Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20313532363938.roa
File: 3139332e3234362e3130322e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier: hAh0ZaA+a0e1G8WixTp+eS0wHJBiUhAcqGsCoRQa/EM=
Subject key identifier: 8E:E9:FB:FA:32:51:5E:6D:77:54:C3:6D:65:59:2E:43:25:6C:85:77
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 355CF0828B3FD08BEF5EB7D626DA4DC5CC463EAA
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20313532363938.roa
Signing time: Fri 14 Aug 2026 07:12:04 +0000
ROA not before: Fri 14 Aug 2026 07:07:04 +0000
ROA not after: Fri 13 Aug 2027 07:12:04 +0000
asID: 152698
IP address blocks: 193.246.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 10:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5c:f0:82:8b:3f:d0:8b:ef:5e:b7:d6:26:da:4d:c5:cc:46:3e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Aug 14 07:07:04 2026 GMT
Not After : Aug 13 07:12:04 2027 GMT
Subject: CN=8EE9FBFA32515E6D7754C36D65592E43256C8577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:56:62:00:e6:be:af:97:46:b7:7d:8b:4c:
0c:68:54:69:ec:e0:59:68:d5:e5:de:44:a8:75:18:
ba:1a:6c:d3:64:ad:20:30:c2:8d:a4:f4:41:48:c3:
cc:6d:87:59:9f:d7:65:56:dd:e6:79:13:be:4b:2f:
74:17:cf:c2:fe:27:e4:d0:56:40:4d:80:53:cf:a3:
aa:ca:70:de:4d:2d:95:2a:7d:5d:85:fe:09:18:1b:
27:c6:c0:3a:39:72:ad:fa:5d:2d:c5:6f:cf:34:66:
cb:33:9c:4c:ba:ac:74:2c:c6:66:b6:66:57:a2:00:
3d:08:cf:e6:6b:2a:01:c4:28:cd:06:19:f4:ea:0f:
f4:ad:fc:6c:49:c4:6a:23:d9:da:3e:94:29:a0:ac:
fd:a3:ea:41:69:f4:43:4b:37:e7:a2:c9:45:4f:70:
be:e7:f6:28:44:79:4c:b5:14:2a:ee:11:df:a8:18:
fe:aa:08:4f:8e:ef:0a:ab:8a:d6:82:69:84:56:06:
42:43:86:4a:81:37:63:82:67:81:e2:3a:ce:19:76:
48:98:ca:48:1c:da:4e:5d:05:1b:2f:88:83:c1:48:
03:85:fb:59:76:f8:c6:5d:30:92:b5:f5:59:65:c8:
3f:25:ed:47:2e:ab:8e:f8:cd:27:8d:fb:77:0b:af:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E9:FB:FA:32:51:5E:6D:77:54:C3:6D:65:59:2E:43:25:6C:85:77
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20313532363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.102.0/24
Signature Algorithm: sha256WithRSAEncryption
57:3d:b6:bf:a7:f7:54:b6:f7:78:d1:92:9a:ed:b1:f9:d3:5d:
7f:52:f1:2e:6d:06:be:e7:f1:df:94:68:71:6c:46:e1:c0:54:
4f:36:4d:8f:c2:67:ed:c4:4f:cc:fe:04:8f:22:ae:2b:fe:40:
d1:10:2f:5e:3e:07:e2:e0:ed:98:bd:7f:ef:a2:57:9b:f9:46:
89:59:8d:69:67:81:20:b1:77:29:c9:2c:4e:3f:db:83:d1:ae:
a4:43:fa:ff:f4:ab:96:b4:e3:04:1b:17:0c:73:1f:2e:62:92:
f4:56:fb:32:d0:09:3a:d8:51:bc:5b:f8:8e:ac:2d:b2:8f:0e:
7f:b7:9a:14:22:74:6d:d5:d9:82:d5:6e:c0:9e:84:41:3c:0c:
a4:3b:0b:1c:ab:51:e8:51:11:7b:4c:93:a1:42:5f:0e:e8:b8:
92:f1:a1:93:63:ae:81:0c:b5:1e:13:f5:93:de:0a:89:ed:34:
f2:01:4b:94:93:f0:a1:cd:6a:1c:2b:82:e8:e9:61:d7:ad:cb:
a8:23:e5:25:10:c6:ec:27:55:f9:04:b4:2a:ce:96:de:07:34:
c1:e2:16:ce:a6:9d:69:42:e3:81:f4:2b:b9:f7:bc:6a:9b:bb:
f3:e3:46:d5:d6:27:05:2b:3a:23:4f:82:16:25:66:51:07:fc:
2f:93:0f:f1
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUNVzwgos/0IvvXrfWJtpNxcxGPqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi
NDk0YTdiZjAeFw0yNjA4MTQwNzA3MDRaFw0yNzA4MTMwNzEyMDRaMDMxMTAvBgNV
BAMTKDhFRTlGQkZBMzI1MTVFNkQ3NzU0QzM2RDY1NTkyRTQzMjU2Qzg1NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZlZiAOa+r5dGt32LTAxoVGns
4Flo1eXeRKh1GLoabNNkrSAwwo2k9EFIw8xth1mf12VW3eZ5E75LL3QXz8L+J+TQ
VkBNgFPPo6rKcN5NLZUqfV2F/gkYGyfGwDo5cq36XS3Fb880ZssznEy6rHQsxma2
ZleiAD0Iz+ZrKgHEKM0GGfTqD/St/GxJxGoj2do+lCmgrP2j6kFp9ENLN+eiyUVP
cL7n9ihEeUy1FCruEd+oGP6qCE+O7wqritaCaYRWBkJDhkqBN2OCZ4HiOs4ZdkiY
ykgc2k5dBRsviIPBSAOF+1l2+MZdMJK19VllyD8l7Ucuq474zSeN+3cLrylPAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUjun7+jJRXm13VMNtZVkuQyVshXcwHwYDVR0j
BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0
ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT
VXA3OC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEt
YTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0ZjI4LzAvMzEzOTMzMmUzMjM0MzYyZTMx
MzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjM2MzkzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMH2ZjANBgkqhkiG9w0BAQsFAAOCAQEAVz22v6f3VLb3eNGSmu2x+dNdf1Lx
Lm0Gvufx35RocWxG4cBUTzZNj8Jn7cRPzP4EjyKuK/5A0RAvXj4H4uDtmL1/76JX
m/lGiVmNaWeBILF3KcksTj/bg9GupEP6//SrlrTjBBsXDHMfLmKS9Fb7MtAJOthR
vFv4jqwtso8Of7eaFCJ0bdXZgtVuwJ6EQTwMpDsLHKtR6FERe0yToUJfDui4kvGh
k2OugQy1HhP1k94Kie008gFLlJPwoc1qHCuC6Olh163LqCPlJRDG7CdV+QS0Ks6W
3gc0weIWzqadaULjgfQrufe8apu78+NG1dYnBSs6I0+CFiVmUQf8L5MP8Q==
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:36:13 2026 by rpki-client