Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e20313939343135.roa
File: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (raw, json)
Hash identifier: 72O3M08TYSpTDlojnTt+mRlscbLgVOXQCHXBZP39kmI=
Subject key identifier: 9F:CD:77:84:23:16:93:F3:9F:88:C1:C9:8A:42:1D:AA:77:08:E9:63
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 2D9AA1054533E9EEAFCE016D7D9E7E0B77278789
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e20313939343135.roa
Signing time: Wed 29 Jul 2026 09:49:16 +0000
ROA not before: Wed 29 Jul 2026 09:44:16 +0000
ROA not after: Wed 28 Jul 2027 09:49:16 +0000
asID: 199415
IP address blocks: 193.246.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 07:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9a:a1:05:45:33:e9:ee:af:ce:01:6d:7d:9e:7e:0b:77:27:87:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Jul 29 09:44:16 2026 GMT
Not After : Jul 28 09:49:16 2027 GMT
Subject: CN=9FCD7784231693F39F88C1C98A421DAA7708E963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:df:e4:f5:b0:c2:6b:f2:97:bc:19:b1:7d:
f8:6b:13:77:a3:ba:6a:dc:19:3d:f1:7f:a0:9f:3e:
ef:c4:57:61:5f:4c:db:f8:2a:a0:34:5a:3e:64:be:
b9:75:c7:02:3b:ed:80:fb:96:0c:30:64:f3:72:a9:
e7:28:ea:62:98:a5:d5:d6:dd:34:14:03:bc:14:91:
e7:e4:8d:a8:44:58:62:1c:b5:d1:7a:cc:28:05:20:
bc:ed:20:04:67:30:56:7c:81:4e:09:0d:87:94:19:
d9:06:7c:99:4d:28:2c:12:ca:2c:61:60:01:50:47:
06:18:4a:9b:77:48:f2:d0:48:23:9c:94:0b:a9:e6:
19:5b:85:f2:b8:9c:60:82:32:61:33:95:aa:51:e2:
b3:f3:05:e0:1c:3d:4f:16:7a:89:c1:79:3c:8e:cb:
b2:57:29:a2:60:a9:79:66:d9:97:73:48:8b:8e:33:
82:46:27:ef:f0:df:a2:bf:76:4e:bb:a5:f9:73:b6:
0d:e7:c7:c0:dd:f2:5c:ed:ad:6e:57:80:d2:c3:7b:
46:90:70:bc:5f:69:28:26:52:d3:ba:2e:ad:24:a1:
ce:4c:d8:0b:d0:bd:1c:57:27:99:76:14:75:45:2d:
6e:22:b4:a7:f2:1b:3a:29:a7:e8:36:92:6b:a2:ae:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:77:84:23:16:93:F3:9F:88:C1:C9:8A:42:1D:AA:77:08:E9:63
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e20313939343135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.5.0/24
Signature Algorithm: sha256WithRSAEncryption
27:79:4a:e6:f6:28:a4:18:23:01:8c:34:ae:52:03:f4:a9:5f:
09:ee:9b:c1:37:25:54:6b:5d:d9:c6:cf:04:83:b6:68:84:44:
18:61:cf:5c:6c:86:9b:9c:ed:d0:50:9b:31:58:8b:56:f2:52:
ec:96:0b:63:38:b6:51:7a:1b:37:9f:86:70:07:67:28:84:0c:
6b:7d:cf:b8:b6:45:be:6d:ac:7a:96:70:ff:4a:82:88:5a:e8:
d6:49:2d:9d:59:a0:97:d6:75:41:11:50:38:9c:25:80:57:6e:
9b:3d:b6:ff:54:7e:73:20:b2:76:c7:c7:3d:09:ef:ea:b4:76:
1d:23:be:e5:13:15:e5:3f:28:a5:ea:8b:56:21:8a:e9:63:3c:
f9:73:bb:c8:7f:7e:84:97:74:1e:18:6a:f0:23:1b:64:92:fb:
ce:de:b6:04:30:4e:6f:e5:65:93:d0:3b:5d:e3:4a:37:31:f6:
f5:e0:07:af:bc:55:1e:f2:b0:7d:35:0a:d8:5c:f9:94:fc:d9:
56:f9:9a:af:a8:42:24:35:17:34:23:60:85:01:8c:1e:18:58:
8f:ac:d3:67:2f:a2:a9:ef:a1:f3:36:1d:0d:c6:6b:94:a5:7f:
6c:f1:45:e2:ba:04:75:34:ea:9e:b1:a4:cc:94:7a:08:d5:54:
db:21:98:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:39:43 2026 by rpki-client