Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139372e302f32342d3234203d3e203231383430.roa
File: 3139332e3130392e3139372e302f32342d3234203d3e203231383430.roa (raw, json)
Hash identifier: QD8HOFWKl0nl91R4P2k7fGerViB+5U4AkPb5N62cNOM=
Subject key identifier: 2E:01:C6:39:10:3E:F7:A2:73:12:37:57:8B:1B:84:69:6E:A3:AB:93
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 3425CF6252F71DEDBDC7B8252257DD4EDBF0F610
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139372e302f32342d3234203d3e203231383430.roa
Signing time: Thu 19 Mar 2026 01:25:04 +0000
ROA not before: Thu 19 Mar 2026 01:20:04 +0000
ROA not after: Thu 18 Mar 2027 01:25:04 +0000
asID: 21840
IP address blocks: 193.109.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:25:cf:62:52:f7:1d:ed:bd:c7:b8:25:22:57:dd:4e:db:f0:f6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Mar 19 01:20:04 2026 GMT
Not After : Mar 18 01:25:04 2027 GMT
Subject: CN=2E01C639103EF7A2731237578B1B84696EA3AB93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:35:f6:c8:d1:df:4a:76:77:09:b7:cf:be:
e5:2d:11:0b:58:e7:eb:98:8b:53:13:55:f2:f7:55:
a1:f6:78:f6:0c:25:44:1f:c8:7a:da:92:6f:6f:4c:
f5:96:9e:17:5f:e7:ac:a8:db:78:25:26:84:dd:f2:
1d:73:a8:d9:68:ab:06:d9:f4:71:a8:8c:c1:75:d9:
b7:93:0c:54:b3:16:30:85:70:e0:be:fa:e5:7e:95:
d1:de:bb:26:59:43:eb:66:17:21:c3:ae:84:9d:81:
33:b4:b5:7a:61:0f:57:54:b0:38:11:9b:f9:3c:e9:
55:ed:f3:9a:b8:55:e2:70:c1:c6:4d:41:a0:4e:77:
30:df:f9:1d:23:5c:d1:5f:c5:3f:d6:99:16:99:27:
14:fa:71:71:9a:7e:e7:e4:b1:be:ff:c0:a2:5f:bd:
09:14:65:d2:ba:43:46:8a:af:45:11:c8:31:25:8a:
f9:64:e9:35:2f:85:bc:0a:be:8a:aa:9e:9f:43:bc:
97:d2:cc:bb:f0:69:af:08:09:c0:1f:7d:4a:2c:3a:
d4:a3:5a:78:ec:c0:c6:79:3f:96:ff:99:58:90:e6:
15:a0:74:35:7d:30:d9:6b:d3:ed:6e:cb:a9:f7:35:
46:1e:f2:2d:19:86:0f:2c:55:36:b3:78:dd:31:2c:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:01:C6:39:10:3E:F7:A2:73:12:37:57:8B:1B:84:69:6E:A3:AB:93
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139372e302f32342d3234203d3e203231383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
91:78:6e:4f:bd:a8:bf:2b:4a:04:46:e1:66:20:13:04:a9:12:
78:0a:89:dd:ab:4b:a3:35:c5:a5:59:53:ba:27:4f:69:e2:aa:
f3:a0:2a:99:4c:2c:dd:41:ad:e9:b9:5a:04:2b:18:fb:3f:b0:
43:a3:47:41:f3:49:94:e1:3d:17:64:b3:5d:17:be:a3:2f:dc:
d9:a9:ec:86:92:17:94:b6:34:f3:ca:71:16:52:b3:14:ca:5c:
b4:86:9a:31:10:15:cb:56:64:60:80:7c:af:7a:ff:27:91:13:
13:0d:82:a6:7a:1d:76:10:7e:d1:58:da:48:ec:86:b1:ee:0f:
40:69:06:93:a9:17:e6:7e:78:60:64:2b:11:31:c6:d6:38:64:
2e:eb:79:c0:00:f1:f6:7a:0f:5a:f8:e9:6a:94:ed:09:94:9d:
43:1a:de:67:f3:27:33:df:a1:f5:48:d3:c4:51:75:0c:63:3a:
d4:2c:c5:9c:b4:5a:c2:38:40:33:d2:4a:bc:18:96:ea:c7:65:
3f:81:38:db:db:5d:3b:b9:10:70:b0:99:a5:0d:ab:36:1e:d9:
11:38:1c:9d:ee:c1:ce:d7:db:7a:e3:2d:81:42:b3:5e:35:4d:
69:51:31:07:a9:e8:d6:78:6e:5a:a0:72:32:70:14:df:c5:a5:
f6:c6:06:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 09:34:08 2026 by rpki-client