Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/39312e3233332e382e302f32342d3234203d3e20323031313736.roa
File: 39312e3233332e382e302f32342d3234203d3e20323031313736.roa (raw, json)
Hash identifier: wzKtIRDjRPVigGpHFhaz5HY0EdB8HLq9qyL0oMExQus=
Subject key identifier: 22:49:2F:27:BA:79:60:79:60:50:B2:E1:97:BD:64:6A:AF:DE:8D:8C
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 65FAC098A377E113FCC6C1EFE88931B05D51046D
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/39312e3233332e382e302f32342d3234203d3e20323031313736.roa
Signing time: Wed 08 Jul 2026 13:47:56 +0000
ROA not before: Wed 08 Jul 2026 13:42:56 +0000
ROA not after: Wed 07 Jul 2027 13:47:56 +0000
asID: 201176
IP address blocks: 91.233.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:fa:c0:98:a3:77:e1:13:fc:c6:c1:ef:e8:89:31:b0:5d:51:04:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Jul 8 13:42:56 2026 GMT
Not After : Jul 7 13:47:56 2027 GMT
Subject: CN=22492F27BA7960796050B2E197BD646AAFDE8D8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:9f:b0:bc:3f:50:bc:67:a1:3c:b2:d4:16:
78:b1:66:f4:f2:ec:c2:66:54:3c:7d:90:4f:d8:35:
1d:f9:fa:b8:c1:7b:aa:74:66:9b:ff:83:c3:dd:6e:
bb:a5:80:5c:8d:99:62:1d:b7:77:f3:22:13:13:45:
37:30:d4:9f:cf:3c:03:38:6b:c7:49:dc:33:57:f6:
8d:1a:39:06:f6:6b:1e:14:d6:07:c2:ff:0d:b0:68:
be:62:8c:74:29:3f:25:43:5c:f1:04:85:38:35:bb:
f8:7a:64:1b:f4:7a:0e:c8:48:fa:2d:d4:a7:f6:3f:
c5:a1:4d:47:66:1e:c3:b7:23:71:83:78:e8:fb:b3:
87:75:26:c8:19:9c:9a:cb:38:dc:1c:00:c1:74:0b:
55:4f:a0:49:36:57:3d:c5:92:b1:34:b5:da:2c:b8:
fd:91:1c:9a:10:34:0b:a1:41:c6:a9:3f:b0:64:e6:
1b:1a:a0:a9:9e:e6:d0:62:8f:2d:20:2e:ec:3e:20:
7e:fb:bf:68:a5:b1:c5:70:cc:a5:9b:6d:be:9e:87:
f3:90:aa:39:43:cd:be:28:89:0c:10:85:88:a8:cd:
13:44:e3:ff:bf:94:e7:16:a3:40:f8:67:b7:ee:81:
eb:58:cc:41:22:7c:2f:a7:28:92:aa:c4:1f:c7:e5:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:49:2F:27:BA:79:60:79:60:50:B2:E1:97:BD:64:6A:AF:DE:8D:8C
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/39312e3233332e382e302f32342d3234203d3e20323031313736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:c1:cc:e3:77:b3:f0:86:e6:d4:96:41:d3:24:bf:e7:e7:97:
0b:4c:fe:0e:da:19:c4:cb:92:d9:83:6f:11:03:03:64:6b:52:
b0:41:4d:60:56:66:2f:3f:fe:d6:43:6d:93:ba:21:46:3f:42:
52:f2:dd:ec:63:95:6f:cd:bb:e6:15:70:7f:b0:15:3a:e8:be:
ba:64:b4:6b:dd:bd:0c:6e:01:d0:fd:14:3e:41:fa:76:69:a3:
4c:83:87:e2:83:26:bf:31:00:bb:79:16:ae:2e:27:5b:0c:03:
f3:0e:4f:b7:f0:96:4c:0a:b8:d8:24:2f:cb:9c:b1:98:08:c8:
e8:23:61:07:5d:b5:0a:03:a1:fc:22:b8:67:bb:42:c2:45:29:
13:35:c3:97:88:6e:f8:f8:b6:ea:9b:d2:d3:25:a0:51:f5:e5:
00:78:ee:5b:b8:f5:bc:55:f2:08:9a:73:47:b2:15:24:f1:8c:
e2:f5:4b:87:24:af:98:a3:eb:0e:16:be:7a:2b:e3:a9:88:d3:
08:e9:7c:30:e6:01:0e:d6:74:9d:d2:ca:e6:be:6d:42:5a:90:
d8:2b:d1:25:84:c6:04:97:8c:64:e7:1a:61:91:7f:bd:7f:8e:
3b:8c:0d:2a:e4:27:0d:f2:e5:b1:59:a6:7c:92:68:49:a4:84:
af:63:69:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:10 2026 by rpki-client