Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3132392e302f32342d3234203d3e203331373135.roa
File: 3139352e35382e3132392e302f32342d3234203d3e203331373135.roa (raw, json)
Hash identifier: adjU13kTFE5YfpiiCMUzR3Vm2CJdDUybBKcXAGiPlWc=
Subject key identifier: 42:B8:C8:77:83:67:27:19:3F:1D:68:91:72:F0:ED:25:6E:54:2B:F7
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 1A5947B00885D5FE1B0AE553576C8A0CB09C2496
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3132392e302f32342d3234203d3e203331373135.roa
Signing time: Mon 26 Oct 2026 09:34:47 +0000
ROA not before: Mon 26 Oct 2026 09:29:47 +0000
ROA not after: Mon 25 Oct 2027 09:34:47 +0000
asID: 31715
IP address blocks: 195.58.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 15:59:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:59:47:b0:08:85:d5:fe:1b:0a:e5:53:57:6c:8a:0c:b0:9c:24:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Oct 26 09:29:47 2026 GMT
Not After : Oct 25 09:34:47 2027 GMT
Subject: CN=42B8C877836727193F1D689172F0ED256E542BF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:29:75:34:7d:d4:33:eb:84:ee:4c:fa:ae:
f2:69:92:25:ee:b2:36:75:13:45:78:4d:07:02:71:
29:ef:da:0d:a4:d9:27:d9:f8:0c:d6:3d:42:7f:be:
25:69:ac:6b:cc:05:06:bb:95:40:04:53:7b:fe:e9:
b7:13:b8:43:f3:3c:f3:72:cd:c2:c0:f4:98:fb:3a:
32:4b:8f:2b:01:f9:c3:69:0e:c0:e5:09:8a:c2:49:
6a:c5:27:74:af:80:bb:f1:dc:f1:a9:79:22:bb:cc:
45:07:31:13:90:a7:67:b1:15:f5:0d:23:83:0b:be:
97:b1:48:71:bd:92:64:89:ff:cd:cc:bd:d2:a0:58:
c4:5d:df:f3:a5:2d:87:83:a6:76:e2:90:91:65:b0:
1c:0b:a8:6b:d6:90:60:e9:e9:9f:31:8f:8b:dd:0e:
53:e5:b6:d2:c4:4f:01:24:7f:81:49:a2:30:6f:a1:
40:de:c4:07:f9:1f:1d:bb:d2:b3:f9:c6:fc:7d:8d:
98:29:f2:d7:43:f5:a6:17:f4:b1:9e:f3:8a:3c:04:
c1:40:b9:4d:b3:98:5a:83:3e:b8:b1:22:fb:9f:0d:
63:26:65:21:6f:25:74:e7:3b:12:7c:b9:3f:a0:66:
25:d7:b0:5c:2c:78:81:c9:29:22:21:cd:b1:39:b3:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B8:C8:77:83:67:27:19:3F:1D:68:91:72:F0:ED:25:6E:54:2B:F7
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3132392e302f32342d3234203d3e203331373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ec:de:59:13:09:49:24:d4:b5:c5:28:7c:01:71:a0:dd:3f:
bb:4e:ac:02:bb:f0:d9:6d:56:6c:ae:52:a8:a6:7f:23:bd:08:
07:0c:fa:eb:30:22:3f:07:78:eb:29:94:bd:b9:22:76:dc:e6:
80:41:7b:c8:df:c5:a8:c3:10:1c:f8:5a:9a:3d:b5:95:48:d3:
83:04:af:39:41:7b:d9:5d:e8:af:a0:59:67:88:71:dd:8a:53:
3a:d3:45:2c:15:63:e4:65:e0:6f:e8:4e:0e:36:db:d2:38:34:
a6:4e:33:23:65:92:bb:16:7a:c9:9d:df:7a:78:73:0e:70:65:
cd:03:7d:1c:5b:fc:9b:02:f1:37:9e:49:f6:0d:3b:57:e8:b7:
95:75:de:bf:3d:1f:4c:0f:c7:f0:2f:95:bd:77:db:8c:48:3a:
75:d0:9c:f0:04:26:af:be:64:a5:35:49:a5:da:6b:ab:b0:5f:
6d:1e:26:08:9a:07:f9:ab:f4:1f:0b:55:68:c4:80:f4:29:8b:
fa:52:90:0d:6c:05:cc:98:ca:48:d5:c8:33:ac:3b:c6:0f:3b:
61:94:81:c4:58:5a:44:b1:ad:41:4e:72:02:47:31:fe:81:0a:
bd:a6:e6:fc:b5:bf:23:5a:82:05:06:3d:95:ed:76:3f:73:b6:
c2:8e:b4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:29:13 2026 by rpki-client