Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa
File: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (raw, json)
Hash identifier: hrQEkt0NpUNHioADxhgUOeG4b/FoGPyrx13F5DScoSc=
Subject key identifier: 0E:EF:CD:0B:D0:E4:C0:E4:AB:2E:20:8F:57:2F:CD:D2:F2:21:42:B9
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 7D238CBFFA5E60B0A34DF4806BA7FEBCF46E0A48
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa
Signing time: Thu 22 Oct 2026 16:49:38 +0000
ROA not before: Thu 22 Oct 2026 16:44:38 +0000
ROA not after: Thu 21 Oct 2027 16:49:38 +0000
asID: 49468
IP address blocks: 193.203.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:23:8c:bf:fa:5e:60:b0:a3:4d:f4:80:6b:a7:fe:bc:f4:6e:0a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Oct 22 16:44:38 2026 GMT
Not After : Oct 21 16:49:38 2027 GMT
Subject: CN=0EEFCD0BD0E4C0E4AB2E208F572FCDD2F22142B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:ea:43:d8:3b:67:8c:9f:a9:d6:3e:be:df:
4d:d7:f4:db:40:ca:40:47:8e:85:96:f4:be:10:7a:
52:c6:63:c1:07:50:c0:d1:35:f7:61:68:19:81:86:
dd:be:b7:6d:17:86:8d:6a:92:e0:1a:66:26:ff:52:
27:77:8d:cc:64:65:77:2d:9f:c8:98:1e:89:dd:d5:
1b:8c:56:ad:f6:54:d9:64:c9:df:8d:7d:83:ef:a4:
1d:6a:49:e0:d8:8a:f8:5f:16:5f:d4:12:5d:b6:ba:
83:b3:84:8e:43:48:28:cb:75:b1:ed:b5:d5:89:25:
08:2f:86:ba:c1:cc:b7:e7:b1:46:27:33:38:2f:de:
e5:ca:8e:62:f8:21:1c:f5:3a:45:04:12:66:77:a3:
ed:27:16:69:83:b2:ff:df:2e:95:f8:f0:64:40:5a:
62:97:29:fd:3e:8b:97:1b:75:90:ca:e4:13:90:94:
d0:b4:c2:b8:b6:f9:cd:45:b3:e8:31:2f:92:f6:3a:
b1:9d:b6:31:87:36:90:f6:06:f2:c9:59:95:c4:f2:
06:83:69:ba:6a:79:77:f3:ad:87:94:13:7d:25:45:
9f:c2:96:2e:6c:29:db:0d:2e:d7:ac:38:9a:3f:0d:
ec:3a:03:e3:57:69:82:40:25:fd:de:cc:b6:95:bf:
fc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EF:CD:0B:D0:E4:C0:E4:AB:2E:20:8F:57:2F:CD:D2:F2:21:42:B9
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.204.0/23
Signature Algorithm: sha256WithRSAEncryption
21:bc:c3:64:ed:c2:9b:35:88:2a:8c:91:c4:1b:b2:ed:8f:54:
be:43:ca:b4:64:1f:6f:0b:bc:2a:79:77:4a:77:bf:b9:9d:d4:
96:f2:46:03:64:fe:7b:07:a6:0b:ad:6f:39:84:e8:fd:2b:6a:
26:33:db:ad:12:66:82:15:4c:2a:33:67:e6:cc:84:b7:37:8e:
4c:31:4a:28:f4:e7:82:36:b0:fb:46:28:f7:8d:d4:4f:18:63:
8c:28:85:14:2b:1a:72:3e:e8:aa:60:89:21:65:af:61:22:c6:
62:57:bb:c7:2d:76:f5:e7:1f:62:ce:56:7c:c3:5a:2e:45:b5:
02:ca:52:79:ca:19:1c:ec:b1:d4:a1:5a:86:1a:56:3d:02:d3:
48:10:41:03:65:e9:c0:f2:97:c6:01:e0:df:d9:1b:7c:ba:70:
0c:79:8f:df:e5:7f:b3:99:42:82:c7:7a:82:df:d8:f6:ee:1b:
20:31:76:a8:53:38:4c:56:d3:b4:d5:72:67:af:71:ed:56:1c:
6f:cf:9a:02:93:5d:22:2d:b7:b9:59:b8:ef:f3:f8:af:98:b4:
f5:a3:d5:e5:68:7c:fd:89:0d:9b:c8:db:77:1b:d7:09:3d:a4:
79:86:96:8d:8c:98:b3:39:fb:3b:59:bb:ce:cd:58:58:20:73:
53:49:e4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 13:38:30 2026 by rpki-client