Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/3139352e39352e3134392e302f32342d3234203d3e203236393534.roa
File: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (raw, json)
Hash identifier: wrTYL7mb+1quCshY5bvucyyFtZsLGfBb+j95uYXZhYI=
Subject key identifier: E7:07:3E:A3:33:C3:C0:6C:D8:67:90:85:6D:2B:9C:16:29:50:1A:92
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 3507E7BDFB95C8BFF7D344E244BFE2EC4B1E7AFD
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/3139352e39352e3134392e302f32342d3234203d3e203236393534.roa
Signing time: Tue 30 Jun 2026 14:31:41 +0000
ROA not before: Tue 30 Jun 2026 14:26:41 +0000
ROA not after: Tue 29 Jun 2027 14:31:41 +0000
asID: 26954
IP address blocks: 195.95.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:07:e7:bd:fb:95:c8:bf:f7:d3:44:e2:44:bf:e2:ec:4b:1e:7a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Jun 30 14:26:41 2026 GMT
Not After : Jun 29 14:31:41 2027 GMT
Subject: CN=E7073EA333C3C06CD86790856D2B9C1629501A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:ca:c9:e7:3a:a8:9d:25:d1:32:99:d6:57:
f2:e0:46:9a:6f:98:9f:ea:fd:30:9d:8e:5b:88:b5:
93:35:d3:63:9f:e3:97:c7:87:89:08:b4:25:dd:c5:
5f:62:9b:53:eb:f3:bb:db:29:82:f5:51:dc:34:d9:
9d:b7:6e:c7:66:52:49:b0:70:8b:26:4e:04:77:0e:
ab:f1:08:10:00:10:4a:df:63:38:01:79:06:9f:29:
02:4e:82:33:0c:12:0f:f2:98:ad:a3:92:0d:b2:4d:
21:03:87:5b:0e:a3:44:fc:89:af:0d:4d:11:c9:97:
c5:c5:be:7b:fe:bc:b6:45:34:96:fc:dc:d4:8c:3a:
22:65:ef:d1:de:a5:ee:ce:03:70:7a:9e:b2:96:16:
55:61:fd:c8:a8:fe:58:8a:dc:2b:c2:22:7f:e4:fa:
61:af:bc:9d:3e:3d:82:ee:11:cc:15:c0:f2:4f:25:
1f:82:93:30:39:c7:a0:88:f9:f6:04:77:d0:0b:ed:
90:7d:f0:95:28:37:1e:69:c6:f9:15:0b:a9:4b:95:
3c:f6:4a:59:95:76:0b:b4:1b:8b:d6:8a:6d:28:29:
14:97:01:16:93:a9:f0:76:84:52:cc:2e:be:f6:5f:
f4:22:f6:41:38:0f:6e:9d:9e:20:95:1d:1d:5c:07:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:07:3E:A3:33:C3:C0:6C:D8:67:90:85:6D:2B:9C:16:29:50:1A:92
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/3139352e39352e3134392e302f32342d3234203d3e203236393534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.149.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:5c:d8:89:c6:65:e7:4a:36:36:b0:20:43:ac:3f:ef:6b:9d:
24:3c:8f:ba:a2:df:77:02:eb:53:d3:64:b3:c7:72:9e:6b:73:
29:92:b6:0f:fd:2f:9b:c5:14:f8:1d:b2:f3:da:8b:48:43:81:
43:e3:c7:64:5f:50:a8:0f:0b:e4:60:5a:67:3d:fc:33:fc:f4:
06:e3:65:0c:ee:55:4e:04:60:a5:ba:4d:5d:8e:94:51:c9:a6:
c0:ac:e2:e7:32:4e:b0:bb:ff:11:d1:ba:95:a8:73:7c:f9:1b:
fc:66:4c:4c:9b:a8:04:55:b9:43:ac:0c:96:ed:e5:9d:4e:79:
87:30:fa:3e:20:4e:24:03:ba:f6:12:9d:31:92:60:97:4a:dc:
d5:fb:b3:1b:48:f9:47:d1:ed:0a:94:e3:ed:f0:a2:15:d4:d4:
fa:ec:a3:27:ad:d7:e3:a1:3d:2f:b4:a9:5f:f8:99:05:cc:05:
b1:96:a6:f3:0d:99:51:66:93:d5:c5:27:d8:95:c6:8a:60:f4:
de:b0:1b:b9:32:00:83:83:e8:9c:7d:f8:9b:88:b0:39:23:83:
7d:e6:78:68:fc:88:04:3b:0b:7f:bc:1b:6b:13:9f:3c:58:52:
00:53:b2:17:4a:d1:81:84:40:48:29:4c:f9:99:23:65:f7:86:
cd:46:48:d6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUNQfnvfuVyL/300TiRL/i7Eseev0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi
ZjNhODA1NzAeFw0yNjA2MzAxNDI2NDFaFw0yNzA2MjkxNDMxNDFaMDMxMTAvBgNV
BAMTKEU3MDczRUEzMzNDM0MwNkNEODY3OTA4NTZEMkI5QzE2Mjk1MDFBOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDO8rJ5zqonSXRMpnWV/LgRppv
mJ/q/TCdjluItZM102Of45fHh4kItCXdxV9im1Pr87vbKYL1Udw02Z23bsdmUkmw
cIsmTgR3DqvxCBAAEErfYzgBeQafKQJOgjMMEg/ymK2jkg2yTSEDh1sOo0T8ia8N
TRHJl8XFvnv+vLZFNJb83NSMOiJl79Hepe7OA3B6nrKWFlVh/cio/liK3CvCIn/k
+mGvvJ0+PYLuEcwVwPJPJR+CkzA5x6CI+fYEd9AL7ZB98JUoNx5pxvkVC6lLlTz2
SlmVdgu0G4vWim0oKRSXARaTqfB2hFLMLr72X/Qi9kE4D26dniCVHR1cB2xxAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU5wc+ozPDwGzYZ5CFbSucFilQGpIwHwYDVR0j
BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx
NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4
NmdGYy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEt
OGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvMzEzOTM1MmUzOTM1MmUzMTM0
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzNTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
w1+VMA0GCSqGSIb3DQEBCwUAA4IBAQCyXNiJxmXnSjY2sCBDrD/va50kPI+6ot93
AutT02Szx3Kea3MpkrYP/S+bxRT4HbLz2otIQ4FD48dkX1CoDwvkYFpnPfwz/PQG
42UM7lVOBGCluk1djpRRyabArOLnMk6wu/8R0bqVqHN8+Rv8ZkxMm6gEVblDrAyW
7eWdTnmHMPo+IE4kA7r2Ep0xkmCXStzV+7MbSPlH0e0KlOPt8KIV1NT67KMnrdfj
oT0vtKlf+JkFzAWxlqbzDZlRZpPVxSfYlcaKYPTesBu5MgCDg+icffibiLA5I4N9
5nho/IgEOwt/vBtrE588WFIAU7IXStGBhEBIKUz5mSNl94bNRkjW
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:46 2026 by rpki-client