Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34312e302f32342d3234203d3e203330303538.roa
File: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (raw, json)
Hash identifier: dsfGcmcJQswtY9cB3QnNBLneqmF8yKEFmEG/dOKBVMo=
Subject key identifier: D2:A8:1F:AA:11:C5:16:92:12:91:7C:98:1A:22:D4:EC:DF:1A:93:F3
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 1FC866F586465550FA35E5D485E06FF8E8988747
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34312e302f32342d3234203d3e203330303538.roa
Signing time: Mon 10 Aug 2026 15:49:21 +0000
ROA not before: Mon 10 Aug 2026 15:44:21 +0000
ROA not after: Mon 09 Aug 2027 15:49:21 +0000
asID: 30058
IP address blocks: 141.98.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c8:66:f5:86:46:55:50:fa:35:e5:d4:85:e0:6f:f8:e8:98:87:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Aug 10 15:44:21 2026 GMT
Not After : Aug 9 15:49:21 2027 GMT
Subject: CN=D2A81FAA11C5169212917C981A22D4ECDF1A93F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:bc:c1:70:b8:a8:20:d4:bd:cd:ab:bc:63:
cf:ee:2c:5e:33:07:95:aa:67:10:e3:db:be:f6:92:
af:b2:8e:21:15:b4:40:71:39:70:c6:5c:5d:cf:0b:
c4:58:91:fd:72:8d:07:1b:5f:a2:17:f9:e6:1a:ab:
fc:3b:40:b6:97:87:d0:e1:73:79:04:a4:10:76:35:
0e:4f:73:0a:01:96:9e:1d:31:b7:ff:85:b8:e7:70:
38:43:07:ea:e8:d9:d5:19:d0:c5:7d:74:11:85:d3:
fe:ba:15:96:d0:d2:26:21:91:06:b3:f3:8e:7e:ef:
a4:6c:7f:aa:1c:c2:e5:c3:1e:13:a6:53:e0:23:c0:
82:c4:2a:0b:27:3c:fe:48:76:37:ad:24:6c:7a:33:
19:56:f3:04:a4:99:c5:12:73:5b:d3:97:e5:2d:06:
22:39:66:4b:40:7c:64:54:ad:c5:76:20:11:c5:30:
c5:7a:b7:0c:c8:f9:9b:e8:40:f2:54:cd:52:f4:eb:
9a:02:20:6d:d6:11:c9:7f:98:d7:d5:38:82:f9:d0:
a6:13:70:b5:a5:6e:f4:c7:bf:33:1f:5b:37:57:54:
cd:a4:8b:03:62:68:62:a6:d8:41:1e:e3:e6:64:f3:
ba:0f:88:c7:e1:b2:ba:bf:e7:24:21:c6:81:5d:19:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A8:1F:AA:11:C5:16:92:12:91:7C:98:1A:22:D4:EC:DF:1A:93:F3
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34312e302f32342d3234203d3e203330303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:bf:ef:0f:43:86:6f:73:5c:55:39:7d:75:35:14:fa:6c:52:
76:88:9e:d4:89:b9:6f:e9:30:c3:63:79:fc:75:da:50:77:76:
9c:bc:44:0f:39:87:69:33:26:91:7b:8c:f6:43:58:fa:ec:1a:
73:7e:9a:56:6d:83:97:eb:9a:2a:84:22:47:98:15:c9:60:90:
66:14:4f:42:31:38:8e:a8:e8:49:f8:ad:63:ce:8f:e2:2e:fc:
0b:4e:f1:1e:36:4e:a7:d8:8e:36:d2:e3:55:d1:aa:b4:70:f0:
e8:74:e2:f2:87:dc:1b:8b:ab:ba:1b:67:b6:b3:49:48:d1:03:
c5:46:a6:2c:94:37:f4:29:ad:2c:e9:a6:b7:00:2a:d0:b7:fb:
13:28:00:31:f7:cb:a5:17:79:73:8a:5b:64:5e:6e:5a:1b:a9:
e4:dd:25:b3:1e:df:ab:4d:50:b8:0b:63:e3:87:21:b5:0f:7c:
af:0c:16:1f:3d:41:c1:b6:a2:f6:36:9b:51:d6:43:12:d9:0e:
d3:0d:9c:d5:c0:e9:9e:9e:d7:94:78:0c:fd:30:a3:69:4f:c0:
2e:3b:d5:f4:8a:3a:69:3f:95:0f:24:66:1f:03:0a:eb:14:17:
a9:ca:40:8e:31:b5:ed:30:15:9f:7f:4a:c0:64:41:66:95:20:
d9:c5:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:09 2026 by rpki-client