Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa
File: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier: y0wXpV0FK7p0gj289yuBKhdBMbU7WqcUSNT/1+hV8BA=
Subject key identifier: 9F:16:42:C5:53:A3:BB:CF:1F:94:5D:A6:2F:32:2F:F0:29:8D:6F:DE
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 3FE008195CB19742B765EC6AAA33897957EF5B00
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa
Signing time: Wed 26 Aug 2026 09:49:30 +0000
ROA not before: Wed 26 Aug 2026 09:44:30 +0000
ROA not after: Wed 25 Aug 2027 09:49:30 +0000
asID: 202736
IP address blocks: 193.246.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e0:08:19:5c:b1:97:42:b7:65:ec:6a:aa:33:89:79:57:ef:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Aug 26 09:44:30 2026 GMT
Not After : Aug 25 09:49:30 2027 GMT
Subject: CN=9F1642C553A3BBCF1F945DA62F322FF0298D6FDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:c7:7e:b3:ff:f0:ff:21:bb:7c:78:b7:a2:
de:26:95:f4:c3:f2:b1:37:05:35:60:6a:61:d1:ee:
fe:b1:11:75:e5:0f:43:ab:76:c6:15:e4:67:dd:2a:
ad:c3:5d:ca:70:d5:8e:b3:55:86:45:96:c7:16:1b:
c0:cb:83:0c:d5:7e:a2:23:2c:b7:88:96:9b:77:a0:
22:66:96:d5:05:c1:9c:46:bf:cd:e9:04:a6:eb:41:
3d:29:7c:b1:4b:81:b6:0e:90:ae:6d:0c:95:e2:27:
c1:4f:9e:5b:5e:d9:4b:67:ec:0b:98:65:67:4c:f8:
fe:50:57:53:03:5c:69:a9:84:2a:5d:ed:d4:73:a4:
52:78:ee:68:0e:ab:3b:01:80:3b:e4:ba:cc:c6:89:
5e:92:65:ef:d2:0a:ea:08:41:77:e7:00:6d:04:1f:
ce:3b:30:f7:fc:93:28:e2:b7:17:a0:d4:91:71:06:
6a:d4:bb:1a:66:f1:14:b4:1b:5a:a0:eb:28:14:e4:
e5:e7:97:c8:c1:1a:7b:4e:67:c9:4e:6d:2e:29:dc:
fa:dc:93:aa:de:7c:fa:0e:7d:13:48:3b:05:ca:8f:
c0:dc:b8:f4:17:39:10:9d:b6:1f:25:be:ca:5e:09:
03:65:d3:df:59:8e:54:63:ad:e2:f9:69:fe:f9:8f:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:16:42:C5:53:A3:BB:CF:1F:94:5D:A6:2F:32:2F:F0:29:8D:6F:DE
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:3a:c4:52:10:16:95:76:9e:0a:90:bb:39:47:49:0f:bb:c1:
81:05:c7:e1:fc:17:1f:6d:da:1f:2a:8d:2b:2f:b6:c3:0f:7f:
b0:a9:fd:7c:ab:46:03:d4:90:08:fe:dd:62:99:d5:6c:8c:f1:
bf:06:59:5e:d9:90:ea:43:d9:ce:a7:fc:a8:38:02:bb:97:63:
e8:51:62:ec:b4:b3:34:6b:54:4b:97:04:67:7e:af:d1:0b:84:
16:ab:c6:1e:c5:b9:03:b4:bb:63:a5:5f:bd:f9:8f:a7:81:a2:
4c:75:2b:a1:69:d3:e3:15:fd:9e:57:f6:d8:d8:e4:44:59:95:
19:74:7b:23:35:77:63:aa:ad:1c:7f:de:6a:68:f5:1a:ac:9e:
2d:50:86:ce:f2:9e:1f:b4:f1:3d:e6:ed:63:b3:7f:08:cb:31:
e6:68:94:06:a5:97:35:f0:07:bc:06:9f:0e:b4:fb:17:1f:97:
32:9e:98:62:f6:a2:c9:a3:e2:a2:d8:2f:8d:b2:eb:29:25:6e:
43:6c:d8:c1:1c:f9:ca:01:87:35:3e:9b:8c:07:a0:f4:85:6c:
4d:5a:1d:f1:2f:73:54:15:f6:5e:84:88:6c:5c:cc:8f:90:52:
61:7e:db:f1:f1:84:5b:13:d6:3c:50:13:79:7d:71:39:73:7e:
21:78:30:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:40:09 2026 by rpki-client