Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/3133392e3136352e39322e302f32342d3234203d3e20323138393131.roa
File: 3133392e3136352e39322e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: YkiFXlU5mCcaCQsjC89fz+PEjoMrv3IU+70ODsQdAIs=
Subject key identifier: BA:59:8F:57:DE:14:6A:C5:DD:8A:39:57:8F:FB:74:BB:04:B9:C1:86
Certificate issuer: /CN=87167c38252ee930526e913bd0f8b73561b56ee3
Certificate serial: 664575808A2F953370770462939C3FD19036E098
Authority key identifier: 87:16:7C:38:25:2E:E9:30:52:6E:91:3B:D0:F8:B7:35:61:B5:6E:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/3133392e3136352e39322e302f32342d3234203d3e20323138393131.roa
Signing time: Fri 23 Oct 2026 09:25:32 +0000
ROA not before: Fri 23 Oct 2026 09:20:32 +0000
ROA not after: Fri 22 Oct 2027 09:25:32 +0000
asID: 218911
IP address blocks: 139.165.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.crl
rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 19:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:45:75:80:8a:2f:95:33:70:77:04:62:93:9c:3f:d1:90:36:e0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87167c38252ee930526e913bd0f8b73561b56ee3
Validity
Not Before: Oct 23 09:20:32 2026 GMT
Not After : Oct 22 09:25:32 2027 GMT
Subject: CN=BA598F57DE146AC5DD8A39578FFB74BB04B9C186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:9d:e2:b2:3b:29:22:27:b6:40:d6:d6:c8:
51:73:10:6d:51:22:3d:5f:8d:89:14:d7:be:12:05:
94:50:54:9f:8f:e9:1f:92:a6:13:46:05:a3:bd:35:
ea:85:bd:a1:eb:21:cd:0d:b5:57:ab:8c:76:af:d8:
e1:87:53:66:56:a2:64:61:2d:68:06:6a:7c:13:eb:
50:13:1c:f5:e3:c4:6a:34:5e:c2:6c:95:6f:6d:b5:
30:00:ca:b2:eb:54:f1:ec:9f:b2:e0:64:e1:8b:48:
42:55:9f:3a:b1:60:d5:7f:7e:ea:00:15:aa:88:85:
49:9f:ae:5d:e8:6c:36:53:ad:d2:2b:a3:35:7a:d6:
10:9a:5f:6c:03:ef:1e:62:fd:9f:2f:b4:fe:5a:4c:
e1:1e:68:49:ad:26:4c:f5:c0:d1:9d:aa:d2:86:87:
6c:c7:a9:72:60:10:8f:17:57:74:5c:3b:b4:6c:a5:
7c:82:2b:71:59:dd:4d:99:9e:66:d1:c7:30:71:73:
a4:1d:87:07:3d:e0:85:5e:72:24:3f:1f:9f:8c:68:
7a:b3:e8:28:a6:89:3f:a7:80:b4:a9:3c:fa:04:1d:
29:f7:4b:3e:11:80:55:31:f1:a7:70:9d:b7:19:9e:
a2:a3:91:54:07:f1:7d:61:2d:56:77:1a:f4:ce:a7:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:59:8F:57:DE:14:6A:C5:DD:8A:39:57:8F:FB:74:BB:04:B9:C1:86
X509v3 Authority Key Identifier:
keyid:87:16:7C:38:25:2E:E9:30:52:6E:91:3B:D0:F8:B7:35:61:B5:6E:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/3133392e3136352e39322e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.165.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4f:5e:7d:2b:6f:88:1f:8b:4b:b7:7c:81:70:3e:9b:a7:a7:
2c:1d:53:0e:10:db:da:d4:5d:38:16:da:9a:36:08:53:ad:7b:
e4:1b:4b:ec:55:e3:b4:c1:6f:8f:a9:6f:9d:2c:87:bc:eb:a0:
4f:52:d5:27:ff:36:2c:95:65:0b:19:30:d3:e0:05:de:d2:e8:
cd:40:c0:3b:13:4f:52:79:3c:3f:51:2c:c7:b9:64:5e:ff:1b:
b4:3b:34:65:4e:ce:43:41:51:da:1a:d4:2a:01:47:63:dc:b1:
63:97:e9:20:06:0d:6e:2f:38:3a:bd:6a:f1:7a:45:f0:31:00:
c8:93:a8:90:64:a0:8f:d0:0f:d5:45:38:e0:09:15:f8:56:d3:
5d:4b:3c:bb:17:a4:de:b2:cd:20:a8:57:08:71:8c:30:42:5d:
a7:4f:c9:40:81:f9:89:e8:8e:40:75:b4:57:03:12:df:11:6b:
68:9a:5b:22:7b:d5:f6:13:86:2f:23:80:a2:e9:96:04:d9:c5:
73:20:a9:1d:33:4f:c5:95:c5:5a:82:a9:65:19:eb:3d:73:43:
55:80:59:20:72:d5:70:fb:47:b1:97:0c:72:06:51:0d:e3:24:
80:39:eb:09:b3:6c:8b:e8:a6:5b:cd:e3:e1:ea:90:81:4a:a3:
0f:80:36:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:05 2026 by rpki-client