Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e352e302f32342d3234203d3e20313336383039.roa
File: 3135392e3235332e352e302f32342d3234203d3e20313336383039.roa (raw, json)
Hash identifier: PGSNBJZSgEZXHxWLsVpaBOMQuMv7Jf7lmre9ZMG017M=
Subject key identifier: E6:3F:6E:55:42:46:15:43:AE:68:F2:F5:D5:1C:06:8B:4E:91:BA:40
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 7D16F28088DC9A18161D0FCCB7C0E12343759BD5
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e352e302f32342d3234203d3e20313336383039.roa
Signing time: Wed 21 Oct 2026 06:14:31 +0000
ROA not before: Wed 21 Oct 2026 06:09:31 +0000
ROA not after: Wed 20 Oct 2027 06:14:31 +0000
asID: 136809
IP address blocks: 159.253.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:16:f2:80:88:dc:9a:18:16:1d:0f:cc:b7:c0:e1:23:43:75:9b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Oct 21 06:09:31 2026 GMT
Not After : Oct 20 06:14:31 2027 GMT
Subject: CN=E63F6E5542461543AE68F2F5D51C068B4E91BA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:53:3c:53:b5:e8:a3:1e:36:2b:64:93:3d:
65:33:db:ec:29:bf:6c:ca:84:e5:e8:8e:b9:55:ed:
a8:f5:b4:f8:9d:8a:c1:96:dd:f3:6f:b9:4f:70:c1:
83:4b:17:e0:9b:cd:23:c8:e4:ff:4d:b1:fc:07:1d:
c8:03:b1:11:1e:af:2c:38:d7:f7:c3:6f:ec:8d:8f:
18:fa:25:a5:c6:4d:c1:83:4f:80:17:f7:1c:83:f3:
15:28:aa:4e:65:fc:8f:80:c8:a1:aa:ff:2f:d4:37:
93:e7:d9:1e:c1:04:72:03:9d:71:06:95:95:50:9c:
81:d8:ee:19:04:83:9c:b7:e4:41:97:27:f9:61:04:
d1:91:5d:aa:4e:67:f1:f3:9b:80:ba:b5:2b:fa:30:
50:90:ee:50:a6:41:a3:b0:17:31:e6:11:02:e2:f2:
41:61:9c:7e:ad:4f:51:9b:7b:45:1d:ec:39:7f:4f:
e2:af:20:45:5a:bb:da:bf:94:9d:8a:94:52:c4:76:
ce:a3:83:93:55:d5:0f:1f:60:13:8a:17:ea:8a:55:
dc:4c:9b:5b:99:6b:b6:7b:42:1e:06:f3:f4:94:a4:
32:19:2e:db:a1:53:f9:73:69:d0:b6:c2:4e:e1:f1:
ee:23:51:50:a2:35:2c:01:4a:bc:53:74:e0:4f:dd:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3F:6E:55:42:46:15:43:AE:68:F2:F5:D5:1C:06:8B:4E:91:BA:40
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e352e302f32342d3234203d3e20313336383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.5.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1e:78:20:0d:5c:e2:fa:9c:2e:59:bf:30:f6:b8:c8:03:2e:
d4:62:98:4d:8a:60:49:07:e9:51:18:4a:8b:3e:20:13:63:85:
49:18:5a:91:0e:63:b3:eb:3e:26:7f:92:78:52:63:ba:8c:4d:
89:3a:3b:56:38:f7:de:69:4a:f4:11:39:af:02:cf:11:76:ad:
65:a2:da:b9:31:c0:04:45:ea:99:69:93:12:07:1b:e0:55:33:
2e:da:39:20:1b:d2:50:a3:f9:c4:6a:2f:e3:ab:78:7c:3a:e0:
52:2f:30:c5:06:b0:5a:44:40:3d:8c:42:9c:0c:31:9c:e5:ec:
cf:ca:08:dc:a9:13:ba:b6:d7:ee:1e:62:61:6c:a2:f7:09:d6:
d9:f0:dc:57:dd:9c:28:e8:01:95:24:04:b0:c7:5b:0c:c7:07:
c9:9e:a0:df:1a:9d:4a:c8:2a:df:ee:31:18:b8:24:41:58:57:
f8:1f:da:af:52:91:47:f5:8f:0d:c4:ab:ae:b4:b0:3a:5c:d4:
01:1b:57:84:f3:43:9e:0d:c7:cb:7c:95:76:39:4a:76:d5:b0:
f5:fc:57:89:45:28:70:73:1f:e6:e3:f4:89:09:bd:85:40:e2:
e8:3a:b6:2a:72:34:85:9a:8b:ba:fc:23:ae:e5:a4:da:d0:21:
37:c7:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:54 2026 by rpki-client