Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133312e302f32342d3234203d3e20323035343839.roa
File: 3139352e35382e3133312e302f32342d3234203d3e20323035343839.roa (raw, json)
Hash identifier: 9B1lpzhU/NSTxjJCq5aiKfoHr9L6F1O5LXUa2dNoNdo=
Subject key identifier: CE:BD:5D:1E:69:1F:39:9E:21:0B:E6:01:BB:B5:5C:48:FB:75:14:2A
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 25ED2CE3F6B5C7061856A43DC7E4928CB807B152
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133312e302f32342d3234203d3e20323035343839.roa
Signing time: Sat 06 Jun 2026 18:16:20 +0000
ROA not before: Sat 06 Jun 2026 18:11:20 +0000
ROA not after: Sat 05 Jun 2027 18:16:20 +0000
asID: 205489
IP address blocks: 195.58.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ed:2c:e3:f6:b5:c7:06:18:56:a4:3d:c7:e4:92:8c:b8:07:b1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jun 6 18:11:20 2026 GMT
Not After : Jun 5 18:16:20 2027 GMT
Subject: CN=CEBD5D1E691F399E210BE601BBB55C48FB75142A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:44:07:ad:6f:d4:c5:3b:50:8c:82:f8:a3:
60:62:9c:92:d9:22:12:9f:41:f8:8e:d7:06:2c:c7:
db:47:a3:04:c1:d5:db:30:84:bd:1f:2b:fb:30:75:
ac:ee:93:ad:83:76:fd:d4:2d:0a:ac:96:72:f6:67:
cc:02:36:e4:e0:ac:7d:b2:ce:84:c5:ab:79:d8:73:
e0:51:fc:26:ff:0f:ad:4d:0f:b6:7b:02:f3:25:27:
28:bd:78:85:54:10:31:56:be:bc:71:12:7a:f8:28:
ab:e6:9f:cb:6c:14:7e:de:01:75:03:46:74:9d:f4:
b9:56:9c:07:dc:9d:b2:a4:e3:8b:bf:fe:ae:db:74:
91:d8:8e:d5:f8:02:8a:b7:9f:ca:74:d0:6b:44:d8:
86:d5:d1:fe:54:06:e5:2d:b8:e7:36:79:28:d7:45:
57:d8:57:09:52:46:a6:a3:20:06:7b:74:67:20:46:
20:2b:21:95:bd:d5:50:34:bc:7a:09:86:1f:f0:78:
8f:2e:ff:7e:15:ce:6d:5a:6a:c0:47:9f:b4:b6:88:
ad:19:dc:e4:8d:84:02:2e:11:6d:14:c7:2a:70:fe:
88:f5:c6:81:23:84:17:51:42:9f:a0:84:14:54:17:
0b:81:4f:7a:ef:cf:b1:8e:e9:d6:dd:b1:2d:ab:a4:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BD:5D:1E:69:1F:39:9E:21:0B:E6:01:BB:B5:5C:48:FB:75:14:2A
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133312e302f32342d3234203d3e20323035343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.131.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a0:93:d4:97:a7:c9:2f:58:72:92:6c:2f:ba:91:12:40:1d:
3b:69:df:96:88:11:e6:8b:08:0b:f2:32:6d:04:29:39:f2:4c:
ac:44:29:a0:29:24:0e:a9:a4:0e:54:ae:e7:af:ec:86:7e:53:
c8:dc:92:61:d8:f8:b1:81:84:5c:1a:85:45:74:7e:ca:0c:14:
10:3a:a4:ce:bc:a7:16:c0:00:15:0f:b0:14:81:e3:13:01:ae:
c6:cc:e3:26:7b:8b:e8:c4:b0:b3:16:e5:1e:10:42:27:96:de:
9e:f8:d3:ba:31:e0:c5:64:36:09:a1:ed:ac:e0:00:8b:ae:60:
ff:fd:cf:d6:e7:d1:d3:98:7b:d4:86:ee:13:d3:54:2e:21:36:
0c:21:2b:52:8f:95:e3:a8:1c:a2:df:31:39:43:a2:23:fa:8d:
f1:fc:0c:92:f1:f1:33:79:c6:60:ef:11:31:9c:1c:73:8a:a3:
7e:b0:0e:f3:dd:ce:eb:e1:34:fc:fb:10:c3:af:78:a3:c8:e2:
f1:eb:3f:94:8f:01:0f:4d:45:00:2e:11:0e:53:38:c8:b1:01:
b3:51:2d:45:1c:3d:0b:81:22:15:71:a6:51:ad:12:59:7f:66:
3f:1f:30:41:18:b6:5d:b0:c8:d9:26:fa:fa:88:aa:23:ed:25:
c2:8e:22:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:22 2026 by rpki-client