Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133302e302f32342d3234203d3e203231383539.roa
File: 3139352e35382e3133302e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: k591NQN+aq5GOAJctvYRnaCZlXbb2X79lNSZeNRbDbY=
Subject key identifier: EE:29:8D:AC:B3:14:23:FB:D5:E8:BF:10:73:3B:89:24:48:A1:A0:2C
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 61E73233F84FD27462D4C2A595EDE9600E5BB88E
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133302e302f32342d3234203d3e203231383539.roa
Signing time: Fri 27 Mar 2026 07:13:05 +0000
ROA not before: Fri 27 Mar 2026 07:08:05 +0000
ROA not after: Fri 26 Mar 2027 07:13:05 +0000
asID: 21859
IP address blocks: 195.58.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 16:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e7:32:33:f8:4f:d2:74:62:d4:c2:a5:95:ed:e9:60:0e:5b:b8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Mar 27 07:08:05 2026 GMT
Not After : Mar 26 07:13:05 2027 GMT
Subject: CN=EE298DACB31423FBD5E8BF10733B892448A1A02C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c1:67:28:ce:cf:72:38:ad:be:60:1a:8c:11:
9c:f2:dd:d0:86:b1:b3:6f:39:5b:92:0a:ed:1d:c6:
d4:d4:76:48:1e:9a:c4:33:e6:56:be:3b:5a:ea:4b:
d7:e4:bb:cd:12:53:3f:08:80:c8:64:d0:07:12:8a:
70:15:d5:71:05:e9:f9:c8:79:a9:89:9f:94:45:e4:
2c:c6:13:ae:ea:cf:4b:5e:d3:a2:b0:21:83:cc:e9:
b5:4a:75:e4:f5:94:8f:4a:cc:f0:78:12:4d:7d:4f:
33:e2:e2:a9:ee:bb:03:23:f4:a3:ef:95:13:83:75:
d7:a7:35:be:5f:d8:b6:f0:63:c9:cb:49:9b:05:60:
3a:a3:4c:9a:be:f8:b6:d9:c6:86:e8:80:d1:b9:2d:
3e:b6:14:04:2e:2a:e7:d6:9a:56:d2:85:ff:58:32:
b7:f1:0f:53:19:de:29:8e:f7:75:0a:60:99:3c:7c:
ac:dd:c8:3f:c7:b7:b9:17:f0:36:0d:f5:0f:e8:6e:
15:c7:b0:19:c6:fe:de:c0:ca:13:0f:cd:05:55:ea:
0e:dd:23:de:d3:76:0c:77:b8:bb:03:e3:5a:99:f3:
e3:ac:5e:b8:f0:c8:db:fa:c2:8c:11:c2:d5:7d:dc:
3d:bb:f9:ce:81:98:14:4d:26:c3:31:76:a1:d8:a8:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:29:8D:AC:B3:14:23:FB:D5:E8:BF:10:73:3B:89:24:48:A1:A0:2C
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133302e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d5:f6:28:18:76:83:19:b0:e4:fc:cf:21:97:6e:87:08:50:
6c:28:83:b3:39:b1:df:88:12:d7:a6:1a:b3:73:7c:18:5d:8b:
19:a2:81:7c:0c:27:63:53:d2:35:0e:01:de:aa:41:a3:5d:a8:
4e:7e:b5:28:07:70:1d:65:3e:0e:e6:83:b7:30:9f:d0:84:0c:
64:30:29:08:0c:f7:b7:74:58:32:30:2c:c4:03:3d:54:5f:52:
be:a8:6d:78:f2:6b:00:7a:1d:af:5f:3b:62:44:89:a0:a0:05:
96:f5:a3:47:cf:a9:7c:28:ad:de:e0:f2:41:83:14:3d:69:a7:
84:ba:d6:14:bd:f1:bc:9a:ab:84:a0:47:80:69:1a:5b:68:41:
b8:e3:09:4a:9c:65:29:cf:b6:ac:00:57:ed:87:42:3b:0c:5d:
81:6e:e0:29:ef:35:9d:0a:95:00:c5:b3:d8:30:e5:8b:4d:c2:
66:a9:2b:78:e5:b4:5b:dc:9d:74:0a:b5:b3:38:09:32:9c:f8:
ef:80:df:9b:06:48:17:70:10:39:1c:69:f1:f6:11:fb:3c:56:
5a:c7:bd:16:88:65:fd:bf:86:0a:5a:ef:f8:4c:18:4a:3b:6d:
40:6b:23:b4:3f:e2:3b:c5:ef:4d:d6:f9:eb:80:60:59:ad:9f:
7b:04:57:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 06:24:50 2026 by rpki-client