Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e372e302f32342d3234203d3e20323134313433.roa
File: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: JtG4bGqngMfE8O320eBz6O9EBwgWNp5pkU9qHk7R/PY=
Subject key identifier: 4E:B1:56:68:B8:91:BD:AE:4E:22:1F:6F:A4:0D:6E:31:67:48:31:48
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 401055C0CA95F52EFB6694F439AAE4508785C9EF
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e372e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 21 May 2026 12:47:15 +0000
ROA not before: Thu 21 May 2026 12:42:15 +0000
ROA not after: Thu 20 May 2027 12:47:15 +0000
asID: 214143
IP address blocks: 159.253.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:10:55:c0:ca:95:f5:2e:fb:66:94:f4:39:aa:e4:50:87:85:c9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: May 21 12:42:15 2026 GMT
Not After : May 20 12:47:15 2027 GMT
Subject: CN=4EB15668B891BDAE4E221F6FA40D6E3167483148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:52:70:c0:f4:84:d2:d0:05:ad:ac:15:1d:fa:
30:b4:d9:f7:5a:4c:f5:62:65:8f:7d:d8:5e:45:f1:
66:9c:23:00:46:d5:54:99:ef:7f:de:0f:ef:63:85:
5a:a2:1a:c9:b3:65:49:51:98:a1:d1:33:e9:f5:12:
8c:a0:6c:b1:3e:77:7a:89:d1:d0:61:d0:55:fd:3f:
f4:48:e6:f1:56:38:fd:44:8f:c0:5b:fb:c4:d1:e4:
4d:b7:80:8a:ce:5c:ee:81:78:1a:2d:c4:3f:6c:62:
bb:03:62:d4:b4:cc:a0:f6:ec:ee:76:23:a5:1c:1e:
aa:e7:7d:e6:77:f1:a5:35:5d:73:d1:07:06:43:1b:
9d:18:8b:84:50:d4:08:6e:ed:8f:69:9b:a2:ab:ff:
e5:70:4d:9d:49:c4:d6:a4:ba:11:44:95:99:c7:3a:
f9:03:69:30:97:60:88:c1:a2:4d:62:e1:5c:4e:13:
82:92:1c:e0:c4:cc:46:9f:f9:73:c4:5b:59:2d:36:
3e:16:77:24:d2:e2:15:41:34:58:55:fc:ca:ed:8f:
68:0e:c1:57:6d:d1:5e:de:16:7e:83:fc:20:e2:0b:
72:da:ba:d6:f6:1c:8a:19:ba:4b:07:43:50:a2:23:
f0:de:bb:20:6d:45:20:83:9f:c9:f6:bb:d1:3e:57:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B1:56:68:B8:91:BD:AE:4E:22:1F:6F:A4:0D:6E:31:67:48:31:48
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e372e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:36:91:cd:7e:51:0a:9f:96:7e:a1:fc:f1:4e:31:ff:1f:5e:
f5:f5:63:0e:20:1e:1c:4f:1c:b7:38:4e:e2:4b:2e:95:e9:65:
b7:1e:2b:e9:13:1e:39:0f:64:76:2d:29:b0:86:e9:fa:c8:9c:
22:c5:39:5a:8d:27:4d:76:48:a7:a7:f4:cf:d9:cc:8d:2c:47:
2d:3a:fc:1e:27:e9:9d:e2:87:ac:96:31:97:bb:3c:c9:1a:4d:
b3:8a:17:c5:f1:df:ae:8a:b1:14:1b:d5:e1:14:8d:72:cb:56:
a3:b0:97:d2:9d:10:b0:a7:73:37:0c:06:1e:21:f8:4b:27:e8:
29:10:fa:b4:e2:71:11:ca:b2:d4:7a:ac:5f:9c:80:c2:60:5a:
82:7e:42:2e:aa:9d:e7:06:db:32:33:1d:12:d2:54:ea:c8:fc:
6d:3f:68:3a:a5:bb:6d:a6:77:47:4f:8d:02:97:1c:00:34:41:
78:9f:eb:29:d6:57:20:22:ec:92:72:a7:e3:be:82:b2:5e:e6:
5f:bd:e9:cb:37:61:51:82:73:ef:a1:fa:2c:09:dd:05:c7:ba:
54:87:c3:3f:8a:fd:57:ee:16:cb:4a:bb:51:0b:9d:38:43:12:
ff:09:4e:31:3a:30:2a:d3:e9:15:49:23:3a:1e:69:eb:bb:93:
ad:a0:10:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:52:29 2026 by rpki-client