Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e322e302f32342d3234203d3e20343032383636.roa
File: 3135392e3235332e322e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: FYyVU5mdl4sjOfIkCO8pv8zlNu2zpGJkuedMD+pdfZk=
Subject key identifier: 29:D2:AE:34:C3:BD:97:60:75:AC:A4:F5:35:E6:95:BE:86:C1:BF:48
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 5DA3A999109DE4598017848634AE3E8FF5A71B7F
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e322e302f32342d3234203d3e20343032383636.roa
Signing time: Thu 17 Sep 2026 00:24:49 +0000
ROA not before: Thu 17 Sep 2026 00:19:49 +0000
ROA not after: Thu 16 Sep 2027 00:24:49 +0000
asID: 402866
IP address blocks: 159.253.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a3:a9:99:10:9d:e4:59:80:17:84:86:34:ae:3e:8f:f5:a7:1b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Sep 17 00:19:49 2026 GMT
Not After : Sep 16 00:24:49 2027 GMT
Subject: CN=29D2AE34C3BD976075ACA4F535E695BE86C1BF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:8b:a6:d6:c8:72:36:fc:a2:3e:29:48:5e:
24:9e:d3:cf:0b:48:c8:24:69:a2:63:9b:a4:f2:9b:
16:3a:80:45:05:a8:7c:a1:a5:3c:6a:1d:9f:04:2f:
ec:be:b1:61:e0:ca:54:62:33:91:49:4d:62:33:99:
88:51:0a:0f:d1:f5:cc:ae:0a:5d:70:9b:e4:0e:4d:
7f:b4:c7:ea:f1:20:7c:9d:08:2c:47:c9:e3:d2:e1:
79:31:15:fb:f7:fb:54:a0:ff:8c:38:ba:69:1a:8f:
c2:07:0c:22:02:bb:62:f9:57:31:4e:f5:ea:68:1e:
37:5c:42:25:d6:d1:6f:32:bb:8e:53:3c:38:a5:71:
5c:ff:90:57:9e:83:d1:44:db:7c:d1:8a:b7:94:9c:
6b:e3:13:f1:e2:31:ad:af:32:0b:58:45:bc:d4:92:
5b:1d:d0:c9:0d:34:4f:fd:41:96:45:25:e6:f0:0d:
e8:d6:31:c3:21:0f:80:7a:8d:cf:09:b1:8f:a6:f4:
2c:2e:65:6a:12:25:d5:b6:0b:47:cf:f5:42:31:f7:
a4:5a:cf:b4:7f:2e:e2:77:70:d0:53:e4:85:a6:61:
90:f6:c1:37:eb:a1:33:b0:71:d7:06:11:9c:13:98:
d7:f5:34:6e:b3:d2:6d:5f:08:39:9d:49:e2:ad:3a:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D2:AE:34:C3:BD:97:60:75:AC:A4:F5:35:E6:95:BE:86:C1:BF:48
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e322e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:37:25:5c:58:2d:97:34:c9:44:f4:ce:f0:0d:35:fc:8e:f9:
d4:28:21:a7:59:36:69:87:e2:93:8f:4d:97:3f:eb:b9:81:70:
00:49:aa:73:0c:fc:70:53:2f:b1:8e:49:1f:72:21:00:db:e2:
c8:46:d0:d9:3a:0e:53:fa:63:98:53:5d:33:3c:9b:08:7b:fa:
c4:54:c0:ce:a9:fc:28:c0:6c:2e:ce:64:dd:b8:39:63:5f:21:
4d:b2:55:e9:73:70:e8:47:23:70:67:b9:6f:6d:8a:ee:56:ee:
e0:55:12:20:ec:90:12:1c:c2:78:bc:1e:3a:67:25:8e:ad:c9:
5c:2d:05:2a:06:e0:06:a8:3a:0f:a1:25:87:02:50:d5:46:ab:
df:5f:5d:71:a6:66:6e:ff:e0:da:94:84:30:2c:9a:d4:f0:73:
59:3b:22:4f:a7:16:df:49:e0:eb:6f:ca:38:0f:d5:ab:d4:aa:
a3:fd:4c:c5:61:ea:b9:58:58:e4:b2:44:3a:6e:a3:8d:51:d5:
7c:21:81:ea:f4:69:19:58:b0:3b:e7:c4:28:38:14:2b:cf:1e:
d6:af:96:88:86:44:56:fa:db:67:4e:f2:64:0d:a1:20:e1:a4:
78:44:5d:df:52:21:6d:18:02:0d:db:be:7c:1d:28:69:5d:cd:
a0:95:35:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:48 2026 by rpki-client