Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e20343032323537.roa
File: 3139342e3132342e3233342e302f32342d3234203d3e20343032323537.roa (raw, json)
Hash identifier: 5rmxgyIU21hGeEtmNvOYYXEGrcLd8Upf4P8MtYYDSlk=
Subject key identifier: 49:6E:A7:4C:27:7C:AE:A0:16:B7:46:49:91:25:04:63:19:49:64:96
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 5EFA8A9585120B13ADFB9F68980C4E53CB73F898
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e20343032323537.roa
Signing time: Fri 03 Apr 2026 18:19:02 +0000
ROA not before: Fri 03 Apr 2026 18:14:02 +0000
ROA not after: Fri 02 Apr 2027 18:19:02 +0000
asID: 402257
IP address blocks: 194.124.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Apr 2026 08:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:fa:8a:95:85:12:0b:13:ad:fb:9f:68:98:0c:4e:53:cb:73:f8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: Apr 3 18:14:02 2026 GMT
Not After : Apr 2 18:19:02 2027 GMT
Subject: CN=496EA74C277CAEA016B746499125046319496496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:3e:50:7f:e1:d0:33:86:79:9f:bb:8d:2b:
64:fe:cd:74:2a:c4:81:29:c0:19:57:fa:77:40:29:
3c:2a:30:06:e5:a2:e1:91:1a:a6:f0:68:c6:aa:da:
38:3d:cf:cc:c9:c6:ce:0b:08:70:60:d9:03:ec:cb:
d4:4d:a8:85:86:ed:08:d9:c2:21:d1:0c:2e:26:ed:
a2:79:71:0e:f1:5b:56:24:5f:24:55:1e:21:aa:d3:
66:67:97:6d:8e:75:61:8e:37:07:06:60:3f:b8:b3:
45:6d:02:66:1a:b9:25:e1:a6:38:50:80:d3:f4:41:
92:36:28:2b:58:b0:ac:72:d0:40:81:ab:56:1b:9b:
be:75:80:dc:d1:32:fc:c0:69:96:2c:66:c5:92:e9:
4d:46:3d:25:80:88:c3:6e:c8:43:76:11:9d:ce:bd:
4c:ad:18:bc:61:9b:f7:be:bf:43:28:97:c9:2b:10:
50:2e:12:60:86:37:01:94:ba:0e:98:76:93:15:05:
5e:e1:fe:9a:79:20:6d:79:e0:3a:d4:04:91:bf:a3:
89:0f:1e:8a:cd:2e:96:18:bc:ca:08:79:10:76:dd:
cf:05:ec:f9:1a:c7:49:8d:a8:80:a5:a9:95:f4:db:
15:68:b2:11:e3:05:75:5f:d2:c5:d6:70:78:5c:44:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:A7:4C:27:7C:AE:A0:16:B7:46:49:91:25:04:63:19:49:64:96
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e20343032323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.234.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b2:fd:e5:5d:f3:68:20:e1:97:11:e3:02:6e:e5:1a:f0:38:
5f:24:8e:da:86:09:68:39:5c:a8:fb:fc:c7:77:35:f9:62:3c:
cf:e6:62:ce:04:7c:03:b3:b0:8b:c1:7e:e9:19:f6:90:24:3e:
8d:c8:54:41:a0:a4:16:0d:08:3c:02:a7:a6:da:b9:f2:4a:a1:
12:25:4a:46:a9:b9:24:cb:00:62:ab:84:59:e4:d3:ec:c5:f3:
63:85:7d:47:2b:82:98:94:c2:1c:a6:6d:ef:7a:c5:d7:56:f4:
f1:2c:26:fa:83:57:40:91:7f:e7:8d:24:e5:75:ca:55:e7:35:
17:db:73:fe:17:12:ba:e3:c8:8a:4f:39:2f:a2:d3:48:33:17:
0d:e7:a5:32:3d:a6:5e:29:74:b1:1b:3b:46:56:f1:b0:c4:7c:
ed:71:17:fb:32:a4:ed:68:27:48:06:bc:77:02:9b:8c:c1:4c:
5e:66:0d:02:67:c0:8f:1c:e5:73:3b:20:c0:03:3b:83:c2:09:
c3:8d:cd:7a:76:62:0e:13:22:34:3f:30:08:8a:62:d5:dd:e4:
8d:b9:c1:11:13:c4:7d:cf:2b:b0:07:7e:10:c8:2e:79:14:c5:
48:6d:70:7a:39:a5:49:91:f3:27:d0:dd:1e:43:3f:6a:fc:8b:
99:52:38:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 16:56:28 2026 by rpki-client