Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/3139352e3139312e34392e302f32342d3234203d3e20323139303735.roa
File: 3139352e3139312e34392e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: 1ABPmYy3OMkXM6hUipNaZqxStdmGCObQYP+N6B1Qe1M=
Subject key identifier: 8D:80:4E:CC:B4:B1:C6:76:8B:94:84:FE:89:40:80:65:62:FA:64:7F
Certificate issuer: /CN=4d59f665a6670df5f1ead6aeb01e5f80d50f0ca0
Certificate serial: 67CF267EB7382A1DAD3D3B7E795EC5BAEC97CF7B
Authority key identifier: 4D:59:F6:65:A6:67:0D:F5:F1:EA:D6:AE:B0:1E:5F:80:D5:0F:0C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/3139352e3139312e34392e302f32342d3234203d3e20323139303735.roa
Signing time: Thu 27 Aug 2026 11:08:40 +0000
ROA not before: Thu 27 Aug 2026 11:03:40 +0000
ROA not after: Thu 26 Aug 2027 11:08:40 +0000
asID: 219075
IP address blocks: 195.191.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 05:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:cf:26:7e:b7:38:2a:1d:ad:3d:3b:7e:79:5e:c5:ba:ec:97:cf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d59f665a6670df5f1ead6aeb01e5f80d50f0ca0
Validity
Not Before: Aug 27 11:03:40 2026 GMT
Not After : Aug 26 11:08:40 2027 GMT
Subject: CN=8D804ECCB4B1C6768B9484FE8940806562FA647F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b1:6b:c2:1b:df:56:53:23:b1:e3:09:93:19:
13:c0:cf:c7:82:6f:d4:fc:3f:fa:94:75:8a:a5:4f:
27:6f:f1:f2:1e:7b:50:f2:f5:45:c7:3f:7a:37:bd:
2c:4d:bc:5d:c3:23:ba:bb:b9:d8:66:26:eb:b7:73:
76:0a:af:1b:3c:5f:ab:46:ef:23:ca:0b:61:ab:66:
2c:91:0b:5c:0d:c0:fd:12:81:01:ae:20:9a:57:3b:
71:f9:fd:23:fe:fe:97:e8:22:b3:6f:c0:4e:c1:1f:
4c:77:4f:18:49:c9:52:5b:fd:44:c8:de:12:22:42:
80:ee:2a:d5:96:de:82:f5:a1:79:40:85:21:7e:17:
c5:a6:48:22:45:c8:2a:0c:d9:5c:5c:4e:f9:51:1c:
65:b5:9e:18:ca:57:f5:17:ce:9a:3e:73:18:15:ff:
56:22:e7:4d:5c:4b:a9:f9:8b:96:ef:09:23:2d:2f:
59:4b:c8:39:a9:0e:4b:87:be:f1:53:af:c6:b7:a2:
dc:31:85:19:c3:71:96:90:a8:c4:1d:3b:b9:07:8e:
c6:b7:22:40:64:79:d5:89:84:ec:a5:ab:e2:4c:83:
e1:23:20:e5:bf:cb:30:fb:b6:f6:06:e5:dc:87:b2:
c3:c4:b4:21:f9:94:64:d6:eb:b3:d0:ad:a9:d4:cd:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:80:4E:CC:B4:B1:C6:76:8B:94:84:FE:89:40:80:65:62:FA:64:7F
X509v3 Authority Key Identifier:
keyid:4D:59:F6:65:A6:67:0D:F5:F1:EA:D6:AE:B0:1E:5F:80:D5:0F:0C:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/3139352e3139312e34392e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.49.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:9b:37:f4:be:b3:28:6a:db:50:8b:c0:12:44:32:2c:6e:f6:
6f:d1:cb:ec:5c:7b:6e:cf:e9:30:27:d2:ad:13:52:68:74:75:
5c:50:3e:4a:d5:ee:83:36:54:92:2b:d1:fe:a1:23:61:5f:35:
27:a4:fe:61:4f:c5:8f:cc:64:8d:fc:55:41:c9:b7:18:2a:05:
52:48:50:59:5c:ec:0c:97:b8:f9:39:56:c9:d9:99:3d:f8:fe:
2f:e2:67:1d:b7:e5:ee:a4:95:d4:ad:10:c1:32:3d:6c:5b:c2:
df:1b:ae:fe:09:bd:2b:e0:73:83:41:3c:42:6a:97:b3:18:be:
d1:55:5b:dc:25:3e:f9:ed:42:a3:07:00:e8:6f:70:ae:39:8a:
25:dd:84:99:3d:77:5a:bb:b5:86:17:b3:a3:eb:b4:99:a4:7d:
54:c4:c8:16:49:39:3d:e1:6d:a6:9b:eb:5d:fe:b7:92:bf:46:
fc:e7:f7:0b:9e:4d:09:32:d0:82:c0:d9:03:7a:92:9f:ef:61:
61:e3:b6:46:85:35:20:ee:bb:7f:e7:ed:66:84:c3:6d:fc:57:
27:10:45:00:4c:cc:d0:e2:e9:47:a2:12:da:c4:00:69:a7:6d:
d5:42:28:10:35:e6:c1:c1:fe:57:a7:d4:6a:1f:d4:2e:6b:3b:
b9:67:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 21:53:32 2026 by rpki-client