Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3139332e33372e3233362e302f32342d3234203d3e203239383032.roa
File: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: BusrVHf+zY1JX+bmjDXcC3KVyArFYIN6eENeYlXoxOA=
Subject key identifier: D8:9E:2F:4D:D3:E6:60:D4:93:8B:FB:93:11:E4:A4:8E:F2:79:D7:ED
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 3775353C025F70858F45EE1825ACA9CE56825653
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3139332e33372e3233362e302f32342d3234203d3e203239383032.roa
Signing time: Tue 06 Oct 2026 19:49:35 +0000
ROA not before: Tue 06 Oct 2026 19:44:35 +0000
ROA not after: Tue 05 Oct 2027 19:49:35 +0000
asID: 29802
IP address blocks: 193.37.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:75:35:3c:02:5f:70:85:8f:45:ee:18:25:ac:a9:ce:56:82:56:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Oct 6 19:44:35 2026 GMT
Not After : Oct 5 19:49:35 2027 GMT
Subject: CN=D89E2F4DD3E660D4938BFB9311E4A48EF279D7ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:fd:aa:db:e3:05:3c:87:51:61:54:6a:86:
e9:5e:07:c9:eb:f5:6d:a2:ce:3e:0f:c6:76:20:35:
11:2d:34:4d:41:fa:0f:20:72:d8:51:d0:25:ae:f4:
a9:44:39:78:04:4b:2d:16:0a:dd:5b:5e:cc:1d:03:
54:d0:a3:16:05:53:15:62:92:d4:e6:40:ba:f7:78:
71:d4:e4:dc:95:ff:d0:b7:7d:46:a4:92:20:00:49:
5d:b2:2b:d9:e4:be:9c:44:81:c7:58:53:a6:26:0d:
78:17:38:47:4b:6c:05:50:47:7d:90:cf:4b:e5:6a:
e1:e3:7e:6c:a0:77:aa:e1:47:98:9d:f8:a2:ac:fb:
55:42:b1:5a:dc:ef:02:ba:94:fb:ed:bf:5a:c8:8c:
92:4a:3c:3e:c6:40:36:e9:77:26:48:11:6c:31:91:
f0:3f:e5:fb:7d:01:a9:a9:9a:08:4c:7d:e4:4a:5c:
b0:ec:fc:c4:93:c7:ca:1d:ba:cd:2d:c3:93:69:17:
d2:84:dd:aa:98:dd:47:d2:a3:db:b6:4d:97:66:c9:
d1:33:dd:3e:bc:fe:0d:ae:5b:02:7c:95:bb:14:34:
e0:ad:49:b1:8f:d8:7c:9b:33:40:ba:b7:bf:7b:5e:
27:c5:7f:33:f0:d6:29:90:a7:01:c4:bf:96:d7:ad:
95:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9E:2F:4D:D3:E6:60:D4:93:8B:FB:93:11:E4:A4:8E:F2:79:D7:ED
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3139332e33372e3233362e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.236.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f7:28:0b:1d:cc:67:5d:8b:ec:f2:65:59:eb:ef:a8:53:1a:
a1:14:48:f6:ab:cc:dd:b3:03:4a:e7:70:06:ba:a1:b6:27:bc:
9b:27:82:53:91:9e:33:02:d6:0b:c7:b6:0e:fb:3e:c8:13:e4:
41:df:52:21:bc:95:b6:bc:eb:b5:d9:95:41:b5:4f:59:eb:fb:
70:9e:a7:43:a6:19:9b:83:ee:62:3c:e2:ae:df:e7:31:ea:9a:
d7:6f:a0:ad:a3:ee:90:cc:12:6e:90:0c:f5:c4:1b:39:ee:c4:
5f:3c:8f:bd:a3:f1:26:77:74:1d:ad:5c:81:09:4f:f1:8a:5e:
92:74:61:e7:53:82:55:5f:f3:19:41:4a:1a:dd:16:7a:20:5b:
7b:d5:cd:24:66:5a:59:4b:82:2e:0c:55:b6:52:07:d6:f0:46:
a7:12:35:00:df:5c:d8:cb:89:f4:4d:42:c4:ca:91:f9:36:1a:
b9:43:7f:88:ee:ab:c3:e7:70:8e:9b:dd:f6:d2:f4:54:28:b8:
a7:eb:df:71:4d:b0:8c:3d:7d:f0:61:6d:19:fd:e6:60:a3:9d:
0e:02:c6:e2:75:9c:e8:36:fe:77:55:4e:b4:55:a7:83:47:8c:
d9:75:91:25:19:84:68:26:36:74:2e:85:b0:5a:21:8f:15:01:
88:98:3e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:12:19 2026 by rpki-client