Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e20313336383039.roa
File: 3139342e33342e3235322e302f32342d3234203d3e20313336383039.roa (raw, json)
Hash identifier: XHWQTvXywb/B3yODnHeVZnFxpLfRipQMZQAmXJSkaRU=
Subject key identifier: A4:AA:48:E5:3D:6A:3A:DE:60:2E:DA:FC:07:79:DB:72:C0:D1:38:4A
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 76BE5826A6EC18E5CAFBA665217C408D98CAE3F9
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e20313336383039.roa
Signing time: Sun 25 Oct 2026 04:42:54 +0000
ROA not before: Sun 25 Oct 2026 04:37:54 +0000
ROA not after: Sun 24 Oct 2027 04:42:54 +0000
asID: 136809
IP address blocks: 194.34.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:be:58:26:a6:ec:18:e5:ca:fb:a6:65:21:7c:40:8d:98:ca:e3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Oct 25 04:37:54 2026 GMT
Not After : Oct 24 04:42:54 2027 GMT
Subject: CN=A4AA48E53D6A3ADE602EDAFC0779DB72C0D1384A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:4f:9c:9f:9a:03:f6:6d:7b:fb:62:20:b1:
92:cf:cc:17:9a:d8:2c:25:39:55:a2:cb:8e:1e:0b:
dd:ab:e9:89:fa:1d:0a:8e:4c:3e:19:4c:74:b9:06:
a1:ea:e0:91:72:03:93:f1:d5:b9:e7:3a:47:41:1a:
ff:d3:b6:19:01:2b:d0:c6:ec:8c:1e:f6:8e:fc:e3:
9a:ea:30:27:22:55:3b:a1:53:18:15:f5:85:b9:7a:
b3:41:05:7a:d6:e9:e1:7b:c7:a3:12:ae:63:6b:c9:
7b:fe:94:cd:4f:e4:ee:e9:78:f2:99:5e:3e:5a:b0:
af:ef:c7:23:74:86:b6:d8:47:81:3f:7f:72:bc:33:
4a:b7:03:38:44:3a:a2:67:1b:6f:d6:25:3f:34:9d:
f6:42:b3:7f:c0:39:84:86:4e:0b:ec:2b:7c:77:a8:
1f:77:11:c3:53:42:02:17:ce:35:ed:ee:e4:b8:1d:
48:b0:4f:fd:d9:0c:f1:c3:32:88:1e:97:2b:22:48:
5e:ed:80:67:02:b7:e2:b4:5d:fb:db:61:3e:1e:18:
0f:53:43:b9:af:1c:de:78:50:35:9a:54:2f:84:8d:
32:81:b6:af:62:f8:43:01:0c:e2:ea:ca:b0:eb:27:
01:02:0f:94:81:ef:60:e1:49:5b:71:59:9b:0b:73:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AA:48:E5:3D:6A:3A:DE:60:2E:DA:FC:07:79:DB:72:C0:D1:38:4A
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e20313336383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.252.0/24
Signature Algorithm: sha256WithRSAEncryption
26:68:db:eb:9c:b7:4e:f0:7a:a9:85:57:3d:fd:98:d8:f0:63:
30:04:58:19:d6:37:ad:d9:a4:0f:cd:02:95:37:7d:cc:b8:e7:
f1:2e:b4:d8:6c:84:2d:dd:3d:91:b1:cd:0e:ae:15:5e:0c:76:
f1:f6:09:40:7f:5e:8c:22:9e:96:67:2e:07:b3:cc:73:96:f1:
11:78:3c:5f:22:8d:ba:2a:08:6e:e2:8d:b5:d2:5b:a1:b3:a6:
8b:d6:90:c5:55:db:0f:50:bb:a8:56:b9:aa:06:9e:f5:81:c5:
c5:a9:76:cf:dc:ed:0f:ba:17:ca:53:86:e5:60:30:2b:99:f7:
04:1d:1d:e4:66:22:eb:7f:6b:01:db:84:0f:1e:8e:90:15:72:
2d:2a:09:1a:20:6b:1e:22:a9:17:c3:d4:05:de:08:c8:f2:99:
79:e7:10:28:c3:f6:33:da:0b:21:1d:b9:09:7c:21:5c:7c:63:
52:42:ba:3f:af:b9:50:6b:ea:60:53:52:3d:5f:b8:8e:ee:f1:
bf:a6:ee:69:e9:d1:48:eb:e0:1d:6f:22:7a:f2:89:da:e1:73:
40:65:46:9d:c9:95:6f:db:af:8b:de:5b:10:04:2b:e3:7e:cf:
67:1a:8d:db:6c:e7:9c:2d:95:ec:80:ad:d9:26:57:36:c5:51:
d2:6b:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:45:13 2026 by rpki-client