Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/3139352e3234352e3139382e302f32342d3234203d3e20323139303735.roa
File: 3139352e3234352e3139382e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: L5DhNHLrlxwctN9vqKE08S22O12JNR5Iz8LhoGk9LAI=
Subject key identifier: 2A:0B:D5:F4:3C:9C:ED:99:9D:99:FF:95:B6:A8:C4:5C:61:CA:8A:35
Certificate issuer: /CN=4d59f665a6670df5f1ead6aeb01e5f80d50f0ca0
Certificate serial: 75F8FC253E6C293504A3BD31CC921EA31F070F13
Authority key identifier: 4D:59:F6:65:A6:67:0D:F5:F1:EA:D6:AE:B0:1E:5F:80:D5:0F:0C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/3139352e3234352e3139382e302f32342d3234203d3e20323139303735.roa
Signing time: Thu 27 Aug 2026 11:08:41 +0000
ROA not before: Thu 27 Aug 2026 11:03:41 +0000
ROA not after: Thu 26 Aug 2027 11:08:41 +0000
asID: 219075
IP address blocks: 195.245.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 05:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f8:fc:25:3e:6c:29:35:04:a3:bd:31:cc:92:1e:a3:1f:07:0f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d59f665a6670df5f1ead6aeb01e5f80d50f0ca0
Validity
Not Before: Aug 27 11:03:41 2026 GMT
Not After : Aug 26 11:08:41 2027 GMT
Subject: CN=2A0BD5F43C9CED999D99FF95B6A8C45C61CA8A35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:c5:08:76:75:8b:76:26:79:b5:95:d0:f8:
78:35:7c:ea:92:41:ef:d5:70:30:2b:07:8c:f1:2e:
87:49:0b:a8:01:d2:f5:52:a8:39:32:a8:79:57:21:
38:03:79:d7:1e:b3:03:32:1d:3f:17:66:87:62:51:
80:26:2d:87:61:52:88:32:37:0e:5a:ae:cd:80:ba:
31:17:55:fb:d6:ef:fa:73:f6:9b:79:28:f0:b1:43:
81:c2:da:7e:9b:93:f3:3e:7d:57:3d:67:56:5f:ce:
f1:67:ae:b2:85:c2:f5:39:47:78:69:d4:ba:06:16:
c0:43:d0:e2:e5:ff:27:3d:c6:1a:02:92:51:a0:4e:
1f:d4:f1:f6:13:97:ec:fb:35:e7:83:69:5f:50:f9:
07:e2:fd:83:1a:56:a7:98:b8:dc:1c:c5:95:2c:b5:
5f:ae:7e:c1:64:25:d2:bf:81:97:e6:4a:be:10:c3:
7d:3f:ae:d1:f6:d7:db:23:e7:4f:09:f8:16:08:69:
eb:cc:24:77:89:16:a2:fd:db:0d:da:0d:83:d6:6e:
91:1f:73:4b:94:3c:98:af:6a:4f:67:1f:7e:39:49:
63:cf:d0:b4:2d:c4:d6:fc:0c:bb:44:8f:65:f0:be:
78:f0:31:fe:dd:ea:eb:00:d0:35:58:3c:78:dd:7e:
72:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0B:D5:F4:3C:9C:ED:99:9D:99:FF:95:B6:A8:C4:5C:61:CA:8A:35
X509v3 Authority Key Identifier:
keyid:4D:59:F6:65:A6:67:0D:F5:F1:EA:D6:AE:B0:1E:5F:80:D5:0F:0C:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/4D59F665A6670DF5F1EAD6AEB01E5F80D50F0CA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVn2ZaZnDfXx6tausB5fgNUPDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/decd3b2c-2f12-4b3b-a779-989c874e53f4/0/3139352e3234352e3139382e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f7:c3:6a:f5:d3:28:e5:82:b3:25:44:27:6b:66:00:97:c6:
d8:37:2a:1e:e9:b6:9f:e7:82:43:78:f7:28:5b:78:14:45:6e:
b8:98:62:95:b8:7a:f0:b8:ff:87:16:65:04:17:58:32:4d:39:
d3:f9:66:73:49:9a:b5:89:e5:31:20:f4:d7:2d:c8:38:78:31:
6c:f9:0f:6f:ad:f3:57:a9:54:c5:82:c8:ad:b8:c8:6c:63:db:
99:d0:53:95:14:bf:55:c2:ac:57:55:7c:d4:f2:1c:5b:cf:75:
04:42:7a:ce:7b:cf:7e:86:71:44:e8:39:3a:df:a2:2a:8c:94:
41:c4:1b:73:9c:fd:84:b4:c2:de:6c:5d:c7:2b:9c:1f:42:e0:
48:60:bf:87:57:27:38:ca:74:78:41:75:af:a5:e9:21:98:27:
37:21:8b:63:a3:3c:bd:7a:eb:2c:48:55:cf:ec:04:68:6d:49:
e5:bc:60:96:74:cf:1b:0c:8c:aa:2f:64:a3:36:6e:d1:b9:aa:
af:ea:16:6d:c7:e5:12:e7:e4:9e:2f:63:85:dc:7d:8d:88:96:
9e:d4:34:18:47:63:dd:04:09:ce:cf:3f:d8:1f:49:59:d7:ed:
56:a8:f1:9e:ce:58:1c:7c:09:5f:70:b9:17:03:59:28:22:c1:
e4:73:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 21:54:18 2026 by rpki-client