Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139352e302f32342d3234203d3e20383334.roa
File: 3139332e3130392e3139352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: D65IVBMJQOAaJIwJfJYSdIfMhmi2TbaVQAy0lkFH4N0=
Subject key identifier: 6A:DF:78:EE:A6:E1:00:B4:88:98:3E:93:2A:D4:9F:36:B0:81:A5:DA
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 25074DB1E2310603EC538F25D793C365B0A0B5B5
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139352e302f32342d3234203d3e20383334.roa
Signing time: Fri 04 Sep 2026 03:12:21 +0000
ROA not before: Fri 04 Sep 2026 03:07:21 +0000
ROA not after: Fri 03 Sep 2027 03:12:21 +0000
asID: 834
IP address blocks: 193.109.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:07:4d:b1:e2:31:06:03:ec:53:8f:25:d7:93:c3:65:b0:a0:b5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Sep 4 03:07:21 2026 GMT
Not After : Sep 3 03:12:21 2027 GMT
Subject: CN=6ADF78EEA6E100B488983E932AD49F36B081A5DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:ef:0a:f8:54:c6:26:66:18:04:7d:29:d5:
ad:66:b4:99:e4:69:57:4b:0f:8e:ec:92:f5:bf:a2:
f1:7b:0c:13:e7:8d:1b:8b:40:26:4c:d2:11:cb:09:
6a:da:89:5b:15:6a:1e:87:97:bf:73:35:7e:e6:cd:
62:c4:9a:39:21:6c:dd:4f:36:05:1a:c3:d8:ca:b7:
40:ab:b1:86:42:ca:44:a0:f0:01:e5:5f:7e:07:22:
3a:c3:7c:48:56:6c:89:37:1e:f6:1e:3b:3f:8f:8f:
e5:2a:72:fa:f5:e8:4c:cf:f7:f5:c9:c0:d5:f3:29:
1a:a3:51:8b:74:ad:b2:b7:a9:27:7a:3f:24:dc:3b:
ee:0a:c5:e3:cd:e2:be:03:8c:c2:11:73:2b:74:4d:
ee:bb:1e:b2:e7:cd:32:44:ad:cd:54:56:8b:e9:50:
c5:4b:5e:ea:f6:8a:00:8b:47:1f:a9:da:da:52:a5:
79:d7:99:ee:e2:b1:b8:eb:0d:7c:06:37:6e:80:2c:
e2:b8:9a:59:08:89:35:f5:ee:87:80:94:04:b7:10:
b7:52:93:34:27:e4:94:30:f6:ad:de:6f:62:3d:b1:
76:01:92:0b:76:52:d0:e2:ac:89:ef:fc:72:73:de:
f1:f1:de:66:4f:73:07:1a:01:b6:4f:ea:c2:14:b4:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:78:EE:A6:E1:00:B4:88:98:3E:93:2A:D4:9F:36:B0:81:A5:DA
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
48:5c:92:f8:63:42:ac:ad:f1:69:22:30:29:c4:7f:55:1d:3f:
60:4c:a3:f6:db:ee:42:f6:c1:86:0c:0d:ac:41:6a:62:56:74:
65:7b:04:5e:54:04:e4:69:5d:23:58:66:be:4e:d6:c5:6f:b6:
72:01:0d:97:ec:fa:95:73:9b:ce:94:ee:fd:d6:b6:39:a4:55:
90:f7:bd:a4:db:58:5a:f0:e9:55:71:5b:13:16:e8:9c:1b:bf:
dd:d3:60:f0:1b:ef:67:e2:8e:7a:8a:53:34:73:b4:fe:4d:73:
89:f1:79:c6:78:0f:c8:54:c7:7e:c6:69:40:d8:8a:f9:2a:65:
cd:9e:f9:8d:66:66:01:7c:68:f3:7b:56:42:4c:c4:33:cf:2e:
19:db:be:02:b8:01:8b:9f:e1:48:c6:85:af:51:9c:80:d5:b7:
15:70:75:ba:f2:cf:a7:45:21:17:57:f9:91:f4:a1:bb:df:d5:
f9:64:7c:ce:2c:cc:54:36:44:c8:ad:34:30:00:85:b6:8e:be:
52:58:d1:6e:26:73:28:88:d6:52:3f:20:3a:37:7b:16:13:0a:
ae:71:37:5d:1d:62:b5:47:d5:15:c3:a0:7e:b1:f8:b6:4b:38:
dd:2c:2a:a9:c1:5a:1e:12:77:b7:d5:02:80:7d:10:cf:f3:14:
f8:3f:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:30:09 2026 by rpki-client