Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37322e302f32342d3234203d3e20333935333734.roa
File: 3134312e39382e37322e302f32342d3234203d3e20333935333734.roa (raw, json)
Hash identifier: Bb/YPzT6C6PXEhchJ8yqU7Zf2PpTo+alRj8FvooO2/8=
Subject key identifier: 6B:7C:6B:AF:1E:2A:81:8C:30:FB:56:D1:B6:D1:45:01:84:6A:91:84
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 4B69EB9158939271704F4BF131B46CE573B51B46
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37322e302f32342d3234203d3e20333935333734.roa
Signing time: Tue 11 Aug 2026 13:49:25 +0000
ROA not before: Tue 11 Aug 2026 13:44:25 +0000
ROA not after: Tue 10 Aug 2027 13:49:25 +0000
asID: 395374
IP address blocks: 141.98.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:69:eb:91:58:93:92:71:70:4f:4b:f1:31:b4:6c:e5:73:b5:1b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Aug 11 13:44:25 2026 GMT
Not After : Aug 10 13:49:25 2027 GMT
Subject: CN=6B7C6BAF1E2A818C30FB56D1B6D14501846A9184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:3d:dc:46:f3:24:23:4f:1d:02:9e:f6:d0:
38:64:19:62:b4:da:85:c3:2f:39:08:e4:db:d3:9d:
e0:9e:0b:b6:4a:79:a1:4a:fb:13:24:33:df:84:6e:
42:a8:a6:91:ad:8a:89:90:d3:20:a6:c6:f3:29:70:
23:c1:a0:23:e7:0f:a1:82:6f:7b:dc:35:4b:b2:b6:
75:60:9d:7f:e4:e5:3f:7d:90:d4:b5:0c:eb:bc:e7:
3e:0f:09:f3:77:e9:0c:52:8c:55:b4:c0:05:28:f6:
27:9b:f4:13:f2:07:aa:32:f8:bd:37:72:fe:8f:45:
42:6f:2b:b3:ea:11:eb:87:4d:73:d6:e7:02:7a:83:
6a:58:c7:b9:ec:09:97:0b:2d:78:c9:e1:bb:f0:58:
3b:b3:91:72:7b:08:5f:d6:9a:61:1d:49:2c:a4:ea:
e0:bc:39:2b:5c:63:f7:19:43:54:4b:88:6f:33:b9:
b0:cf:e2:fc:81:64:53:fc:98:4e:91:c2:c4:5c:d7:
4b:ca:f0:f8:b6:8e:77:6f:1b:9b:e3:0a:7a:49:f4:
e3:a6:5a:6d:d1:1e:71:18:fe:9e:af:4e:e3:d3:a9:
d5:cb:2d:a1:bc:34:77:6c:58:f7:59:4c:e5:8b:34:
ce:1b:58:a7:6c:7b:c0:e7:6f:e4:ef:ea:05:4e:de:
b9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7C:6B:AF:1E:2A:81:8C:30:FB:56:D1:B6:D1:45:01:84:6A:91:84
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37322e302f32342d3234203d3e20333935333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.72.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a4:c4:81:0a:e0:51:c8:58:e4:2e:10:c6:35:7f:54:b0:6b:
96:6c:6e:c7:44:d8:59:b5:e1:67:e6:25:8f:3b:ab:07:53:e8:
2f:1e:14:43:80:9c:43:91:94:07:0d:6c:c4:ec:e9:cf:c2:f9:
7d:d5:74:3b:82:b6:c0:46:ce:14:94:ea:fa:90:77:fc:1a:d9:
01:cf:71:f1:fe:2a:29:65:42:23:29:e9:30:3f:b0:55:4e:97:
67:e1:01:b9:a0:60:72:fd:84:db:de:05:31:9d:0a:d6:45:a3:
27:98:62:53:e0:2e:ac:1c:1b:2e:6f:ab:75:c3:db:8b:c1:57:
3e:c4:68:86:26:25:33:12:02:72:86:d5:5a:78:be:cc:bc:79:
07:c0:2b:ef:14:2a:d4:87:37:fd:2d:b3:99:b3:be:e1:6f:93:
93:5a:16:1b:bd:11:3c:c0:72:50:33:04:bb:ba:97:1d:c2:57:
b1:53:73:01:22:bb:ff:fb:a0:1c:77:5b:d7:75:68:e9:10:06:
fe:5b:46:6d:a1:93:6a:b7:be:f6:02:85:41:51:d8:40:78:8a:
97:63:4d:27:2d:68:c7:65:2c:4f:7b:2f:fb:3c:2d:35:93:08:
3c:b0:b6:b4:6f:9d:42:2b:10:f9:6a:5c:ac:d0:fa:9b:6a:57:
03:45:bd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:47:25 2026 by rpki-client