Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139342e3136392e3231372e302f32342d3234203d3e20313437323831.roa
File: 3139342e3136392e3231372e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: /IjVflmBddCrdaouYkOpMY1fUe8tBXGifGMv0KDpWhU=
Subject key identifier: 95:C9:F3:4F:08:9D:0A:9B:4C:E3:0B:51:71:C4:E8:CE:04:85:60:3F
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 5BC1EFC43910B40012F6FB00BA1C0FFDF74D8388
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139342e3136392e3231372e302f32342d3234203d3e20313437323831.roa
Signing time: Fri 04 Sep 2026 03:10:29 +0000
ROA not before: Fri 04 Sep 2026 03:05:29 +0000
ROA not after: Fri 03 Sep 2027 03:10:29 +0000
asID: 147281
IP address blocks: 194.169.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c1:ef:c4:39:10:b4:00:12:f6:fb:00:ba:1c:0f:fd:f7:4d:83:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Sep 4 03:05:29 2026 GMT
Not After : Sep 3 03:10:29 2027 GMT
Subject: CN=95C9F34F089D0A9B4CE30B5171C4E8CE0485603F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:a5:62:88:59:cb:b8:27:b4:9a:60:d6:f6:
99:be:c8:7f:6e:39:51:da:df:e2:b1:65:a5:26:77:
cd:b3:ff:b8:7a:7d:2e:7f:c1:0d:03:26:62:9f:d0:
f1:e2:ee:e1:e2:98:41:7b:9e:ca:e1:d6:3c:4e:e2:
35:ea:f0:19:c4:34:98:28:46:b6:d5:64:86:a1:c1:
58:a8:51:b1:08:31:56:a4:3f:08:00:12:93:0b:e8:
3a:27:5e:34:73:e0:f4:6e:93:31:0c:2c:3b:06:64:
35:ad:7b:a8:28:48:79:09:fc:52:9e:77:72:7b:4f:
eb:17:4a:66:23:b2:4a:c7:3f:16:a5:e6:97:82:ee:
47:6a:bf:30:30:d9:1a:79:5e:51:ba:bc:12:ba:9c:
37:2b:88:84:b2:55:05:f6:ca:27:98:31:48:14:4b:
42:ca:d0:c2:21:48:d0:ae:e5:4f:27:0e:fe:c1:97:
07:eb:12:a5:85:3f:15:fe:95:0c:a3:f9:f3:f2:2f:
20:d4:61:60:2f:52:0f:f6:8a:78:0e:ea:01:a4:00:
b0:f7:47:c8:c1:3f:ae:da:12:e7:90:cc:62:31:f0:
3a:2b:7e:c6:29:1a:f6:be:13:34:8c:13:92:58:c8:
b6:c9:f2:e3:4b:31:6e:b8:b3:59:88:1b:06:32:cf:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C9:F3:4F:08:9D:0A:9B:4C:E3:0B:51:71:C4:E8:CE:04:85:60:3F
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139342e3136392e3231372e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
62:41:18:eb:96:76:58:70:cd:23:aa:65:77:73:9c:74:eb:4c:
9d:3c:1b:e7:f7:b7:0e:5a:5f:bf:9f:fd:31:cc:83:95:91:70:
c1:69:ca:6d:b2:3e:1f:21:44:75:c4:28:1f:05:c2:93:63:96:
4c:69:8b:c3:e4:b7:f8:b9:e4:8b:d8:0e:c2:96:4b:bc:c9:66:
72:5c:26:92:57:58:95:ed:35:10:93:69:53:f1:72:f9:ff:a3:
1d:1a:ee:8a:d9:a6:67:76:58:42:f0:b6:e4:11:fd:1c:d0:ae:
35:4f:0b:17:2d:8d:12:12:8d:7f:b3:08:b7:37:08:ff:70:5c:
50:83:64:b6:84:bd:f9:e1:21:4d:87:e3:06:be:e7:e4:71:49:
13:0f:47:f2:a2:c6:ae:0f:39:ad:d8:d8:55:17:49:3a:84:39:
32:5a:d6:f2:d6:f4:db:00:b2:58:f3:1c:6c:82:5e:8f:44:02:
10:92:80:7b:72:58:3e:d6:02:fb:dd:fe:4e:02:ef:27:71:63:
28:40:c7:e6:f0:18:fa:a9:0c:04:13:b4:3e:e5:eb:c5:10:ed:
a6:77:0e:83:9f:7a:1c:64:a7:99:80:ea:8b:4e:11:02:74:fb:
87:10:f5:f2:d4:f0:52:e6:59:65:04:fe:95:9f:e6:6e:fe:c2:
49:dd:56:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:27 2026 by rpki-client