Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa
File: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (raw, json)
Hash identifier: N3YBfd28y8iYdxt+Kp1kf5UGnREI4b8dE3gb1+i/k38=
Subject key identifier: 3D:CD:5A:2A:49:F4:EB:EE:B2:5B:84:F2:A4:90:EF:BC:58:95:2B:B4
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 3AF67351F751843B03F0FDB084079C6472B025C0
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa
Signing time: Thu 15 Oct 2026 10:49:37 +0000
ROA not before: Thu 15 Oct 2026 10:44:37 +0000
ROA not after: Thu 14 Oct 2027 10:49:37 +0000
asID: 211415
IP address blocks: 217.198.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 16:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f6:73:51:f7:51:84:3b:03:f0:fd:b0:84:07:9c:64:72:b0:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Oct 15 10:44:37 2026 GMT
Not After : Oct 14 10:49:37 2027 GMT
Subject: CN=3DCD5A2A49F4EBEEB25B84F2A490EFBC58952BB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:ea:8b:de:38:3c:71:9f:8e:73:6a:79:a8:
9d:da:7c:98:20:ec:51:17:9c:ed:36:ab:53:35:1f:
9d:46:ac:af:1b:d5:9d:b3:d6:8b:26:be:c6:f4:ae:
25:ac:ab:25:c6:1f:85:a0:f7:ef:cf:46:3c:20:84:
3a:47:77:a2:01:21:3e:b4:25:95:50:8c:54:5d:3a:
da:b6:49:23:fd:ee:91:50:9b:79:44:d2:4d:c7:13:
28:8b:3a:28:84:53:71:f2:fe:6f:04:7f:3c:63:07:
91:a9:1f:05:c3:94:08:7a:24:be:b2:ed:f2:bf:82:
24:cf:1b:c0:2a:16:63:2d:51:c5:f9:cd:dc:3f:56:
3c:5b:26:b9:ca:6c:12:1e:ba:34:d9:b8:b1:f5:aa:
16:3a:f6:d3:ec:5e:d6:dc:47:dd:07:55:83:e1:cc:
05:40:20:b2:b7:01:fe:1a:cb:f3:a1:f5:6a:75:06:
52:57:7b:8e:df:c3:e4:a7:d2:85:f9:f7:d0:41:d3:
ef:64:e1:0e:2f:d1:a2:4c:de:04:63:e4:32:2a:89:
1c:ca:6b:a2:df:0d:67:88:d6:8d:23:88:10:6a:9a:
bf:9d:b5:c2:e9:3e:a8:c7:87:ce:c5:a3:71:5e:58:
40:3e:b7:a4:51:e1:89:2e:98:3a:f8:67:05:35:f0:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CD:5A:2A:49:F4:EB:EE:B2:5B:84:F2:A4:90:EF:BC:58:95:2B:B4
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.187.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b6:9f:84:61:09:ea:0a:2d:4e:28:e1:b8:11:b7:f8:93:d9:
38:67:f8:10:14:97:28:0f:70:69:28:15:94:16:7f:10:53:47:
14:d4:3d:86:a6:41:df:61:04:59:b0:c6:91:c6:ec:fe:6d:8c:
8d:6d:f3:47:07:84:b8:09:30:cb:74:4f:b9:42:d3:bf:5d:a8:
b5:ee:60:2f:af:6e:33:e1:ea:2c:21:a1:0d:53:e2:84:58:41:
da:48:07:db:55:8a:89:39:43:df:54:89:a3:d3:d8:24:ed:64:
f5:a7:b9:26:9b:37:9a:f7:3d:63:54:72:6c:46:d1:8c:01:d6:
07:66:dc:16:e6:08:14:a5:df:38:e9:b2:bc:b7:d5:f4:75:34:
9f:9f:ba:d7:ab:db:a9:67:9a:35:2c:7d:e6:69:11:ce:bc:6f:
6d:a7:05:df:d6:16:fc:21:da:57:0e:90:10:06:10:aa:d5:64:
57:04:d9:03:d8:ac:78:49:26:96:4e:a9:06:6d:fa:a5:2e:81:
27:d7:b9:86:20:8c:27:8e:8a:40:d6:c9:5f:07:10:5b:77:2a:
0c:87:5a:37:e6:85:20:be:c6:b0:26:5a:8a:a0:1a:52:4f:32:
23:23:e9:00:ff:55:0f:83:84:19:6a:b3:ed:9a:9d:91:92:5b:
37:20:73:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 00:58:41 2026 by rpki-client