Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32362e302f32342d3234203d3e20313337343039.roa
File: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: 8XVU/W55yY41HqRJQDzM1AeLQA0aWSEdX6TaV20ykxk=
Subject key identifier: 74:37:77:D0:7B:2C:45:BA:2F:98:B4:19:8D:5F:A8:EB:22:48:84:90
Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial: 7B015962290CD46A79C29C806AA2F297674A9AF7
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32362e302f32342d3234203d3e20313337343039.roa
Signing time: Mon 03 Aug 2026 08:49:17 +0000
ROA not before: Mon 03 Aug 2026 08:44:17 +0000
ROA not after: Mon 02 Aug 2027 08:49:17 +0000
asID: 137409
IP address blocks: 139.28.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:01:59:62:29:0c:d4:6a:79:c2:9c:80:6a:a2:f2:97:67:4a:9a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
Validity
Not Before: Aug 3 08:44:17 2026 GMT
Not After : Aug 2 08:49:17 2027 GMT
Subject: CN=743777D07B2C45BA2F98B4198D5FA8EB22488490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:c6:45:f1:b1:d7:5d:01:3f:cb:9d:83:dc:
23:01:16:6c:c4:b2:da:42:04:b7:8f:0b:e0:4d:bb:
cd:32:09:88:50:34:27:9a:0c:9d:76:47:10:73:38:
b4:a8:e6:f9:72:c8:65:95:97:cd:f2:c2:65:3d:ff:
b6:91:73:01:d6:c6:db:a4:ff:40:36:36:d0:fc:3e:
fb:61:a4:03:f0:be:04:a7:25:ae:ad:35:ca:c7:e8:
b5:7a:19:35:f9:41:0c:96:32:b1:c5:ed:52:0e:e4:
1d:e8:a4:e2:ff:e8:e4:a4:5e:0f:c2:7f:53:eb:18:
f8:ef:74:d0:63:bc:f1:51:45:3b:88:fa:b0:85:84:
43:30:6f:20:17:3a:ed:e3:3c:2f:c2:73:98:88:52:
85:59:34:1a:aa:19:24:aa:5d:1f:37:69:29:31:d5:
ef:22:da:01:39:ec:3c:7b:bc:a8:ea:4c:88:5f:80:
19:b8:78:45:ea:2f:9e:74:a1:eb:60:9b:e3:61:56:
c1:99:61:86:24:1e:b2:ed:ad:35:82:e3:5e:71:28:
c3:9f:ed:0f:d4:ca:98:69:f6:f9:4c:36:18:ff:1b:
4a:7b:11:73:00:fe:3a:7a:97:0c:42:ae:f6:b0:5b:
23:60:f7:dc:e0:ae:98:f5:73:dd:a2:16:44:3b:a4:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:37:77:D0:7B:2C:45:BA:2F:98:B4:19:8D:5F:A8:EB:22:48:84:90
X509v3 Authority Key Identifier:
keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32362e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.26.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1a:7e:17:92:90:ff:21:a6:c1:3f:53:c5:95:c0:39:2f:ea:
a4:df:01:11:e1:78:22:77:8a:9a:7c:45:36:df:2c:a9:08:b4:
5b:55:93:44:a9:2e:2f:ae:aa:a8:e7:a7:99:81:b1:1b:9a:c6:
a7:88:09:6f:61:8d:29:30:5d:0b:5c:5d:f6:0e:d9:70:e7:bb:
ca:0e:c9:5f:6a:d7:1f:e1:93:32:4f:69:f5:16:38:ae:eb:72:
f3:02:a2:27:8c:66:ab:cc:b2:46:14:21:5b:fe:53:bb:58:35:
59:e5:77:55:30:e9:88:bb:34:32:f1:cc:70:20:f2:42:6f:db:
39:a9:70:06:a7:46:92:d4:3b:2d:35:f0:49:09:64:e5:12:82:
b9:ad:65:71:10:51:35:1f:89:2f:d5:ae:2c:c8:ba:22:48:77:
85:67:1c:b4:1a:36:06:6e:0f:a0:fe:de:8d:01:03:cf:71:4f:
52:54:30:87:06:af:a9:8c:57:9a:35:7b:26:c9:f0:c9:c9:01:
55:74:36:38:cb:95:22:de:4b:d1:ff:93:c5:81:b2:67:9a:89:
b5:90:8a:79:5f:4a:6b:4a:c3:ba:03:1b:58:ae:ee:89:6e:75:
a0:f2:5e:d6:67:a0:b6:e8:95:4a:14:45:cb:27:3a:b2:59:20:
04:22:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:40:51 2026 by rpki-client