Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa
File: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (raw, json)
Hash identifier: yycXD37CweWcSXqvIiIHSQ/Otu/gODYxcJV0XE2Z5fg=
Subject key identifier: 97:39:1C:13:B0:86:C8:E3:51:6B:BC:9E:14:C6:EE:3E:8C:09:99:48
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 4DE8B053685F6E63FCEA2D5B804DEF9FE69A0B23
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa
Signing time: Tue 04 Aug 2026 09:49:18 +0000
ROA not before: Tue 04 Aug 2026 09:44:18 +0000
ROA not after: Tue 03 Aug 2027 09:49:18 +0000
asID: 134677
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e8:b0:53:68:5f:6e:63:fc:ea:2d:5b:80:4d:ef:9f:e6:9a:0b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 4 09:44:18 2026 GMT
Not After : Aug 3 09:49:18 2027 GMT
Subject: CN=97391C13B086C8E3516BBC9E14C6EE3E8C099948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:e8:54:55:d5:5a:b5:c0:cb:73:08:d4:3c:
29:a9:d0:f5:75:76:42:d1:e5:39:36:fe:0a:46:f9:
21:e6:da:78:21:01:2a:c1:45:d1:a0:14:fa:cf:f3:
e7:54:1d:40:67:b6:e3:5f:de:3e:30:55:14:36:0d:
1f:b5:32:2f:9b:2a:c5:2f:47:bf:50:f2:2b:fe:ae:
fa:1b:aa:37:84:f9:4b:d0:89:4e:9f:bc:8b:db:b0:
c1:85:14:07:74:36:e7:17:2e:e5:ee:a2:85:aa:48:
0e:90:13:73:e1:ed:4e:60:b8:22:9a:80:2d:7a:06:
d9:f1:82:c2:17:38:ac:fd:b2:30:9f:67:82:ad:e4:
f5:2a:fa:88:ea:94:05:07:02:0a:9e:33:32:14:70:
10:5a:3d:fa:79:fc:35:b0:ab:ab:51:dc:c5:c8:65:
bd:8c:20:f9:02:e2:df:9b:16:72:16:8e:fa:9a:5c:
2a:3f:fe:b2:8a:1b:d7:26:d1:34:f8:c6:48:3b:30:
98:6f:a5:ce:b2:59:94:ef:11:0b:07:1e:05:fb:8a:
d2:68:30:83:b2:9f:d3:0a:e9:e3:32:8d:48:8c:e3:
17:2e:70:5e:43:9e:20:4d:65:10:79:87:fe:7e:b7:
0d:a1:70:a8:9c:dd:7d:10:4d:f2:70:cc:7e:a8:2e:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:1C:13:B0:86:C8:E3:51:6B:BC:9E:14:C6:EE:3E:8C:09:99:48
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:62:56:9d:ba:eb:ae:25:e1:f2:4b:0d:2f:06:03:8e:0f:61:
76:55:86:cb:6b:b0:9f:4f:70:a5:16:a3:e7:fc:6f:f9:59:5d:
5f:04:6a:da:e8:33:01:b0:71:a0:ce:16:3d:7d:99:5c:6a:6a:
79:d5:7d:b8:af:e0:90:2a:da:4c:c5:7c:b0:84:89:58:44:71:
c2:d1:a9:3a:0c:01:8b:0b:b2:fd:4c:09:41:95:7c:2f:85:2e:
3f:f4:93:ae:08:d8:9f:e6:df:01:32:84:86:5e:c8:1e:ce:d1:
25:8f:38:8f:3e:71:a6:cb:2d:ed:24:0e:62:17:a5:39:25:b5:
65:fa:37:0e:c1:fe:4d:2f:98:5f:eb:1e:5f:b3:7e:8e:4c:1b:
6c:26:f5:89:ad:26:a3:ac:fc:11:23:26:66:ab:97:25:ed:20:
5c:af:9c:9d:d7:a1:30:de:5b:33:44:40:b9:dd:4b:83:57:f6:
d0:91:80:1a:9a:24:66:e8:18:c0:84:2d:cf:85:2d:ad:34:4a:
dc:59:ac:67:e6:40:3a:21:1b:37:97:9f:8b:87:3c:11:de:c9:
6c:d2:72:a4:e0:3e:6a:38:af:71:82:5b:da:87:04:16:3b:fb:
67:45:da:82:be:5c:5d:03:3a:10:b5:d8:ff:3f:9b:41:6d:cd:
88:3b:f0:48
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTeiwU2hfbmP86i1bgE3vn+aaCyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNjA4MDQwOTQ0MThaFw0yNzA4MDMwOTQ5MThaMDMxMTAvBgNV
BAMTKDk3MzkxQzEzQjA4NkM4RTM1MTZCQkM5RTE0QzZFRTNFOEMwOTk5NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmp+hUVdVatcDLcwjUPCmp0PV1
dkLR5Tk2/gpG+SHm2nghASrBRdGgFPrP8+dUHUBntuNf3j4wVRQ2DR+1Mi+bKsUv
R79Q8iv+rvobqjeE+UvQiU6fvIvbsMGFFAd0NucXLuXuooWqSA6QE3Ph7U5guCKa
gC16BtnxgsIXOKz9sjCfZ4Kt5PUq+ojqlAUHAgqeMzIUcBBaPfp5/DWwq6tR3MXI
Zb2MIPkC4t+bFnIWjvqaXCo//rKKG9cm0TT4xkg7MJhvpc6yWZTvEQsHHgX7itJo
MIOyn9MK6eMyjUiM4xcucF5DniBNZRB5h/5+tw2hcKic3X0QTfJwzH6oLgizAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUlzkcE7CGyONRa7yeFMbuPowJmUgwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzEzNDM2MmUzMTM5MmUzMjMx
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzQzNjM3Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACSE9gwDQYJKoZIhvcNAQELBQADggEBADtiVp26664l4fJLDS8GA44PYXZVhstr
sJ9PcKUWo+f8b/lZXV8EatroMwGwcaDOFj19mVxqannVfbiv4JAq2kzFfLCEiVhE
ccLRqToMAYsLsv1MCUGVfC+FLj/0k64I2J/m3wEyhIZeyB7O0SWPOI8+cabLLe0k
DmIXpTkltWX6Nw7B/k0vmF/rHl+zfo5MG2wm9YmtJqOs/BEjJmarlyXtIFyvnJ3X
oTDeWzNEQLndS4NX9tCRgBqaJGboGMCELc+FLa00StxZrGfmQDohGzeXn4uHPBHe
yWzScqTgPmo4r3GCW9qHBBY7+2dF2oK+XF0DOhC12P8/m0FtzYg78Eg=
-----END CERTIFICATE-----
Generated at Sat Aug 8 09:32:13 2026 by rpki-client