Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32342e302f32342d3234203d3e20323131343430.roa
File: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (raw, json)
Hash identifier: Ze9+zIwOSs8Hab73LnmLOHqax9HZbQ+ExNkPvYOX3OU=
Subject key identifier: 26:D5:EE:F8:F8:E7:0D:87:85:D1:D0:0E:EB:2C:CE:EC:38:4D:49:23
Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial: 5CA1EAAD931D0CAFC14845592686BB5BE45F61D8
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32342e302f32342d3234203d3e20323131343430.roa
Signing time: Fri 31 Jul 2026 15:49:16 +0000
ROA not before: Fri 31 Jul 2026 15:44:16 +0000
ROA not after: Fri 30 Jul 2027 15:49:16 +0000
asID: 211440
IP address blocks: 139.28.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a1:ea:ad:93:1d:0c:af:c1:48:45:59:26:86:bb:5b:e4:5f:61:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
Validity
Not Before: Jul 31 15:44:16 2026 GMT
Not After : Jul 30 15:49:16 2027 GMT
Subject: CN=26D5EEF8F8E70D8785D1D00EEB2CCEEC384D4923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:d5:13:57:6b:b7:3b:bd:1b:38:67:0a:de:
11:3d:48:b4:55:d6:b2:08:6f:3a:83:05:54:3b:ee:
f3:a3:5a:5d:fa:cc:3b:26:59:9d:bf:7d:33:93:17:
4b:e4:2d:72:2e:7d:98:79:5a:d1:9b:86:0f:ba:28:
26:b4:73:6e:8d:e5:f9:1e:0c:89:a2:e9:a3:90:84:
90:a4:fe:b6:c4:40:05:85:0a:a0:8c:63:66:6b:3f:
a2:eb:ed:07:dd:ec:e1:6f:51:87:d5:6f:e4:51:f8:
9f:8c:a4:f5:4d:93:52:70:82:f2:a6:36:a6:21:f8:
67:6a:64:7b:3b:29:29:91:3f:50:6f:7a:d9:6a:63:
fa:ac:bd:db:e2:f2:9e:1b:a5:80:a9:33:03:cd:ec:
79:7f:db:9c:7b:56:ca:3f:7f:a0:c6:b8:0c:ab:36:
3b:f0:4c:b1:b7:28:db:56:b8:79:9c:22:dc:98:1b:
95:5a:15:4b:c2:bc:e6:56:d6:a4:1d:7b:06:36:af:
b2:dc:2e:ae:f0:d1:bc:33:6b:24:52:64:7e:bf:65:
e0:81:1e:13:05:39:de:ca:ac:f7:d5:e9:14:2d:9e:
a8:a9:19:76:0e:09:74:38:ea:2b:1c:85:f5:1a:63:
f2:74:cd:d9:6a:be:cc:68:07:50:da:bb:37:3a:f9:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D5:EE:F8:F8:E7:0D:87:85:D1:D0:0E:EB:2C:CE:EC:38:4D:49:23
X509v3 Authority Key Identifier:
keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32342e302f32342d3234203d3e20323131343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.24.0/24
Signature Algorithm: sha256WithRSAEncryption
17:1d:89:76:8f:59:1c:bc:53:f2:82:ab:60:5b:e0:e2:b0:07:
54:76:88:01:f7:46:7f:c3:f4:93:ed:4c:8e:23:64:d2:fe:f4:
6e:2d:1e:0d:a8:a6:c0:d2:f2:f8:66:1b:cd:ef:d9:ad:e1:6d:
18:f7:f0:8a:88:05:97:b4:2e:f0:d2:e5:df:e5:38:55:34:89:
b5:db:7f:2d:47:3e:2e:c4:f9:3a:0c:ce:34:e2:1e:06:06:3d:
5c:9a:0c:71:92:23:9f:c5:73:25:25:69:f5:ff:78:cb:ee:20:
f4:79:d5:56:61:84:25:b2:f0:ab:bb:77:e7:14:b5:2e:d2:36:
48:9a:9f:41:bd:7b:bb:bd:68:1a:a1:4d:f7:c2:54:89:f1:45:
24:60:06:39:69:c8:24:d4:55:c1:f6:99:b6:cd:c9:cc:c6:70:
81:5f:06:10:4f:c5:56:a1:2e:54:c0:73:2e:6e:ee:b5:dc:93:
13:0a:e3:b6:7c:98:d2:fa:9a:cb:24:7c:4e:36:74:1b:8e:20:
10:1b:3f:98:2d:cc:10:e0:dc:1c:85:0a:82:54:92:44:91:6d:
90:57:c5:2e:e1:0b:d9:27:86:46:a1:bd:96:98:4f:62:7a:01:
ee:70:7c:03:e7:64:06:a3:b9:97:fa:22:ed:b3:b7:c0:e6:02:
1b:34:30:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:40:22 2026 by rpki-client