Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139382e302f32342d3234203d3e20383334.roa
File: 3139332e3130392e3139382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: UXFcUljX0kq7spfWJe2mf+hRjJwi+p7wHJZpoluVCv4=
Subject key identifier: B3:02:BB:68:3C:F5:A3:91:31:7B:51:4C:1C:B8:6F:FF:24:74:37:8B
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 4C2EF59670701AB576B0E7B3412890C21B4CE2D1
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139382e302f32342d3234203d3e20383334.roa
Signing time: Sun 25 Oct 2026 09:57:29 +0000
ROA not before: Sun 25 Oct 2026 09:52:29 +0000
ROA not after: Sun 24 Oct 2027 09:57:29 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 21:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:2e:f5:96:70:70:1a:b5:76:b0:e7:b3:41:28:90:c2:1b:4c:e2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Oct 25 09:52:29 2026 GMT
Not After : Oct 24 09:57:29 2027 GMT
Subject: CN=B302BB683CF5A391317B514C1CB86FFF2474378B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:45:aa:42:39:78:be:d2:d8:31:fd:de:f9:
7d:9a:eb:69:3d:1a:d2:89:51:12:6a:fb:05:a5:2f:
03:a0:34:d5:e6:0a:c6:e5:e5:01:cb:a0:dd:86:94:
8e:6a:00:24:cb:81:7e:63:a4:69:eb:00:6c:8b:b6:
14:4c:a6:81:09:bf:24:ac:49:83:c1:31:60:37:58:
b9:d4:b5:40:37:31:75:7b:5e:46:31:9a:e6:71:6e:
e9:72:ba:fb:a2:fc:94:9f:5f:75:84:05:8b:2b:f1:
04:c2:83:11:56:13:16:bd:39:c4:97:fe:a0:d9:3b:
ff:77:a1:53:b7:57:c8:2f:b4:1f:4d:dc:e2:d5:26:
ad:81:11:67:df:b0:93:f9:02:34:7f:5c:a0:66:ed:
b7:32:bd:78:6d:9a:53:1b:51:db:49:71:1e:ad:a0:
5c:ee:df:c0:27:0a:9e:22:62:f8:49:1f:fe:fd:9c:
c6:db:6a:a2:6c:92:dc:e6:c9:d3:58:f0:4d:0b:bf:
54:04:72:3c:fd:bc:ea:83:dc:b2:1c:5f:45:41:29:
b0:82:ee:7d:c0:c5:26:47:48:fb:72:2f:a6:b5:30:
e9:f4:3f:e2:a1:95:a5:1d:95:89:26:9e:67:ce:49:
c8:71:ad:c1:87:69:cc:fb:a6:8f:c2:bc:8a:ff:22:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:BB:68:3C:F5:A3:91:31:7B:51:4C:1C:B8:6F:FF:24:74:37:8B
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
73:92:1c:5e:ef:69:88:11:9d:12:2d:07:c0:ae:6c:29:c6:40:
7c:8b:82:e0:5e:13:8a:e2:83:8f:02:97:2f:6f:48:56:18:9d:
dc:39:27:6a:d6:06:2a:54:31:af:f0:62:44:36:cf:ae:fd:ca:
39:31:a9:f4:e8:1b:98:9d:32:9e:fd:38:41:11:20:1a:47:b8:
09:e9:9f:5d:14:7e:cb:c7:ec:dd:c3:06:28:d0:6d:88:03:e5:
fe:c0:3d:31:ff:01:27:be:f7:d7:7a:a5:90:4c:c6:e7:c8:9f:
7d:18:e5:00:ee:d6:43:79:98:f0:b1:69:00:12:32:86:2b:0e:
05:e4:fc:30:f5:8b:81:b6:51:48:fa:c4:7c:a1:5a:59:03:d8:
d2:75:e0:79:2c:ee:3d:c7:bf:13:bb:15:2a:14:c4:2b:17:60:
67:3d:69:3d:6d:08:f1:ee:f0:b4:35:cd:e0:b6:5a:56:c5:0b:
2b:b8:5f:0d:81:89:3e:a1:2a:e8:3b:b3:c3:48:51:e4:11:17:
01:ad:1f:17:f1:a6:9e:93:4f:35:e7:b5:00:6e:4c:32:ce:af:
31:e9:8b:97:b5:ef:39:98:c2:e5:9a:bc:66:2a:23:88:82:fd:
f9:d7:0a:a3:72:f2:d1:8b:96:32:c4:62:85:bc:0a:3d:16:4b:
8e:b5:7f:b5
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUTC71lnBwGrV2sOezQSiQwhtM4tEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2
ZmJhYmI4ZDAeFw0yNjEwMjUwOTUyMjlaFw0yNzEwMjQwOTU3MjlaMDMxMTAvBgNV
BAMTKEIzMDJCQjY4M0NGNUEzOTEzMTdCNTE0QzFDQjg2RkZGMjQ3NDM3OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM8UWqQjl4vtLYMf3e+X2a62k9
GtKJURJq+wWlLwOgNNXmCsbl5QHLoN2GlI5qACTLgX5jpGnrAGyLthRMpoEJvySs
SYPBMWA3WLnUtUA3MXV7XkYxmuZxbulyuvui/JSfX3WEBYsr8QTCgxFWExa9OcSX
/qDZO/93oVO3V8gvtB9N3OLVJq2BEWffsJP5AjR/XKBm7bcyvXhtmlMbUdtJcR6t
oFzu38AnCp4iYvhJH/79nMbbaqJsktzmydNY8E0Lv1QEcjz9vOqD3LIcX0VBKbCC
7n3AxSZHSPtyL6a1MOn0P+KhlaUdlYkmnmfOSchxrcGHacz7po/CvIr/Imh1AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUswK7aDz1o5Exe1FMHLhv/yR0N4swHwYDVR0j
BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi
NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct
NnU0MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct
MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzOTMzMmUzMTMwMzkyZTMx
MzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFt
xjANBgkqhkiG9w0BAQsFAAOCAQEAc5IcXu9piBGdEi0HwK5sKcZAfIuC4F4TiuKD
jwKXL29IVhid3DknatYGKlQxr/BiRDbPrv3KOTGp9OgbmJ0ynv04QREgGke4Cemf
XRR+y8fs3cMGKNBtiAPl/sA9Mf8BJ77313qlkEzG58iffRjlAO7WQ3mY8LFpABIy
hisOBeT8MPWLgbZRSPrEfKFaWQPY0nXgeSzuPce/E7sVKhTEKxdgZz1pPW0I8e7w
tDXN4LZaVsULK7hfDYGJPqEq6Duzw0hR5BEXAa0fF/GmnpNPNee1AG5MMs6vMemL
l7XvOZjC5Zq8ZiojiIL9+dcKo3Ly0YuWMsRihbwKPRZLjrV/tQ==
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:30:21 2026 by rpki-client