Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139342e39392e3135362e302f32342d3234203d3e203232343237.roa
File: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (raw, json)
Hash identifier: 7cx3PmNL2bx7p3TSn+B5wruk2DH5oi/qrUGQZZobhk0=
Subject key identifier: 91:88:07:12:71:EA:A4:E9:54:62:4F:80:EA:C2:06:71:83:3D:9E:C4
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 6F6F3CE2A82D89D1223D7BE9976E44745237C556
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139342e39392e3135362e302f32342d3234203d3e203232343237.roa
Signing time: Fri 24 Apr 2026 12:47:05 +0000
ROA not before: Fri 24 Apr 2026 12:42:05 +0000
ROA not after: Fri 23 Apr 2027 12:47:05 +0000
asID: 22427
IP address blocks: 194.99.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:6f:3c:e2:a8:2d:89:d1:22:3d:7b:e9:97:6e:44:74:52:37:c5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Apr 24 12:42:05 2026 GMT
Not After : Apr 23 12:47:05 2027 GMT
Subject: CN=9188071271EAA4E954624F80EAC20671833D9EC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:49:4c:19:86:f2:e0:17:40:ff:49:b5:b9:
4b:aa:a7:71:6c:e4:ce:8c:c9:84:16:b3:61:fc:8a:
37:92:85:f4:7b:2a:1a:47:3b:e7:a3:17:c4:e3:53:
2f:a5:ea:7a:45:9d:77:ae:64:ca:46:8e:a3:f6:1a:
9d:ce:b5:b8:d7:c9:a3:3b:84:4d:0f:8e:2c:d7:3c:
52:21:83:b5:fb:38:a8:ba:98:02:c2:b6:a6:de:5f:
99:b8:95:09:67:c7:4c:a6:75:92:f1:25:8e:09:cd:
9c:a5:df:f2:12:7a:72:4d:88:6b:a8:30:bb:73:b1:
21:e3:26:64:b8:e6:24:83:5c:50:3d:a7:45:5e:97:
7c:7a:53:e5:72:73:35:b7:2e:fd:b7:c1:f5:9d:ba:
48:09:d5:69:7e:01:08:e2:4e:7f:87:c2:25:d9:98:
32:55:ac:d2:39:64:01:ca:39:53:ba:71:8a:ac:9e:
23:f9:04:07:5d:7d:c4:32:86:8d:8a:10:2c:53:23:
7e:a8:65:27:80:fc:e4:29:6d:19:60:bc:a8:a3:e7:
ca:b0:1a:4f:d4:97:19:0e:a3:0f:94:3a:a0:35:8b:
37:33:ea:1b:78:cd:b8:dc:d0:eb:81:59:fe:b7:ba:
59:5d:30:b5:cf:5f:2b:76:06:d2:87:7e:7b:fe:c8:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:88:07:12:71:EA:A4:E9:54:62:4F:80:EA:C2:06:71:83:3D:9E:C4
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139342e39392e3135362e302f32342d3234203d3e203232343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.156.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:38:41:6a:73:67:8e:0b:86:90:69:35:4b:6e:e5:4f:c2:30:
a9:69:0d:e6:3b:23:06:4b:3b:fa:8e:fa:8f:9d:f3:99:7d:2b:
03:b1:c3:91:db:f6:70:44:6d:8b:16:05:6d:74:cc:a7:56:11:
49:0e:1e:5f:ca:d1:2b:b4:4c:3a:bf:d6:ea:42:e8:18:17:cf:
0a:99:b7:7d:f5:a6:cf:f1:e9:b6:be:df:30:11:33:1d:da:d2:
77:d3:af:a2:82:6a:7f:9b:75:dd:3f:31:a4:e4:5b:c7:06:2e:
f7:36:f1:9d:67:70:91:ae:05:31:56:b6:fa:7a:18:2b:28:b7:
9b:8a:f6:c9:17:f4:a7:35:c0:3d:ee:a7:5d:6f:bf:b5:e4:03:
54:d0:cb:b1:46:11:34:0d:38:7c:fa:0b:a7:07:45:9a:da:2a:
f6:07:32:c2:07:7c:e1:b3:19:84:a8:4c:57:aa:6d:6f:d4:18:
69:ef:fd:21:63:67:b5:e0:bd:f8:18:0c:6b:b2:c6:95:79:51:
0a:78:df:43:8e:ea:e7:b9:7b:94:45:48:96:2c:09:bb:a7:f9:
54:66:04:b6:05:27:f9:52:79:90:a8:1d:57:6d:b2:ed:9a:54:
e8:a5:f9:eb:03:71:f3:cc:ce:0d:90:a6:66:5d:4e:1d:96:ec:
4b:0b:eb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:09:12 2026 by rpki-client