Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/3139332e35332e332e302f32342d3234203d3e2032363131.roa
File: 3139332e35332e332e302f32342d3234203d3e2032363131.roa (raw, json)
Hash identifier: PucYIiZ0INsikg7fKEJMCy9+AZTBpKaZoHRbzLsjXDM=
Subject key identifier: 4A:FD:E6:27:7C:E7:20:97:5D:FA:D9:9C:2F:65:50:23:9E:D6:7B:F5
Certificate issuer: /CN=87167c38252ee930526e913bd0f8b73561b56ee3
Certificate serial: 76245FD4AC046F19F0B7968023DC545F6277C5FB
Authority key identifier: 87:16:7C:38:25:2E:E9:30:52:6E:91:3B:D0:F8:B7:35:61:B5:6E:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/3139332e35332e332e302f32342d3234203d3e2032363131.roa
Signing time: Fri 23 Oct 2026 08:16:15 +0000
ROA not before: Fri 23 Oct 2026 08:11:15 +0000
ROA not after: Fri 22 Oct 2027 08:16:15 +0000
asID: 2611
IP address blocks: 193.53.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.crl
rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:24:5f:d4:ac:04:6f:19:f0:b7:96:80:23:dc:54:5f:62:77:c5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87167c38252ee930526e913bd0f8b73561b56ee3
Validity
Not Before: Oct 23 08:11:15 2026 GMT
Not After : Oct 22 08:16:15 2027 GMT
Subject: CN=4AFDE6277CE720975DFAD99C2F6550239ED67BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:8b:a0:77:78:b0:e9:f3:2c:67:5c:8f:a0:
13:6a:ed:0f:9d:d4:0b:65:5e:c7:26:8a:3a:1b:5f:
5d:67:02:4b:8f:ed:c9:73:ff:1e:1e:92:4b:83:0d:
01:aa:e1:ff:28:19:d7:34:ef:db:4f:2a:87:b5:61:
53:e2:e4:54:b3:29:03:ba:1c:62:80:68:f3:b5:6f:
82:71:65:1d:97:f4:1c:56:2d:de:2f:0e:a3:29:67:
36:2c:52:c8:57:28:75:b4:78:08:b4:c6:4a:cc:0f:
aa:17:90:c2:1d:57:5b:f1:f5:16:56:5f:bc:54:bb:
cb:c0:d3:c5:66:60:ed:bc:12:74:04:a0:98:19:0c:
4b:c7:c8:f3:b5:50:ce:a4:9a:ad:1c:9d:b2:ff:c5:
28:b4:d0:c0:76:82:62:35:52:46:2e:3d:34:ce:ed:
87:8b:65:c1:93:71:7a:f6:48:ec:20:05:9d:af:76:
05:94:8d:dc:59:82:a3:dc:ec:10:28:7f:ee:61:5c:
83:23:98:f7:8e:02:96:82:f3:a6:26:71:f2:6b:5b:
b8:e7:98:18:48:9f:6b:7b:6e:9e:ad:89:33:58:42:
be:75:5e:80:24:8c:6a:1e:a2:a5:cb:71:c3:a0:e5:
90:2b:fc:72:bb:bf:c2:ed:88:63:f9:64:73:38:4d:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FD:E6:27:7C:E7:20:97:5D:FA:D9:9C:2F:65:50:23:9E:D6:7B:F5
X509v3 Authority Key Identifier:
keyid:87:16:7C:38:25:2E:E9:30:52:6E:91:3B:D0:F8:B7:35:61:B5:6E:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/87167C38252EE930526E913BD0F8B73561B56EE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxZ8OCUu6TBSbpE70Pi3NWG1buM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/740c3684-9b99-40e0-9f71-31029aa7b228/0/3139332e35332e332e302f32342d3234203d3e2032363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:03:21:09:b8:5a:46:02:71:4f:cb:ea:f0:78:92:07:be:fc:
a4:fe:ae:31:8b:b8:61:ab:99:e0:08:d7:4c:cf:d9:db:61:95:
1e:14:5a:40:b3:ba:b7:f6:06:a1:58:3a:b2:1c:bb:32:d0:c9:
9d:7b:d6:d7:c7:a3:cf:3f:81:22:a5:20:fd:ec:12:85:d8:56:
ac:dc:5e:28:fa:af:6b:06:39:11:a4:92:ea:2f:a2:46:64:33:
60:af:f7:18:21:27:ab:6f:d5:21:67:9d:92:09:e7:25:ae:d2:
2b:cc:6e:65:b2:da:db:a0:5e:61:c6:85:b6:2a:38:12:27:5a:
62:72:45:1f:46:1b:7a:a3:d4:e5:67:dc:d6:cc:f2:f2:cc:05:
8a:2b:98:0b:ad:a9:31:2e:49:9f:41:3b:db:29:44:94:0b:20:
47:ee:8c:4c:f6:8a:dd:89:4f:5f:eb:0b:3b:78:17:4d:ae:6a:
a0:85:2a:8d:fe:64:3d:8a:26:a8:e2:ce:5e:73:38:4e:2e:bb:
2c:40:74:f1:56:bd:c8:cc:a9:1a:71:f3:d0:63:db:6e:e5:0e:
19:32:0a:d4:f3:09:b1:83:e1:bf:26:e9:49:b0:1a:b1:d6:15:
7e:70:89:f8:97:a2:ae:f7:c5:ae:11:48:67:24:0f:18:0b:a2:
9d:cd:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:07 2026 by rpki-client