Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e352e302f32342d3234203d3e203134323933.roa
File: 3135392e3235332e352e302f32342d3234203d3e203134323933.roa (raw, json)
Hash identifier: cEWWq+vWvz0QGTuKyKpL/mU+zo1QSPHamrvnYlsxURw=
Subject key identifier: F4:97:23:3A:F3:58:5A:30:34:1F:03:F4:41:74:E2:CC:30:E9:56:EE
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 22E760538B5E74241F8CB6574CDF36BB1FD63DD9
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e352e302f32342d3234203d3e203134323933.roa
Signing time: Wed 21 Oct 2026 06:11:00 +0000
ROA not before: Wed 21 Oct 2026 06:06:00 +0000
ROA not after: Wed 20 Oct 2027 06:11:00 +0000
asID: 14293
IP address blocks: 159.253.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 00:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e7:60:53:8b:5e:74:24:1f:8c:b6:57:4c:df:36:bb:1f:d6:3d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Oct 21 06:06:00 2026 GMT
Not After : Oct 20 06:11:00 2027 GMT
Subject: CN=F497233AF3585A30341F03F44174E2CC30E956EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:6d:98:1a:9c:bd:c4:0a:ed:44:05:ce:99:
c5:6c:71:3f:58:29:ca:45:2a:6b:bb:38:91:f5:d7:
1b:6a:71:94:e6:5e:a0:7f:44:3b:02:7b:4e:d3:2b:
fe:38:a7:d4:68:4b:46:e5:40:f7:1a:fc:80:1b:5d:
11:47:c9:86:70:e4:67:03:d9:34:11:b5:19:20:de:
1f:61:94:d0:ec:3b:a9:58:a6:f1:af:fe:c1:58:ff:
3c:1e:dc:18:9b:a2:41:24:df:99:c6:a1:23:73:58:
93:ee:d8:9e:b2:9b:e2:dc:31:41:1d:ea:9a:0d:ed:
43:1f:06:50:80:65:b7:93:e1:0c:3a:3f:a6:ba:b3:
19:71:e5:67:f7:cd:0f:7f:ae:a1:31:00:d3:cb:9d:
48:7d:23:5d:88:45:78:97:d3:e8:35:9f:71:83:5e:
64:ad:53:11:bc:a1:71:22:8d:7c:25:2a:4a:d9:35:
53:4d:2e:93:86:56:52:80:f2:fd:d8:56:94:15:db:
5d:84:f0:74:5b:07:96:e0:f4:61:16:26:4f:cb:d5:
cb:80:b5:0c:02:28:b0:bb:c9:e2:08:ef:cb:ec:fb:
1d:de:dd:04:ce:d8:1e:56:50:ea:19:92:e0:d3:b7:
61:55:e7:54:9d:72:0c:72:b1:9c:93:01:1c:a8:3e:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:97:23:3A:F3:58:5A:30:34:1F:03:F4:41:74:E2:CC:30:E9:56:EE
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e352e302f32342d3234203d3e203134323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.5.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0e:12:eb:52:cd:a2:5f:75:5b:2b:0b:21:57:15:17:65:b1:
ad:17:be:a6:e0:98:95:a6:81:f0:af:b5:78:f9:95:df:4f:3d:
b9:e5:54:63:7f:c7:bb:69:9d:2a:69:87:3a:56:e6:d0:4c:10:
d1:c8:02:d4:55:8b:6d:67:bd:e8:3f:bc:7f:42:08:8b:58:3f:
74:73:79:4d:83:be:f4:21:d5:9c:cb:cd:ca:5b:09:c4:8f:fe:
a4:9e:fb:b1:26:c3:eb:03:ce:a3:f7:94:4e:c2:97:36:ec:75:
34:4a:8f:d4:28:7e:e1:a3:96:fe:12:07:ef:98:38:4b:90:ac:
91:47:34:f7:66:1d:1d:7c:39:fa:cb:46:9b:db:4b:e6:cd:e4:
14:11:a5:06:24:96:a1:88:ab:5c:22:41:6a:23:88:b6:19:05:
42:d1:0e:7f:17:1f:d1:98:5a:6e:d3:a5:e4:4a:8d:97:99:56:
4d:6e:0d:8f:83:78:df:e4:82:12:d3:66:f5:cb:27:45:6f:51:
85:d7:21:80:4b:5b:95:94:58:04:2b:0d:dd:8e:6d:49:c4:15:
d3:c8:35:b7:cb:27:8d:e6:fb:b4:47:89:cc:f0:c6:03:1f:7d:
c1:75:7d:20:44:af:06:49:04:f3:0d:ab:52:30:d6:3b:e6:f7:
cc:21:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 13:00:15 2026 by rpki-client