Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32332d3234203d3e20383334.roa
File: 3139332e3130392e3139342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 8pppzXIINDcOQleEm4jIyxLCjHvmxfFCmwg1FALF2hM=
Subject key identifier: 57:B0:FB:0A:C7:53:56:7B:3C:92:75:E5:3E:09:56:3B:4B:B5:84:2F
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 673A37C77E84D5D108E803839A5029828D50702D
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32332d3234203d3e20383334.roa
Signing time: Wed 05 Aug 2026 00:07:09 +0000
ROA not before: Wed 05 Aug 2026 00:02:09 +0000
ROA not after: Wed 04 Aug 2027 00:07:09 +0000
asID: 834
IP address blocks: 193.109.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:3a:37:c7:7e:84:d5:d1:08:e8:03:83:9a:50:29:82:8d:50:70:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Aug 5 00:02:09 2026 GMT
Not After : Aug 4 00:07:09 2027 GMT
Subject: CN=57B0FB0AC753567B3C9275E53E09563B4BB5842F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:c6:c7:c8:03:2b:f3:6e:87:01:26:cd:52:
b6:21:26:3d:1b:85:a3:90:0d:42:f9:eb:f9:2d:64:
f6:c2:41:27:2c:4d:64:72:75:3e:3e:0a:1b:ae:b0:
da:29:7d:e5:97:d5:79:08:53:68:30:38:38:4e:ac:
d5:61:34:9b:0d:25:fe:f6:18:94:e5:71:06:1a:62:
5e:36:fa:8d:cf:fa:bc:54:62:d7:ff:59:17:4e:d8:
92:06:ee:d4:59:b7:7a:c4:ec:ea:89:db:e5:6d:39:
d8:14:f7:7e:30:9a:96:26:92:76:2c:0b:ac:b0:ef:
65:44:16:81:30:da:00:69:fb:96:33:46:80:1f:cb:
1d:ac:70:39:fe:d6:75:0c:af:ca:68:10:ba:72:f2:
1c:c9:6a:c8:82:aa:d7:cd:b8:7c:bc:f3:4f:24:0c:
e0:1b:7c:e1:cb:fb:4b:d6:e3:43:d7:9d:50:8f:e9:
aa:5f:c1:6f:ae:c1:9e:6c:e2:f7:75:7e:88:4d:34:
39:16:a8:89:66:9c:0a:8b:2b:ec:32:46:b5:3c:f6:
ae:5c:45:78:0f:5c:b9:a8:5e:dc:4c:92:e3:95:08:
8f:25:11:33:95:c3:f7:46:cc:96:69:36:98:c9:b3:
63:a3:38:c5:b2:e5:cd:42:16:ee:6c:5f:fb:69:7f:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:FB:0A:C7:53:56:7B:3C:92:75:E5:3E:09:56:3B:4B:B5:84:2F
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.194.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:35:78:3d:31:b2:af:ec:3b:21:26:09:20:1f:82:bc:28:c8:
16:89:00:20:11:b6:9e:fc:db:b3:50:71:43:bb:c2:7d:3d:ba:
e1:dc:17:24:fd:0a:24:7a:c8:e1:75:0a:f3:37:f5:bb:f0:4c:
94:a6:4f:91:14:dc:19:cf:99:63:db:87:fa:d7:6e:bd:12:dc:
43:11:9a:f8:ff:e9:bd:31:78:81:bc:be:79:ea:a4:a3:2e:d9:
ca:b7:05:7f:c1:58:e2:53:59:23:d4:d4:3a:78:c9:6e:b7:a5:
15:3a:57:77:9c:88:07:c8:3d:38:c8:ce:1f:3c:00:44:84:0c:
0f:4d:8d:f7:95:ec:09:e2:d6:ec:50:ff:3b:87:48:c1:c6:34:
8c:ae:89:cf:9d:76:51:7b:e7:41:11:94:ee:f1:bd:1b:e2:e2:
a5:cf:f3:74:5f:3e:85:5b:6a:6a:11:a5:5f:1f:2a:2b:08:8b:
23:4b:c3:76:51:7f:24:eb:ab:3a:c0:53:c7:fc:bf:c4:ab:18:
a8:2f:ff:3f:9d:03:18:6a:22:ba:1e:64:62:00:81:7b:a0:8c:
16:3e:c4:25:9b:4b:72:5c:e1:f0:a8:36:d0:70:f3:4e:b5:ac:
1f:2f:88:27:4e:52:cd:b9:78:91:22:20:03:b4:87:f5:66:1c:
7d:f8:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:02 2026 by rpki-client