Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134352e302f32342d3234203d3e203137343333.roa
File: 3139352e35382e3134352e302f32342d3234203d3e203137343333.roa (raw, json)
Hash identifier: eHTOtIuDBTIVqfM4qOnIATmNiGNzwSelAsR/FAYQ0kQ=
Subject key identifier: 9E:34:CA:13:00:8C:B5:F9:EC:8F:3E:4A:65:70:A8:4E:42:9C:C7:CA
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 4B39B9D9E0C17788F14E29A3225A527DD741785C
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134352e302f32342d3234203d3e203137343333.roa
Signing time: Tue 03 Mar 2026 02:50:08 +0000
ROA not before: Tue 03 Mar 2026 02:45:08 +0000
ROA not after: Tue 02 Mar 2027 02:50:08 +0000
asID: 17433
IP address blocks: 195.58.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 00:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:39:b9:d9:e0:c1:77:88:f1:4e:29:a3:22:5a:52:7d:d7:41:78:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Mar 3 02:45:08 2026 GMT
Not After : Mar 2 02:50:08 2027 GMT
Subject: CN=9E34CA13008CB5F9EC8F3E4A6570A84E429CC7CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:1e:e2:70:d5:fd:77:42:e7:b3:b1:f1:fc:
e4:11:2b:65:d5:03:b5:a4:42:1c:2b:04:a3:1f:a1:
6b:c3:99:62:6f:6a:39:be:c1:63:b1:82:ce:c3:82:
08:77:c9:9a:88:37:27:c2:df:66:66:46:cd:f4:6f:
cc:c6:dc:23:28:58:af:08:2d:1d:2e:b1:97:b3:ef:
08:68:0e:f8:fe:5a:6d:50:e4:0b:90:5f:08:b8:52:
65:ad:36:3d:84:5c:62:19:5e:d9:90:58:a9:9e:5d:
63:4d:40:fd:85:e5:dc:9d:cf:99:4a:f9:95:42:06:
dd:75:1b:30:93:ea:47:00:ae:95:e3:6e:ae:3d:91:
b1:4d:a4:51:d6:0b:bb:ce:6c:f2:40:a8:7c:23:3e:
1c:ba:55:2c:11:aa:14:8c:5b:88:3f:1c:c2:7b:ab:
79:ae:24:22:04:d0:40:68:e1:ca:b5:b7:2c:a6:14:
78:ec:71:7c:d3:5b:83:40:63:ea:a2:d5:47:e1:b1:
a4:23:51:37:0d:51:76:03:0a:14:00:fa:4a:c7:e9:
b5:6a:a1:79:58:fd:3d:73:6f:62:31:96:3c:ea:5c:
e7:e6:16:93:d5:9c:3f:5c:8f:79:97:5d:f6:1a:fa:
33:34:9b:a3:5e:f9:a6:d8:c8:a5:dc:13:16:80:c8:
94:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:34:CA:13:00:8C:B5:F9:EC:8F:3E:4A:65:70:A8:4E:42:9C:C7:CA
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134352e302f32342d3234203d3e203137343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.145.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fb:98:00:0c:76:5f:9a:91:cd:18:72:25:2e:fb:16:bc:e1:
1e:00:8d:56:c5:bb:8f:21:a4:27:31:42:e4:6c:b6:4d:7d:7c:
f9:af:1d:4d:5d:eb:e6:db:dd:c7:64:a8:ab:3d:bc:d9:84:ca:
83:1c:65:17:45:17:db:8a:44:a3:69:7d:0a:9d:c6:74:28:3a:
b2:81:3e:b0:08:0d:73:d8:59:67:11:a8:2a:0b:63:67:2d:c0:
2f:7f:c3:f6:9b:e7:27:ef:f3:d3:83:1c:2a:7a:91:f2:e8:b7:
5d:de:74:eb:38:64:16:fd:93:bd:6a:5a:ca:e6:20:50:56:9f:
26:c2:b8:2f:b5:cc:2a:3f:0b:00:8c:d3:7f:c0:a7:71:a8:c5:
2e:a9:23:70:f7:f3:c2:8d:e7:fd:f1:2d:61:c0:93:21:6e:1c:
5d:74:ac:79:ea:0a:f3:db:8c:bc:b6:79:90:c4:e2:ea:ab:26:
54:6a:06:b5:54:ab:e2:45:f9:3d:c2:93:8b:be:4e:56:80:e0:
2a:77:be:1b:c7:c4:6c:d9:dc:ce:b0:93:cf:2a:03:26:2d:2e:
ca:c1:3b:f0:13:33:62:62:56:85:f5:98:58:23:db:a6:1c:4c:
93:3a:8c:32:58:8f:b5:ac:c3:fc:90:f5:24:b0:2c:8d:20:2f:
f3:cb:d6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:22:19 2026 by rpki-client