Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32332d3234203d3e20383334.roa
File: 3139332e3130392e3139342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: vqCzOVaQzqz5uwFrIoYMxgLQBpSinewdM5YvV1+7TOw=
Subject key identifier: 40:AD:76:29:F6:8D:8D:4B:7B:85:B4:85:96:49:36:3D:5E:64:BF:8F
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 402E0330FFB66072E2A4E392D09CC1D6806F2CC2
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32332d3234203d3e20383334.roa
Signing time: Sun 25 Oct 2026 10:46:49 +0000
ROA not before: Sun 25 Oct 2026 10:41:49 +0000
ROA not after: Sun 24 Oct 2027 10:46:49 +0000
asID: 834
IP address blocks: 193.109.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 21:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:2e:03:30:ff:b6:60:72:e2:a4:e3:92:d0:9c:c1:d6:80:6f:2c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Oct 25 10:41:49 2026 GMT
Not After : Oct 24 10:46:49 2027 GMT
Subject: CN=40AD7629F68D8D4B7B85B4859649363D5E64BF8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:c5:59:56:27:1e:4a:c2:75:15:43:e9:13:
1d:f0:52:7a:7e:e6:bd:8f:af:eb:4c:50:eb:80:67:
a7:02:8e:43:38:05:b8:56:45:2f:a3:77:df:49:c2:
5a:59:23:d4:85:e6:89:c7:99:b0:96:35:be:a8:a4:
3c:af:f7:a4:25:f9:51:27:92:0e:3d:ba:bd:1a:5d:
39:50:dc:e2:67:54:04:65:0b:f7:10:7b:39:4e:e8:
52:46:d0:fb:71:12:ed:f5:4d:40:e5:03:fe:bb:a2:
37:ad:77:4f:db:6b:61:9a:dc:fd:98:9a:fe:b9:a2:
50:18:7a:5b:ea:da:9e:77:4f:19:b3:51:3d:47:0e:
66:0a:b5:2a:7d:aa:00:2f:99:6e:b3:ba:ac:f3:86:
9f:af:96:05:90:b1:2a:73:d4:cd:d4:01:96:d0:ce:
74:94:d6:0a:f8:44:c9:33:34:4a:af:36:82:a3:2c:
b4:52:57:b7:e4:f8:d7:ac:17:fc:b9:4e:f2:64:d6:
e7:f3:ab:f2:45:4c:9c:fc:78:e0:50:84:10:a4:66:
bd:0b:eb:d6:3e:09:7f:44:82:1d:bf:a0:38:c5:fa:
8d:d9:dd:83:87:03:f8:ec:80:50:1a:27:e4:fb:59:
05:ef:90:fe:d2:ec:7e:82:97:5a:65:dd:0f:03:fe:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:76:29:F6:8D:8D:4B:7B:85:B4:85:96:49:36:3D:5E:64:BF:8F
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.194.0/23
Signature Algorithm: sha256WithRSAEncryption
35:e3:c1:e1:96:7f:c4:b0:92:c2:30:63:3b:94:b8:c8:15:ca:
a6:6b:3d:ff:af:99:b5:ed:19:95:13:25:e2:c1:64:ff:78:3d:
db:83:e5:5f:82:0c:22:8e:b6:95:ed:c9:c1:32:41:34:54:56:
26:7e:43:f5:e1:2d:c8:07:7d:87:10:5b:cb:37:7e:71:8a:74:
61:e6:4b:d9:51:62:eb:9f:60:1c:aa:d2:ee:ef:f6:ce:40:6f:
76:4b:53:f4:bd:53:6e:c8:ef:f4:02:2a:38:71:bc:60:1b:7d:
3d:40:4d:5a:ec:69:8f:7b:51:44:41:a4:20:7b:cf:5e:6b:82:
30:ca:64:85:b8:8e:c7:f1:69:3d:9e:a2:22:e8:51:b7:17:eb:
ad:22:c2:97:bc:0e:a9:b2:7b:8b:fc:4c:ab:de:fc:5c:e7:e3:
9f:04:be:05:64:3b:ec:4b:d6:2d:b8:44:f9:3f:75:33:ce:16:
47:12:d8:39:9a:e5:43:23:48:d4:f4:de:cb:79:26:97:29:b2:
25:c7:a7:68:6e:29:04:18:b3:01:f0:09:29:f6:b5:c5:6c:6d:
80:96:8a:ae:15:97:53:20:bc:ca:e8:39:bd:d7:a1:99:b5:16:
67:58:19:2b:39:99:8f:92:06:30:c6:05:27:92:ba:19:b6:39:
26:00:ad:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:29:09 2026 by rpki-client