Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32342d3234203d3e20313437323831.roa
File: 3139332e3130392e3139342e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: bPUWTN2X5Oaw44tZSMWRzUSJLuFnyzlpVO2OrgdMiTE=
Subject key identifier: D7:B9:03:92:83:6B:C6:A0:4C:BA:73:58:83:8D:4F:45:F7:AC:A6:96
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 4039CA2DA4A98B12BBC852C495A29E5292D5C24D
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32342d3234203d3e20313437323831.roa
Signing time: Fri 04 Sep 2026 03:10:30 +0000
ROA not before: Fri 04 Sep 2026 03:05:30 +0000
ROA not after: Fri 03 Sep 2027 03:10:30 +0000
asID: 147281
IP address blocks: 193.109.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:39:ca:2d:a4:a9:8b:12:bb:c8:52:c4:95:a2:9e:52:92:d5:c2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Sep 4 03:05:30 2026 GMT
Not After : Sep 3 03:10:30 2027 GMT
Subject: CN=D7B90392836BC6A04CBA7358838D4F45F7ACA696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:b3:b4:8a:b1:c6:d7:23:cc:a7:cd:37:80:
7b:ee:82:30:b8:0d:3b:95:63:c4:f6:08:f7:aa:0e:
98:c0:4d:99:1a:81:04:ca:da:56:66:c9:31:49:8a:
a1:4f:8c:15:ee:1e:73:19:c5:15:70:bc:a7:54:79:
d8:ad:86:ae:e9:9a:3a:48:ad:5e:e9:08:22:c8:b4:
33:e6:70:b5:85:29:58:30:37:c0:ac:ec:81:10:25:
44:00:13:fd:ce:fc:86:c6:11:36:34:0a:40:70:80:
ef:63:92:09:7a:0f:9c:92:bf:23:d1:db:fe:ad:77:
36:53:0f:1c:a7:3f:2c:35:fd:ab:77:47:1c:26:7a:
ec:c8:bc:0e:aa:f9:6d:9b:14:40:ff:2b:df:27:d3:
37:71:6f:65:75:25:67:db:bc:71:73:01:8d:4b:52:
b8:41:ad:b7:4a:e6:51:78:22:37:e5:39:af:55:eb:
65:71:36:7f:80:d1:20:f7:8c:74:b4:ff:d2:2e:0e:
0e:c3:4f:01:e2:50:19:67:9d:44:23:1a:f9:e0:1f:
5c:67:9f:7f:ae:4f:42:3e:3f:be:ee:bc:40:c7:99:
14:72:0a:73:e0:fb:f1:33:dc:82:a3:b9:c7:96:d1:
54:d6:3c:bf:3b:6f:54:35:ec:56:b3:ab:8d:37:c7:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B9:03:92:83:6B:C6:A0:4C:BA:73:58:83:8D:4F:45:F7:AC:A6:96
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.194.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6b:5d:26:67:32:1c:fc:3b:9e:bb:47:15:97:31:fb:05:22:
10:bd:eb:4f:c8:10:fb:b9:af:96:af:8a:5e:42:44:20:f3:84:
25:3b:32:36:2b:3f:26:f8:54:40:1a:46:8a:7a:f2:11:06:49:
bf:89:a9:5b:cf:a7:61:d2:a0:c8:f9:27:37:12:17:92:9e:82:
0b:14:48:b7:df:1d:cb:c3:d6:a0:2c:98:00:f3:0e:f8:25:9c:
ca:1f:ea:bf:70:8c:29:12:d9:fe:2e:fe:ce:93:57:04:b1:01:
eb:e8:01:c1:00:21:d2:5f:02:bc:a5:af:f4:4b:28:68:ca:e3:
4a:6b:e0:9a:cd:c9:7a:4b:37:25:51:a7:3e:ff:b9:11:a3:b7:
72:f6:16:2a:dd:7d:c1:b8:58:00:a7:57:bf:1c:d6:47:69:47:
29:bf:f1:b9:45:c9:7c:70:60:eb:e2:49:e7:36:cd:4a:5c:64:
34:f5:1b:0b:1a:8a:5e:e0:4a:0c:31:79:65:14:89:b6:b2:df:
68:5f:e2:7c:ca:cb:18:1d:fc:71:a0:41:6a:7b:25:d2:41:fa:
9b:87:e3:5c:ab:70:a1:8a:f9:0c:4d:11:b4:be:f1:bf:6e:b3:
d8:91:88:1d:7d:cc:b6:ce:92:00:a1:8b:8f:ed:12:6c:ff:df:
3d:b7:97:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:28 2026 by rpki-client