Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa
File: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (raw, json)
Hash identifier: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=
Subject key identifier: 32:94:62:99:43:B7:A5:4F:19:32:5A:44:CC:C5:6A:6F:58:03:96:FE
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 77BEDF1177B8B74D5C8D8D1D175C5946F062A063
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa
Signing time: Mon 09 Mar 2026 17:58:15 +0000
ROA not before: Mon 09 Mar 2026 17:53:15 +0000
ROA not after: Mon 08 Mar 2027 17:58:15 +0000
asID: 200558
IP address blocks: 194.117.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:be:df:11:77:b8:b7:4d:5c:8d:8d:1d:17:5c:59:46:f0:62:a0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Mar 9 17:53:15 2026 GMT
Not After : Mar 8 17:58:15 2027 GMT
Subject: CN=3294629943B7A54F19325A44CCC56A6F580396FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:04:64:b4:92:22:69:6c:01:70:25:79:ea:
ea:35:08:f3:db:7d:f5:74:b2:43:e9:58:64:af:81:
33:7b:ec:a3:6f:fc:85:45:e7:24:6d:ea:53:c4:7c:
f0:4e:73:e7:38:e0:72:98:7f:a7:dd:0c:7f:14:a2:
95:02:ee:9a:b6:a2:5a:7b:28:2f:e1:0f:e0:d0:32:
3f:7c:74:fc:ec:d5:df:2d:9b:e7:50:c9:4a:c0:86:
9c:24:e9:32:23:78:35:0c:7a:91:e7:1c:ac:c3:17:
32:ce:86:1a:cf:76:8c:85:2a:de:52:bb:8b:20:31:
de:83:d6:b9:71:a5:4e:b5:3b:54:8d:0d:5f:f6:da:
d3:00:c7:ce:5c:61:cf:13:0d:74:4d:b1:d5:7c:bc:
54:7f:b1:42:f6:33:ce:ed:4b:85:2c:8e:3f:08:32:
fb:75:09:08:3e:2a:4d:4d:b4:1d:39:d2:b4:38:a0:
f3:9d:3f:72:ae:8e:83:d8:2c:28:24:3a:0a:5b:79:
a5:64:24:30:f4:35:3b:73:7e:6c:84:b1:d8:c1:ef:
97:75:56:12:58:1c:2a:fa:ad:81:76:53:7d:9e:9f:
d5:e4:52:2e:76:9c:9a:98:5b:af:03:6a:9f:b1:8f:
d1:94:72:d3:43:1b:b9:e7:6b:6f:2f:3e:b8:b9:0c:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:94:62:99:43:B7:A5:4F:19:32:5A:44:CC:C5:6A:6F:58:03:96:FE
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.69.0/24
Signature Algorithm: sha256WithRSAEncryption
76:de:89:3e:57:99:30:81:a8:c7:af:96:6b:af:1b:82:09:0a:
ad:2f:f5:cd:12:29:95:30:47:d5:b4:b5:0d:0c:f0:53:1d:92:
ba:f0:dc:09:8c:3f:7d:8e:50:1d:3c:9f:da:f4:7a:62:17:07:
d7:20:d8:84:09:71:e6:64:b9:47:ca:b8:ac:be:34:a6:3d:a2:
b4:5c:3e:76:9f:64:a2:8f:06:b3:0c:5c:fb:1b:7a:8f:9d:01:
a0:e3:fb:0c:44:e1:89:88:85:b1:c3:0b:c8:ef:96:b8:45:b4:
65:9f:ee:ae:31:65:43:46:a6:ea:b9:c9:14:ee:2a:49:05:eb:
62:9d:8e:7a:33:99:73:72:46:f7:ae:09:2f:66:4c:7f:56:0f:
c5:a3:8f:95:8a:af:dd:c3:29:ec:20:ba:15:b6:6b:17:e5:c2:
85:dc:0e:d4:f6:e6:21:d6:38:66:f3:b3:c9:01:06:48:55:93:
4c:cd:03:5e:06:50:61:e9:be:34:3c:61:e2:ab:87:ee:7c:1f:
1c:55:45:ae:3c:1d:97:e6:75:60:cc:95:24:dd:92:89:25:f8:
f8:99:c7:42:af:52:44:c8:86:02:51:48:ae:d0:18:56:fa:ed:
b2:7c:0e:ce:29:29:65:f1:46:65:31:a6:23:2c:79:6a:bf:ad:
43:2a:14:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 07:34:52 2026 by rpki-client