Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/39312e3233332e382e302f32342d3234203d3e20383334.roa
File: 39312e3233332e382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: KqURV+5I9QVm5WiEyHoQ2zXtvlhZ5/goGAL788if0uA=
Subject key identifier: 14:8D:10:A2:14:F3:07:08:5F:5C:FB:A4:AD:04:9C:0D:97:45:61:C0
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 4DED06DE1304F250E63CDCBE44A9988E072637DD
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/39312e3233332e382e302f32342d3234203d3e20383334.roa
Signing time: Tue 07 Jul 2026 08:15:50 +0000
ROA not before: Tue 07 Jul 2026 08:10:50 +0000
ROA not after: Tue 06 Jul 2027 08:15:50 +0000
asID: 834
IP address blocks: 91.233.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ed:06:de:13:04:f2:50:e6:3c:dc:be:44:a9:98:8e:07:26:37:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Jul 7 08:10:50 2026 GMT
Not After : Jul 6 08:15:50 2027 GMT
Subject: CN=148D10A214F307085F5CFBA4AD049C0D974561C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:2e:82:f4:e7:d0:87:63:0f:13:02:ab:27:
66:fd:6c:97:2f:13:f2:d6:c7:9d:87:4a:9c:ae:70:
44:d4:a0:46:76:ef:69:71:c5:69:11:3f:2a:a8:5d:
42:67:c6:6f:4c:d5:e9:20:2c:b9:f2:58:98:2e:53:
3d:7f:77:2a:ee:ca:8f:41:33:7a:7f:82:ef:fe:e6:
ba:b7:16:81:ae:5b:35:a1:fb:44:f7:24:12:27:d3:
30:72:56:44:6e:d9:1d:c3:3b:92:ef:27:37:08:aa:
3a:0e:66:e7:69:1c:84:13:00:35:6c:85:75:77:1c:
a2:9b:42:54:e8:66:e4:0c:75:b8:af:8e:bc:bb:e8:
e2:4c:51:de:37:c4:95:2e:a4:a9:79:b5:a1:3a:42:
db:9b:76:fb:17:f6:89:60:08:bf:95:17:dc:3a:0d:
b0:69:1b:88:84:d2:57:b3:d8:c1:61:51:90:70:61:
d2:f2:57:9a:72:db:da:58:31:33:87:a1:ff:13:9e:
54:a2:0f:76:be:e0:00:66:18:b6:03:c3:6a:f5:a7:
ae:bd:be:ac:3e:91:31:9d:30:92:95:96:6e:a9:a0:
8c:13:d1:a3:3c:d4:c2:4a:5c:5c:d0:e0:8a:bc:88:
fe:62:9d:a4:50:ac:4c:d0:85:12:25:ae:e4:27:47:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8D:10:A2:14:F3:07:08:5F:5C:FB:A4:AD:04:9C:0D:97:45:61:C0
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/39312e3233332e382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.8.0/24
Signature Algorithm: sha256WithRSAEncryption
28:93:f2:cb:c1:70:08:94:bf:dd:d2:d2:a2:f4:55:3e:37:3e:
02:b2:9e:6e:32:fd:ba:d7:e7:77:6e:f8:4e:1e:b1:6a:29:08:
a8:69:7f:2d:1f:ec:48:37:f7:de:00:9c:45:b2:67:dc:ca:61:
af:06:e2:58:38:2a:60:f4:17:0b:6d:53:18:58:6c:99:71:a3:
f3:bb:19:d6:12:61:91:53:b5:07:cc:8e:84:0d:22:3f:2a:cb:
e5:01:57:e2:a2:89:15:33:0b:56:4c:5e:3d:41:25:ee:b5:2c:
20:1f:e5:c3:53:f1:51:72:2e:71:4a:47:df:05:f7:40:cf:0e:
a0:ed:de:a3:48:4d:60:a1:1d:83:d5:31:7e:95:31:17:67:ab:
d0:9f:80:5a:57:38:bd:b4:02:04:c0:ca:ce:d2:90:7b:a2:fd:
d0:53:37:cc:5a:1e:f4:34:67:b0:9d:4d:60:55:80:26:92:f2:
12:94:d0:ab:4e:6e:fa:d8:6a:2c:08:2a:c4:32:fc:cd:69:ba:
4f:ab:1e:5e:24:bd:6b:d1:96:cf:63:c6:e0:76:a2:42:8a:72:
56:5c:ce:e7:cd:cc:32:24:0f:66:24:c9:7f:fd:0f:2e:94:51:
0f:59:76:19:49:cc:94:1a:8f:5b:fb:c4:4d:ac:28:f7:34:a0:
1f:b7:d8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:50:03 2026 by rpki-client