Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133322e302f32342d3234203d3e20383334.roa
File: 3139352e35382e3133322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: GolpS5GkGhvaWVfDM3LwQuLKcifWaEjy6gRVRB1uMy8=
Subject key identifier: 37:F8:2D:92:F5:34:0C:C2:37:97:2E:EE:B4:31:F9:7E:B9:47:E6:D7
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 577F34CFE9ED4FAE87EF9A7461C7FB3C9F21E375
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133322e302f32342d3234203d3e20383334.roa
Signing time: Wed 29 Apr 2026 20:07:55 +0000
ROA not before: Wed 29 Apr 2026 20:02:55 +0000
ROA not after: Wed 28 Apr 2027 20:07:55 +0000
asID: 834
IP address blocks: 195.58.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:7f:34:cf:e9:ed:4f:ae:87:ef:9a:74:61:c7:fb:3c:9f:21:e3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Apr 29 20:02:55 2026 GMT
Not After : Apr 28 20:07:55 2027 GMT
Subject: CN=37F82D92F5340CC237972EEEB431F97EB947E6D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:05:61:0a:d0:bd:03:b2:66:ca:3a:72:20:
9a:fa:16:eb:e5:cc:1b:c6:03:f8:a4:86:5b:27:e2:
b0:93:f3:11:ac:6b:d0:75:1c:e0:8e:85:b7:e1:5d:
fe:d2:10:e2:44:54:a3:c7:06:e4:b4:1e:4f:40:b3:
4f:2f:9a:7e:99:0a:75:7b:27:65:46:2f:12:83:f0:
4e:7a:44:14:21:cd:12:00:fe:73:df:15:80:6f:20:
4a:d4:ed:46:81:5f:6d:2d:5a:e7:c1:ab:9b:b0:7f:
7e:b6:5c:54:70:09:63:36:91:f8:1f:ea:77:d2:12:
f8:e9:19:c8:0a:81:08:f0:21:21:1b:04:1f:53:a0:
8e:d3:14:7e:79:4c:84:9c:fb:e8:65:02:17:4c:a7:
35:b4:ae:46:79:fb:df:34:19:54:4c:0c:22:36:03:
ca:00:06:67:ec:38:e1:6c:6e:41:a1:c2:51:4c:a5:
a0:ff:7b:f8:57:d7:28:c7:4d:2c:3a:28:5c:26:17:
9f:fa:de:81:80:82:82:59:f0:5e:7d:f7:8b:b0:e8:
b3:25:4a:e6:92:1d:6e:24:ff:43:62:2d:17:d7:6d:
f3:89:75:6b:3a:7c:b8:e1:4c:7b:2e:a0:c7:31:45:
e1:71:04:32:e1:12:c5:47:71:f0:6b:76:b9:ed:50:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F8:2D:92:F5:34:0C:C2:37:97:2E:EE:B4:31:F9:7E:B9:47:E6:D7
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.132.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7c:52:08:c7:60:99:8d:6b:95:15:11:4f:ed:94:84:57:62:
3d:a3:96:5a:e5:c2:fa:ea:fe:d3:12:aa:10:67:8e:8a:c1:af:
70:12:01:6f:f7:69:0f:d6:ee:73:1d:c2:40:33:54:54:01:30:
b3:b9:88:ea:a9:ff:5f:52:91:40:50:00:d9:0f:df:cb:10:bf:
dd:ec:57:52:22:6b:8a:03:d5:20:7e:26:bc:5a:33:79:1f:70:
a6:8d:40:fd:64:ce:44:c8:d4:4a:00:ea:0a:ab:79:e1:68:c2:
b4:9f:07:17:86:e3:1a:7a:a4:96:ba:c2:00:d8:26:21:d4:57:
8f:50:5b:9c:d6:17:16:2d:14:83:1d:45:96:c7:da:e1:da:f4:
7d:6c:72:60:46:ff:47:22:de:d9:c5:16:5a:c6:20:89:ea:8c:
a3:ce:f9:5b:5a:40:da:08:33:e9:84:0f:17:b7:f6:e3:73:63:
fc:c9:31:d5:56:6c:5b:1a:da:b8:a0:17:67:a9:13:2e:33:3c:
6e:06:ee:cc:f8:cd:65:a0:41:9e:a1:d4:d2:27:36:71:ab:a8:
95:0e:09:32:05:e3:f5:1f:70:12:f7:cb:59:a0:f1:21:53:58:
1e:c2:1b:a3:be:19:81:5e:c0:4c:c6:a9:2c:24:88:ec:af:d9:
8b:56:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:11:42 2026 by rpki-client