Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3132382e302f32342d3234203d3e20343031333632.roa
File: 3139352e35382e3132382e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: oZIDin78KSd1nQ6wPY6/1AlT+zJLtIwqawCrAi9n3Fo=
Subject key identifier: 10:2D:91:23:33:4B:C0:89:21:EB:38:6F:9C:EB:D7:34:1B:54:BF:72
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 0AF1F0F23F29B7F348CD19E3F40F079E6F551145
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3132382e302f32342d3234203d3e20343031333632.roa
Signing time: Sun 30 Aug 2026 11:38:25 +0000
ROA not before: Sun 30 Aug 2026 11:33:25 +0000
ROA not after: Sun 29 Aug 2027 11:38:25 +0000
asID: 401362
IP address blocks: 195.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f1:f0:f2:3f:29:b7:f3:48:cd:19:e3:f4:0f:07:9e:6f:55:11:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Aug 30 11:33:25 2026 GMT
Not After : Aug 29 11:38:25 2027 GMT
Subject: CN=102D9123334BC08921EB386F9CEBD7341B54BF72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:21:89:5d:06:85:22:9c:20:eb:97:69:66:
89:10:ae:57:f2:b4:1d:85:5f:49:38:19:85:ff:02:
a6:6c:4d:4d:be:30:23:0a:f1:9c:cc:2a:3b:31:df:
df:7e:c4:99:e2:9c:fd:18:13:3c:8f:4f:4b:b6:8d:
76:cc:50:91:85:d7:a6:2a:b9:3a:04:78:c3:eb:f1:
ee:f5:5c:6e:dc:4c:8c:ed:ca:2c:34:d0:b6:29:f0:
67:f2:d4:ab:ab:04:7d:ab:d5:be:29:69:8d:5e:e7:
7e:55:52:da:27:cb:28:1c:81:3d:e0:47:7b:98:c8:
2a:a6:ee:56:5a:22:20:e6:d1:ad:c9:fc:85:5a:52:
8f:66:4d:66:0c:b4:a0:d2:7f:a5:5c:02:f7:70:c9:
25:a4:01:61:32:fc:2d:50:e6:17:81:13:40:d6:74:
99:fb:ce:85:ee:85:76:5d:b0:ab:b8:88:df:31:72:
46:6f:54:1d:3d:66:03:07:8f:72:0c:58:2f:4e:04:
9a:49:7c:a1:5a:1b:42:80:63:bb:fa:4e:60:95:c2:
a0:19:34:d4:1f:6f:ca:6e:68:0e:ec:1a:95:9a:de:
fd:96:07:c1:08:db:d2:81:14:9a:77:74:ed:60:f8:
90:85:0b:3e:af:da:1f:64:bc:bc:53:e8:85:20:dc:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2D:91:23:33:4B:C0:89:21:EB:38:6F:9C:EB:D7:34:1B:54:BF:72
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3132382e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.128.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f2:ff:27:e5:2f:8c:63:ea:41:df:62:97:f5:96:01:6c:14:
12:17:fc:8b:bc:e9:f4:d2:3e:b3:d4:86:8e:a7:9c:16:0d:c9:
de:d0:3c:b8:ef:61:c2:c3:3c:96:dc:70:00:c5:46:ab:6c:dd:
b8:29:3c:59:80:33:29:10:16:a3:ed:97:90:69:c4:11:74:ac:
fc:5d:18:6e:36:4a:5a:89:e2:57:6e:c6:d0:19:2c:1a:55:fb:
53:0c:de:7a:72:e9:9c:76:31:0f:06:d1:a7:09:54:8e:77:9d:
fe:d5:11:a1:2a:3a:76:49:65:d7:ac:80:e7:30:56:f3:0e:01:
11:e6:9e:f8:86:8a:9a:86:1c:95:09:f8:1f:95:01:8f:52:73:
28:13:a4:af:ec:42:3d:02:f4:d9:ee:52:4c:1f:23:67:22:86:
b0:fd:fc:5b:b0:fa:88:5f:0b:6c:83:0f:08:3f:cd:53:96:88:
4a:17:d8:65:84:1c:aa:a7:db:7c:c0:b6:09:5e:09:b7:9d:bd:
17:0c:f8:47:34:f9:ee:8d:bb:18:f3:ac:88:52:41:3a:12:24:
35:e0:74:93:e6:71:d5:41:2c:62:41:0e:b4:ee:f3:46:36:12:
8f:a8:c7:58:98:2a:14:e6:f2:f8:9d:bc:61:99:9f:ac:62:04:
8b:61:13:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:07:55 2026 by rpki-client