Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32372e302f32342d3234203d3e20323036313530.roa
File: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (raw, json)
Hash identifier: 3lBPKR1fPL+QKLXWXt2VtfNCiDnO4wDHoyHQ9q2nEqQ=
Subject key identifier: 74:E5:F6:B4:C2:A0:07:CA:8E:C8:33:D7:3E:E7:FE:14:60:1E:98:95
Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial: 66A4F7B2A3E0D391C329C69558878F35BDFF5202
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32372e302f32342d3234203d3e20323036313530.roa
Signing time: Fri 31 Jul 2026 15:49:16 +0000
ROA not before: Fri 31 Jul 2026 15:44:16 +0000
ROA not after: Fri 30 Jul 2027 15:49:16 +0000
asID: 206150
IP address blocks: 139.28.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a4:f7:b2:a3:e0:d3:91:c3:29:c6:95:58:87:8f:35:bd:ff:52:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
Validity
Not Before: Jul 31 15:44:16 2026 GMT
Not After : Jul 30 15:49:16 2027 GMT
Subject: CN=74E5F6B4C2A007CA8EC833D73EE7FE14601E9895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:87:f7:20:0c:ee:86:32:99:4a:4f:c4:2b:
0e:0b:ab:8a:c0:06:ce:16:56:18:0e:37:e3:60:bd:
2c:ae:2b:01:3d:5d:f6:5b:aa:01:44:ba:ef:cf:ce:
a9:0c:d8:02:35:2f:14:16:84:c7:e1:db:ca:db:50:
f1:ea:13:bd:16:1a:c9:65:16:ac:85:fc:a1:a1:e8:
51:c2:fc:06:eb:a9:0a:3a:0f:e9:c5:36:90:3d:83:
01:cb:f6:eb:66:c1:ce:5d:e8:92:af:3f:69:5b:b0:
de:8a:b7:f4:ae:04:d9:b9:c5:6c:2a:bd:7c:64:0b:
3d:78:bc:a3:4b:cd:32:a4:db:56:b0:6d:ac:6d:75:
1e:85:7b:83:32:da:be:38:42:e3:78:16:96:71:da:
12:7a:a1:0c:93:a9:87:61:9b:13:94:59:74:39:9b:
0c:9e:a7:fe:eb:19:fd:ec:15:2a:36:6f:1e:3b:3c:
b6:89:88:0c:c4:0b:bc:ff:73:13:9e:ed:e7:ed:c1:
9e:64:2b:75:3d:60:f9:5c:5b:d8:df:c4:9d:5d:8e:
7f:d0:d8:c8:19:51:f5:7e:94:36:ff:df:02:a9:03:
b8:f4:31:d3:20:8a:a9:42:42:73:5d:53:6f:e9:eb:
59:4a:e9:63:14:9c:17:e4:16:82:97:e5:4b:29:71:
b9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E5:F6:B4:C2:A0:07:CA:8E:C8:33:D7:3E:E7:FE:14:60:1E:98:95
X509v3 Authority Key Identifier:
keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/3133392e32382e32372e302f32342d3234203d3e20323036313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.27.0/24
Signature Algorithm: sha256WithRSAEncryption
78:31:44:d9:8c:78:e5:b8:2a:93:2a:f1:01:40:64:2d:f5:af:
03:88:9c:6f:54:5d:76:30:47:e6:8d:87:49:9a:87:a1:12:87:
44:60:cc:c5:ef:3f:22:cb:c5:f4:27:ae:95:c1:c5:39:25:6c:
3e:85:59:e4:fe:7d:95:0e:0a:38:78:7e:99:8e:6e:75:28:5d:
a5:27:5a:6c:df:a4:f3:e7:6d:99:0c:be:b1:d5:d5:f7:67:f7:
15:bf:08:20:fc:b6:6a:15:97:c8:28:00:de:8b:24:38:21:d5:
09:df:e7:5e:6b:0a:a8:30:de:6a:fe:f0:f4:f6:3a:a7:8f:2e:
7b:a5:fb:70:33:9d:32:d1:16:a5:69:73:f4:1c:2b:1d:e3:79:
3f:02:a7:11:84:1f:86:4b:23:80:06:8f:91:6b:f1:18:f5:2e:
24:ef:75:51:6e:29:23:90:24:93:97:52:60:54:1c:ab:0a:64:
ff:78:d8:c9:dc:50:d0:09:a9:4b:dd:46:d4:1a:72:1e:aa:7e:
8b:ad:df:f9:4a:7e:ee:b9:8f:6c:1f:34:af:de:0c:06:b6:d6:
70:17:52:11:a6:57:f2:79:bf:65:56:03:a7:7f:23:8f:a0:25:
4e:8f:49:17:96:cc:66:71:06:d1:73:70:13:81:bf:c8:2b:9b:
fd:96:61:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:28 2026 by rpki-client