Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/3133392e3136352e39322e302f32342d3234203d3e20323139303735.roa
File: 3133392e3136352e39322e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: e4SNlAD7nagllFSqRv6JdbJFUH3EdBhUiO7XdcaaHso=
Subject key identifier: C6:65:B1:C9:64:CF:33:35:51:9A:A9:D4:EA:E4:FB:DB:95:47:38:BC
Certificate issuer: /CN=87167c38252ee930526e913bd0f8b73561b56ee3
Certificate serial: 4C7A1301FDF075E201DFD9A3543A172998DF97EB
Authority key identifier: 87:16:7C:38:25:2E:E9:30:52:6E:91:3B:D0:F8:B7:35:61:B5:6E:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/3133392e3136352e39322e302f32342d3234203d3e20323139303735.roa
Signing time: Fri 23 Oct 2026 09:25:32 +0000
ROA not before: Fri 23 Oct 2026 09:20:32 +0000
ROA not after: Fri 22 Oct 2027 09:25:32 +0000
asID: 219075
IP address blocks: 139.165.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.crl
rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:7a:13:01:fd:f0:75:e2:01:df:d9:a3:54:3a:17:29:98:df:97:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87167c38252ee930526e913bd0f8b73561b56ee3
Validity
Not Before: Oct 23 09:20:32 2026 GMT
Not After : Oct 22 09:25:32 2027 GMT
Subject: CN=C665B1C964CF3335519AA9D4EAE4FBDB954738BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:40:74:bb:7d:ad:64:20:a0:fe:06:1c:c6:
0f:90:3d:4d:1c:12:f0:b5:8a:bc:37:b1:8f:3a:e4:
69:40:a9:8a:e6:fb:d7:eb:6e:27:a1:f7:30:b2:e3:
df:cb:70:8c:8e:57:8d:fb:23:cd:00:6d:1c:fe:9c:
1d:9f:80:f9:ec:fe:50:a9:30:60:c9:81:82:46:ea:
e3:cf:ce:12:9f:82:b4:f0:1b:59:74:30:f4:35:66:
38:21:1f:e0:07:9c:64:cb:b6:50:01:14:f4:36:07:
45:0d:c9:d3:dc:89:4d:ae:80:8a:dd:2a:ed:fb:8f:
18:55:71:a3:3e:4d:ac:64:f9:e6:be:6a:a3:f0:be:
db:02:bd:17:8d:c2:db:29:2b:6b:2b:05:30:b3:0f:
04:9e:51:4c:12:55:6b:6d:88:bf:fb:a1:82:0a:c5:
56:4c:40:ff:fa:44:4c:9a:f1:d5:93:8f:57:a1:f2:
49:82:26:b7:17:b7:7c:b0:a6:91:1a:98:49:a8:5a:
4d:83:3f:c5:63:c2:ee:5e:61:37:1a:c5:26:a0:fb:
2e:30:67:7e:78:9e:2f:fb:df:88:d2:1d:70:99:d2:
97:a2:41:84:28:f6:ca:a7:8d:16:2e:a1:22:e5:62:
01:c1:bc:09:f8:d8:55:f9:86:d8:6e:46:69:aa:c8:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:B1:C9:64:CF:33:35:51:9A:A9:D4:EA:E4:FB:DB:95:47:38:BC
X509v3 Authority Key Identifier:
keyid:87:16:7C:38:25:2E:E9:30:52:6E:91:3B:D0:F8:B7:35:61:B5:6E:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/3133392e3136352e39322e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.165.92.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c8:f5:e4:00:25:b5:a8:57:e9:43:f6:7a:f3:11:43:75:e2:
43:4b:8d:ba:36:da:61:4e:1b:9f:bd:3e:db:b6:13:38:1c:6a:
c4:e7:17:65:c6:06:5d:2a:a3:38:e9:b4:ce:cf:ca:fd:72:0b:
3d:ac:59:16:8e:80:0d:8d:58:a8:7b:d1:f8:06:35:79:2f:bd:
7b:28:0c:88:08:17:f3:9b:a4:de:ec:1d:26:d7:ed:4d:60:1f:
ca:59:ae:c3:0c:a8:fb:30:42:59:ad:4a:e9:90:0e:f8:7e:a1:
c3:4b:63:b7:b6:62:9d:f0:fe:b8:25:19:06:06:f0:fc:cc:7e:
a1:c2:34:e9:34:0e:71:4a:09:73:a2:c8:1f:57:ff:b1:ab:8b:
e7:a4:7a:73:c6:7c:88:d8:18:e2:55:0a:ac:47:f0:98:3e:84:
c7:ce:48:cf:7e:c9:cd:44:e7:3a:14:11:f3:44:b7:f1:ef:83:
c6:a5:b6:21:eb:3e:4a:c0:a2:d2:88:be:92:1d:56:88:de:da:
17:ce:f5:11:dd:33:3f:49:5d:21:42:74:01:a1:d3:8e:6c:20:
a1:36:c2:24:ee:b8:d8:07:09:31:3d:dd:ba:a0:00:82:4d:8c:
9a:fc:a3:80:95:13:2e:fe:cd:d9:e9:50:29:f1:0a:7f:23:8d:
0b:54:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:57 2026 by rpki-client