Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3132382e302f32342d3234203d3e20313938353636.roa
File: 3139352e35382e3132382e302f32342d3234203d3e20313938353636.roa (raw, json)
Hash identifier: p5TwbqVvtx7bcugfEqi9yXckarK7U3e6W3yyzLtcxaU=
Subject key identifier: DB:A8:1F:A8:7B:BB:5F:A1:18:00:D2:C9:FA:52:3A:7D:3D:DC:F6:FD
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 47080F427276F140913AC784E637E8A154708F9B
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3132382e302f32342d3234203d3e20313938353636.roa
Signing time: Fri 02 Oct 2026 19:24:15 +0000
ROA not before: Fri 02 Oct 2026 19:19:15 +0000
ROA not after: Fri 01 Oct 2027 19:24:15 +0000
asID: 198566
IP address blocks: 195.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:08:0f:42:72:76:f1:40:91:3a:c7:84:e6:37:e8:a1:54:70:8f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Oct 2 19:19:15 2026 GMT
Not After : Oct 1 19:24:15 2027 GMT
Subject: CN=DBA81FA87BBB5FA11800D2C9FA523A7D3DDCF6FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:e5:34:7a:d3:8b:aa:7b:d0:8f:ae:a6:32:
70:7b:f5:d7:97:32:16:95:ba:98:f8:90:26:1d:6e:
b2:f6:d3:db:12:35:79:07:df:e0:72:55:44:c8:97:
f6:87:78:8f:0c:ab:26:e8:f9:90:47:9a:54:57:30:
ee:51:78:81:5b:52:4e:64:06:8c:56:83:ce:46:ed:
fe:bb:34:63:e1:9f:7b:a3:b8:5a:63:c5:49:1c:8b:
fc:cf:5b:7f:fe:12:8c:f0:d8:8a:77:bb:80:1a:32:
d8:3c:1b:4b:e2:7d:8d:a7:36:84:57:9b:15:d7:21:
f1:5c:ca:29:af:9e:61:65:c4:b1:84:07:5b:11:5c:
9d:48:f3:c5:6b:f3:bd:6a:ec:22:a4:03:b6:d9:d5:
fc:84:fd:db:2d:1f:fa:fa:26:97:b7:a6:f3:bc:1d:
8e:32:52:0c:e0:a9:ac:a2:14:26:9a:17:0a:e4:c0:
16:07:11:34:52:70:eb:f3:69:c1:14:2d:fa:b8:16:
88:1d:1a:80:c6:53:2d:f2:5c:65:11:27:61:95:40:
08:8a:d2:99:7b:5c:51:6d:b4:a2:a9:5b:d9:17:c4:
8d:83:3f:bc:84:1c:4e:39:da:0b:fe:ef:d1:de:55:
e1:ea:53:d8:65:94:c2:c7:0f:14:02:fa:2d:12:de:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A8:1F:A8:7B:BB:5F:A1:18:00:D2:C9:FA:52:3A:7D:3D:DC:F6:FD
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3132382e302f32342d3234203d3e20313938353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.128.0/24
Signature Algorithm: sha256WithRSAEncryption
96:8a:67:0b:f3:53:dd:0b:b7:cd:82:34:82:f7:45:9c:b7:6e:
34:6f:1c:a8:c1:a7:ce:57:ea:19:5e:41:0e:d8:77:44:3f:23:
6f:db:e7:b5:34:d8:5e:82:54:13:12:b6:25:38:80:b7:ed:2e:
07:e2:23:1e:2f:00:19:5a:a3:8e:84:69:a6:60:d4:ea:8e:01:
02:af:46:80:4e:f3:c6:a9:34:2c:64:40:5c:ef:c2:22:f0:ac:
23:69:90:74:e2:0a:c4:aa:4c:37:5a:dd:ca:93:44:0a:3b:13:
02:a8:21:f5:16:2a:09:56:96:b8:ff:65:af:93:a1:a3:61:e2:
77:5a:27:55:46:88:60:68:da:34:9c:83:57:55:cc:03:c4:91:
b8:44:ed:71:d9:f8:b9:e5:7e:fa:86:c5:cc:5d:a4:7c:65:d8:
09:5f:c6:dd:b3:5a:e3:c3:8f:f6:bb:4f:4c:5a:05:3f:5b:ff:
6f:4b:0e:b2:88:b1:b3:03:e3:48:30:d8:49:55:21:19:87:d2:
e7:30:60:a2:53:f0:3d:39:a2:f9:0b:3c:9c:7c:45:46:9b:95:
25:a0:01:04:d3:1c:c2:74:e7:53:34:46:6c:4d:97:de:1f:89:
d2:97:90:e6:88:58:aa:8b:bd:3b:7a:b4:01:ac:17:3e:09:f6:
26:f4:2f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:26 2026 by rpki-client