Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37332e302f32342d3234203d3e20313332393938.roa
File: 3134312e39382e37332e302f32342d3234203d3e20313332393938.roa (raw, json)
Hash identifier: WX6hA9G/D5H7veeglXGZsbCxIyJx7adl1DBDXuZzkOU=
Subject key identifier: 93:3C:BD:99:3D:DD:B2:6A:33:DC:BC:5F:7D:CF:4F:41:B0:80:42:51
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 2410EE8F680CB7B19E70A824F637254B08624E7D
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37332e302f32342d3234203d3e20313332393938.roa
Signing time: Wed 01 Jul 2026 07:27:56 +0000
ROA not before: Wed 01 Jul 2026 07:22:56 +0000
ROA not after: Wed 30 Jun 2027 07:27:56 +0000
asID: 132998
IP address blocks: 141.98.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:10:ee:8f:68:0c:b7:b1:9e:70:a8:24:f6:37:25:4b:08:62:4e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jul 1 07:22:56 2026 GMT
Not After : Jun 30 07:27:56 2027 GMT
Subject: CN=933CBD993DDDB26A33DCBC5F7DCF4F41B0804251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:65:c9:79:79:d0:2b:b5:83:0b:00:26:e7:
9f:30:03:18:e1:9b:20:9f:33:22:68:70:b6:be:0f:
0a:c3:e5:43:0e:b7:6b:78:65:20:26:d3:70:41:91:
87:0b:25:f5:a6:e5:df:2d:fc:0c:60:30:3b:6b:76:
7e:0c:dd:e2:a3:e0:ac:56:f3:80:17:ae:4d:1b:8b:
d9:7c:78:30:42:6d:f7:b1:80:64:61:cd:af:d8:83:
2c:a2:62:55:12:c7:2a:f7:d0:64:95:3c:28:8a:f4:
4d:7e:67:ed:15:94:48:72:83:21:f8:0c:d4:29:13:
0c:06:5c:af:61:8e:18:4e:ac:95:7a:b6:61:e4:af:
7d:19:2a:58:61:b3:f8:bb:e6:66:98:4e:e4:82:c6:
37:b4:60:51:83:c0:30:12:8f:4f:fc:1e:c3:83:ff:
9f:61:ee:ab:55:ea:33:d6:60:e8:04:59:78:96:99:
17:16:a2:9d:f3:35:87:c7:51:ff:c0:e8:1c:9b:bb:
9f:d8:24:52:8d:54:ee:15:09:a6:70:a0:ac:f4:6e:
0a:6a:8b:f1:3a:4c:1f:ad:42:ca:e6:41:76:7f:e2:
36:4e:5d:1c:bd:ac:2c:34:3c:1d:7a:4c:3f:6f:be:
65:bf:d9:7c:21:9d:a0:26:ff:17:89:ec:bb:fd:f1:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3C:BD:99:3D:DD:B2:6A:33:DC:BC:5F:7D:CF:4F:41:B0:80:42:51
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37332e302f32342d3234203d3e20313332393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.73.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d0:88:ca:87:be:c5:f8:21:16:b8:c1:86:cc:4b:12:30:23:
2c:90:f8:f2:86:07:e7:0b:d0:d2:d1:ae:1a:7f:17:bc:9e:dc:
5f:4d:84:91:70:dc:da:df:ec:62:f2:0a:df:a4:b0:97:39:c5:
10:a8:1b:71:04:2d:52:4b:61:6d:3d:c1:5f:27:be:35:d8:f8:
a3:f3:87:50:ec:33:7b:15:d3:fd:d8:3b:7b:4c:d2:cb:85:aa:
3e:52:df:f6:7b:7b:64:63:90:22:d6:d5:57:6c:34:6a:f8:37:
19:be:0b:90:7d:88:44:2c:fc:49:bc:40:ea:e7:c6:67:89:4c:
9b:24:79:97:7a:8c:78:ff:66:0e:d6:de:44:60:cf:2b:d8:10:
d8:89:5d:00:63:37:ae:05:f8:6b:68:bb:06:04:d7:9c:a5:3f:
59:da:ce:46:5d:eb:29:8d:cb:30:30:5c:81:88:65:2e:4e:ca:
4c:ed:ef:ca:1f:98:b3:50:b8:2f:50:91:24:7a:f4:b3:e2:e5:
a5:2f:5e:e8:c8:13:40:6a:e8:19:84:d6:b1:cf:7c:55:39:8e:
e2:62:e9:f1:46:61:09:9c:6e:17:8a:ee:dc:5a:a6:5d:5d:f2:
c8:71:ff:3c:62:40:9e:a5:72:46:82:fd:27:f4:b8:31:54:78:
68:06:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:54:42 2026 by rpki-client