Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa
File: 3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa (raw, json)
Hash identifier: VKu+iyAXdNGspkh1hqCECAzpccaJ3+JyjcRyNO0/DAw=
Subject key identifier: B0:8D:F6:E7:AB:A7:55:A7:34:31:B7:B9:EF:39:B7:A5:E7:13:A3:34
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 56CEC2568F88B9EEB76FD9EBE3B085349B62DD32
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa
Signing time: Fri 15 May 2026 13:07:53 +0000
ROA not before: Fri 15 May 2026 13:02:53 +0000
ROA not after: Fri 14 May 2027 13:07:53 +0000
asID: 62068
IP address blocks: 194.124.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ce:c2:56:8f:88:b9:ee:b7:6f:d9:eb:e3:b0:85:34:9b:62:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: May 15 13:02:53 2026 GMT
Not After : May 14 13:07:53 2027 GMT
Subject: CN=B08DF6E7ABA755A73431B7B9EF39B7A5E713A334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:e8:58:e4:37:4d:9a:a7:6c:ae:09:94:a9:
bd:82:07:97:b8:9d:09:6a:2a:03:63:85:43:c3:7a:
68:a3:67:b7:55:c3:d4:ca:0e:66:00:e5:d0:65:4e:
f4:dd:cb:83:7e:71:62:81:9e:a2:b9:90:b4:2f:3d:
b5:85:6a:c4:99:bd:c1:0d:a3:22:7f:2f:53:4b:92:
a5:e7:a7:51:96:b8:29:36:73:7c:5b:27:65:91:b5:
00:05:a5:01:96:0a:3b:df:18:8a:b7:75:8b:12:df:
12:58:33:7b:89:ce:38:db:e1:3e:3b:4f:ba:a9:95:
d2:76:5e:00:25:9d:a8:f0:07:75:21:02:a7:3a:3c:
f6:69:f2:65:99:0e:4e:cf:2a:a4:5a:bb:b7:92:3e:
31:a1:6f:6c:f7:1f:52:34:ef:d0:ed:f8:25:d3:96:
65:a6:24:d4:79:4b:6b:69:27:b3:74:53:d7:7f:97:
67:64:b1:39:29:3e:47:79:82:b1:1c:52:91:56:97:
b4:3c:0f:1a:ce:4d:cb:91:03:9b:a4:8f:b7:30:31:
f7:7b:e3:08:2d:86:41:18:d0:dc:40:84:e1:8a:8e:
31:12:01:9a:c4:ca:ed:ad:f7:86:d7:46:36:92:c9:
7e:12:cf:e0:99:7a:d7:33:0b:0d:c3:03:8d:98:b3:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8D:F6:E7:AB:A7:55:A7:34:31:B7:B9:EF:39:B7:A5:E7:13:A3:34
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.234.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:97:22:e9:2a:c1:22:ae:58:ba:e4:e4:67:1e:0c:48:cf:8d:
b6:89:91:d0:3a:8a:9a:7e:32:f4:56:4d:2f:b7:ec:4e:0f:f9:
8b:af:13:71:50:96:0b:54:7e:21:71:be:a7:fa:a6:1f:1c:7f:
26:50:36:74:c3:ba:17:69:bd:ff:47:e5:02:1d:b0:28:60:bc:
b4:c7:da:e4:a0:a1:b3:05:e1:56:c1:fa:8c:7a:db:f6:a2:84:
04:1c:4c:0b:ba:a2:00:00:72:43:b2:9b:93:11:60:39:8e:53:
c9:07:8e:00:97:da:94:44:50:f0:a1:e8:ee:e4:2a:77:c4:18:
b7:c7:20:9d:09:0b:0f:ce:f9:fe:e9:cb:db:7a:4a:a2:9c:af:
4e:06:df:4f:de:57:21:cf:4c:df:ee:d6:c6:a9:20:ff:45:26:
54:04:9f:fc:a3:e9:eb:6d:99:28:99:48:c7:40:18:a5:3f:75:
8e:07:d0:c4:3a:8f:58:7c:49:1b:7e:a7:a1:4e:67:42:90:a7:
29:a9:8d:a3:40:01:59:35:73:e5:2c:c9:48:c8:3a:90:bd:6a:
9d:5c:93:4a:28:4b:7b:f0:e6:17:08:d1:11:2c:07:30:c4:bb:
33:a3:88:ef:7f:18:b1:e9:d0:18:b6:49:a5:ff:da:e6:3f:15:
11:59:40:9d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUVs7CVo+Iue63b9nr47CFNJti3TIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz
MzdjY2FhYzAeFw0yNjA1MTUxMzAyNTNaFw0yNzA1MTQxMzA3NTNaMDMxMTAvBgNV
BAMTKEIwOERGNkU3QUJBNzU1QTczNDMxQjdCOUVGMzlCN0E1RTcxM0EzMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkLOhY5DdNmqdsrgmUqb2CB5e4
nQlqKgNjhUPDemijZ7dVw9TKDmYA5dBlTvTdy4N+cWKBnqK5kLQvPbWFasSZvcEN
oyJ/L1NLkqXnp1GWuCk2c3xbJ2WRtQAFpQGWCjvfGIq3dYsS3xJYM3uJzjjb4T47
T7qpldJ2XgAlnajwB3UhAqc6PPZp8mWZDk7PKqRau7eSPjGhb2z3H1I079Dt+CXT
lmWmJNR5S2tpJ7N0U9d/l2dksTkpPkd5grEcUpFWl7Q8DxrOTcuRA5ukj7cwMfd7
4wgthkEY0NxAhOGKjjESAZrEyu2t94bXRjaSyX4Sz+CZetczCw3DA42Ys9udAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUsI3256unVac0Mbe57zm3pecTozQwHwYDVR0j
BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm
MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO
OHlxdy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgt
N2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhmMDZlLzAvMzEzOTM0MmUzMTMyMzQyZTMy
MzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzIzMDM2Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCfOowDQYJKoZIhvcNAQELBQADggEBAF2XIukqwSKuWLrk5GceDEjPjbaJkdA6
ipp+MvRWTS+37E4P+YuvE3FQlgtUfiFxvqf6ph8cfyZQNnTDuhdpvf9H5QIdsChg
vLTH2uSgobMF4VbB+ox62/aihAQcTAu6ogAAckOym5MRYDmOU8kHjgCX2pREUPCh
6O7kKnfEGLfHIJ0JCw/O+f7py9t6SqKcr04G30/eVyHPTN/u1sapIP9FJlQEn/yj
6ettmSiZSMdAGKU/dY4H0MQ6j1h8SRt+p6FOZ0KQpympjaNAAVk1c+UsyUjIOpC9
ap1ck0ooS3vw5hcI0REsBzDEuzOjiO9/GLHp0Bi2SaX/2uY/FRFZQJ0=
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:46 2026 by rpki-client