c6:b1:6a:e7:eb:83:5a:89:
98:b6:0a:06:ac:7e:4f:24:69:68:5c:87:fe:c8:7a:e2:79:30:
18:04:eb:35:45:e7:9e:a2:d2:e2:ec:ee:ad:13:ca:06:68:56:
c5:40:bd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:34:17 2026 by rpki-client