Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa
File: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (raw, json)
Hash identifier: SdcwEbkus3fU0o7cBKTaBNOCGVAaOP4dNZ/gPtIXWqM=
Subject key identifier: E2:2A:97:30:95:D5:1F:4A:E6:A3:02:14:7D:49:02:CC:4B:66:15:56
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 5280FBB2138CFE5C7E858257F4FFB0035719E2DB
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa
Signing time: Sun 18 Oct 2026 17:49:37 +0000
ROA not before: Sun 18 Oct 2026 17:44:37 +0000
ROA not after: Sun 17 Oct 2027 17:49:37 +0000
asID: 215727
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:80:fb:b2:13:8c:fe:5c:7e:85:82:57:f4:ff:b0:03:57:19:e2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 18 17:44:37 2026 GMT
Not After : Oct 17 17:49:37 2027 GMT
Subject: CN=E22A973095D51F4AE6A302147D4902CC4B661556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:12:88:d2:ee:ca:60:66:d4:74:1f:71:b6:
da:37:9d:5a:51:ee:03:9c:f6:ca:8e:e8:b1:a5:fe:
91:4c:b5:fe:5a:eb:4f:c9:a4:a1:50:83:06:f0:b5:
ce:27:f3:d6:4b:15:66:7a:5e:3f:43:71:31:0f:8d:
95:71:d6:7b:9f:00:a2:e9:2c:4c:45:19:e0:b3:43:
2c:b3:23:eb:04:61:d9:cc:b6:80:4c:98:8a:9c:35:
d0:9e:77:df:d1:4f:93:16:db:ff:e7:4e:59:bf:52:
3b:ac:86:bc:7f:a1:0d:e3:88:70:50:c9:41:27:60:
8e:40:45:32:85:59:3b:d9:41:a6:eb:7f:45:25:23:
04:e2:89:5e:2f:9c:04:b3:c3:e5:fc:7e:98:94:be:
ed:ab:78:d2:4e:9f:28:6f:e6:ed:ee:15:0a:a1:b8:
31:58:dc:67:25:1d:fd:d2:11:ba:3d:a5:31:3c:8e:
66:db:d5:55:5c:46:68:05:ac:a3:f3:c0:ce:4a:56:
72:04:9d:6f:0b:18:a7:a3:13:d7:0d:74:d7:76:ba:
07:df:7d:f0:a7:ac:33:c5:92:c6:3f:ea:bd:ee:f7:
b0:22:f1:02:c9:cf:30:2c:20:cf:f2:22:28:87:24:
40:a0:ca:dd:f8:57:eb:cc:00:2f:cb:0c:7e:9f:43:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2A:97:30:95:D5:1F:4A:E6:A3:02:14:7D:49:02:CC:4B:66:15:56
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:4a:98:7d:d8:42:c5:49:64:42:b2:04:78:bb:5e:60:78:10:
79:2d:ab:b7:a4:41:54:97:e8:e5:03:bf:51:20:17:b1:a8:17:
df:5b:1f:3d:53:ad:a4:92:24:98:49:ca:04:1b:14:03:4f:80:
4f:c8:17:10:13:9e:74:b3:2c:e8:ed:fe:f8:f1:10:93:83:4f:
90:46:70:27:7a:a1:22:91:1c:2d:8b:a8:61:5e:0a:4b:5e:85:
d2:39:d9:60:f4:f4:51:60:5c:e5:93:ce:13:0d:18:a1:f0:38:
1f:35:e2:0b:a1:6d:ba:30:1d:a0:2c:fd:1c:bc:f3:5a:09:fd:
c6:e2:00:c3:cc:67:bc:8b:71:3a:4e:17:ee:ed:c0:6c:e0:62:
64:9c:d9:96:e2:8d:05:4d:9a:7c:3e:8a:3b:55:e9:90:3a:94:
74:5a:b3:c5:50:13:72:29:ff:ae:9d:bf:03:44:83:2d:fd:4a:
0b:2b:a0:c8:03:21:a4:d5:f9:06:94:25:d4:5f:af:88:ee:6b:
ac:9e:c6:3d:58:1e:08:01:0c:13:18:4b:a1:b1:b3:17:00:96:
0b:2c:d7:8e:ea:65:0f:02:da:72:5c:02:d6:f1:02:58:3b:64:
2e:58:d1:30:de:c7:19:73:0b:8a:2c:f1:7e:9f:33:3b:5b:4d:
22:24:0f:0e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUUoD7shOM/lx+hYJX9P+wA1cZ4tswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNjEwMTgxNzQ0MzdaFw0yNzEwMTcxNzQ5MzdaMDMxMTAvBgNV
BAMTKEUyMkE5NzMwOTVENTFGNEFFNkEzMDIxNDdENDkwMkNDNEI2NjE1NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkxKI0u7KYGbUdB9xtto3nVpR
7gOc9sqO6LGl/pFMtf5a60/JpKFQgwbwtc4n89ZLFWZ6Xj9DcTEPjZVx1nufAKLp
LExFGeCzQyyzI+sEYdnMtoBMmIqcNdCed9/RT5MW2//nTlm/Ujushrx/oQ3jiHBQ
yUEnYI5ARTKFWTvZQabrf0UlIwTiiV4vnASzw+X8fpiUvu2reNJOnyhv5u3uFQqh
uDFY3GclHf3SEbo9pTE8jmbb1VVcRmgFrKPzwM5KVnIEnW8LGKejE9cNdNd2ugff
ffCnrDPFksY/6r3u97Ai8QLJzzAsIM/yIiiHJECgyt34V+vMAC/LDH6fQ3mPAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU4iqXMJXVH0rmowIUfUkCzEtmFVYwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzEzMzMwMmUzMTM5MzMyZTM3
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzNzMyMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACCwUswDQYJKoZIhvcNAQELBQADggEBAMhKmH3YQsVJZEKyBHi7XmB4EHktq7ek
QVSX6OUDv1EgF7GoF99bHz1TraSSJJhJygQbFANPgE/IFxATnnSzLOjt/vjxEJOD
T5BGcCd6oSKRHC2LqGFeCktehdI52WD09FFgXOWTzhMNGKHwOB814guhbbowHaAs
/Ry881oJ/cbiAMPMZ7yLcTpOF+7twGzgYmSc2ZbijQVNmnw+ijtV6ZA6lHRas8VQ
E3Ip/66dvwNEgy39SgsroMgDIaTV+QaUJdRfr4jua6yexj1YHggBDBMYS6GxsxcA
lgss147qZQ8C2nJcAtbxAlg7ZC5Y0TDexxlzC4os8X6fMztbTSIkDw4=
-----END CERTIFICATE-----
Generated at Sun Oct 25 07:51:44 2026 by rpki-client