Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32342d3234203d3e20343031333632.roa
File: 3139332e3130392e3139342e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: d/Yw1EARsuJ5qbTC3Aibd4mcbW5A8Dcjxp9RATJq4bQ=
Subject key identifier: 6B:88:CF:79:4F:39:52:B7:F6:34:C9:7C:94:99:97:2A:E4:AD:1E:A6
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 54BCD98FC8ED9354095C0022BFE30F395C713472
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32342d3234203d3e20343031333632.roa
Signing time: Fri 28 Aug 2026 12:52:53 +0000
ROA not before: Fri 28 Aug 2026 12:47:53 +0000
ROA not after: Fri 27 Aug 2027 12:52:53 +0000
asID: 401362
IP address blocks: 193.109.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 00:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:bc:d9:8f:c8:ed:93:54:09:5c:00:22:bf:e3:0f:39:5c:71:34:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Aug 28 12:47:53 2026 GMT
Not After : Aug 27 12:52:53 2027 GMT
Subject: CN=6B88CF794F3952B7F634C97C9499972AE4AD1EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:50:4d:c1:6a:f1:9b:5c:74:e5:fa:41:da:
47:8c:5b:d5:3b:5c:97:bc:7d:58:99:03:4c:97:9a:
d4:a9:8e:19:df:19:ee:06:43:11:96:a8:40:63:9d:
3b:ec:f9:f8:1b:42:ad:54:98:09:1c:5e:75:73:ec:
d0:aa:c6:db:5e:3d:f0:5c:3d:d9:5e:c6:16:97:d7:
7a:8c:f6:64:50:91:c1:9d:db:00:00:37:8b:72:0e:
66:66:7f:44:14:1f:8e:d8:40:ae:b9:4e:2b:49:b1:
47:9b:77:55:1a:a2:04:89:6e:35:44:ff:18:59:37:
5b:70:57:94:ed:6a:d8:d4:60:58:a5:c4:42:74:a9:
13:5f:9a:43:cc:f4:ad:91:3f:8b:ac:38:89:7b:35:
ac:8e:3a:70:b0:05:d0:d0:a1:d1:7a:11:76:10:a5:
16:0b:9d:ab:c8:33:d7:59:11:55:d2:3e:a9:a4:b8:
d4:7e:37:9b:18:1c:02:a4:c7:e3:7e:a4:11:84:a0:
d7:cf:95:32:01:29:9e:d9:ec:68:84:1e:34:64:3b:
78:0e:ca:7c:f8:87:86:62:f5:47:8e:c6:23:78:8e:
10:2c:35:0f:cf:d8:cc:fd:9d:c3:ce:61:be:31:c3:
5d:bd:24:2f:59:db:2c:d1:79:21:b0:54:e8:58:80:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:88:CF:79:4F:39:52:B7:F6:34:C9:7C:94:99:97:2A:E4:AD:1E:A6
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139342e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.194.0/24
Signature Algorithm: sha256WithRSAEncryption
24:06:8b:c2:80:0e:3b:a8:08:a5:0c:44:fb:92:48:10:d8:d8:
60:3c:57:ae:a6:82:e1:50:f0:ca:8a:bc:39:63:ca:ef:cf:f0:
94:95:a2:56:8e:f5:5b:38:23:68:30:9d:0c:40:fb:94:e1:0f:
fe:71:79:5a:8b:4e:2b:c5:23:06:91:3d:23:db:9f:ef:43:47:
59:c5:a9:8a:bd:e3:cc:ca:84:89:2a:72:c1:48:18:84:97:2e:
10:09:86:3a:2f:c2:15:a7:0e:96:82:78:a5:52:b5:8e:71:33:
bf:74:9a:54:32:16:c4:7a:ce:6b:ae:a4:85:85:61:c6:3f:1f:
50:46:14:23:2c:ad:52:ed:97:cd:70:94:aa:47:3b:33:82:c2:
03:f1:85:bf:b0:ca:4f:60:b6:18:54:32:7a:89:f1:15:90:d9:
60:9a:b2:7a:87:3b:c7:3d:78:73:5a:b8:f9:d4:ab:af:f7:52:
f8:9d:35:20:88:a4:8b:78:b3:6f:15:fd:b5:e1:af:9c:78:36:
f3:e1:ac:6d:aa:af:81:bb:83:44:d1:8c:37:f0:8f:90:d0:62:
1d:36:32:61:c8:fd:27:ab:a3:13:8f:36:50:12:19:3a:fd:e1:
90:78:90:50:e6:1b:83:c0:66:17:75:69:d9:cf:f5:de:d3:4d:
7f:8f:3d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:56:48 2026 by rpki-client