Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37332e302f32342d3234203d3e20323132323338.roa
File: 3134312e39382e37332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: Kl5wKgri9tWHoaRrmYc5Eeesb7M6//3ZHxX0e7a/BYc=
Subject key identifier: 20:55:EB:EB:68:B9:54:6A:27:35:5D:F5:3A:7C:FB:E6:66:55:26:C7
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 5CA4F1FE302FB944324E97C6C3FDBC2A84B8185C
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37332e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 15 Sep 2026 07:17:51 +0000
ROA not before: Tue 15 Sep 2026 07:12:51 +0000
ROA not after: Tue 14 Sep 2027 07:17:51 +0000
asID: 212238
IP address blocks: 141.98.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a4:f1:fe:30:2f:b9:44:32:4e:97:c6:c3:fd:bc:2a:84:b8:18:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Sep 15 07:12:51 2026 GMT
Not After : Sep 14 07:17:51 2027 GMT
Subject: CN=2055EBEB68B9546A27355DF53A7CFBE6665526C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:20:0e:92:02:56:e2:3c:00:a8:58:2d:f5:
eb:95:29:c9:ac:ce:d6:1a:a1:bd:f2:57:1f:89:b8:
0e:06:c5:c8:0c:18:71:2a:9c:9c:d8:44:9b:ed:c9:
a1:4d:56:95:7b:13:e2:0e:4a:68:91:39:71:33:1c:
85:16:cb:8d:13:3a:d2:50:b4:cd:41:42:ea:20:bb:
95:93:93:ac:5e:25:71:0b:95:84:c8:53:29:1f:e2:
24:99:36:c2:ab:5b:25:e7:2c:4d:94:d8:77:da:2a:
84:33:37:ee:eb:57:45:00:54:f3:3b:33:d0:9f:44:
cb:de:8a:e9:43:2a:0b:0c:47:8d:0c:69:fa:c5:1c:
78:0c:1d:70:9d:cd:c3:19:fb:f6:91:87:3a:05:1c:
44:e8:74:94:ea:a9:db:5f:25:a3:69:70:3b:65:d1:
81:ea:e9:23:2a:3e:6e:34:94:d8:0a:55:9c:89:5b:
cb:38:44:a9:e9:fd:ee:96:a3:d5:24:ed:d3:91:a5:
7f:30:16:aa:67:e0:2c:51:25:97:ba:1d:31:45:0a:
96:4f:d3:c3:d4:a0:10:7c:30:e1:7d:f4:7a:39:b6:
c1:c5:1c:ca:4a:14:b9:47:d0:66:85:00:aa:8a:af:
0c:f8:b0:7a:79:f9:c0:6f:ed:d8:14:d7:c8:e0:3d:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:55:EB:EB:68:B9:54:6A:27:35:5D:F5:3A:7C:FB:E6:66:55:26:C7
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.73.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:c7:84:94:d3:5c:69:04:8f:66:2d:a7:7d:a2:34:68:70:f3:
51:62:7c:55:c1:f2:00:42:58:b3:41:c3:8f:fd:23:64:2b:9c:
dc:8b:cf:a4:b8:94:75:60:98:67:b2:1d:2e:de:f0:a6:7e:7d:
90:c8:81:4a:5f:9f:ed:62:58:b8:94:11:2f:fe:65:9f:a4:7d:
5a:3f:95:d4:1a:3f:58:be:22:ff:98:2d:95:39:93:1c:88:fb:
cd:39:14:9f:0d:8e:5f:c7:38:27:7d:d8:d6:10:0d:9a:ca:a0:
2d:74:af:51:d1:de:60:e5:32:7c:a7:b1:ba:4d:eb:c5:93:9b:
71:18:a0:c4:79:47:8a:16:88:db:63:1a:e4:cc:d1:c4:e7:d2:
83:e6:4c:0e:25:c8:6c:36:b9:a0:3b:3c:69:87:87:ac:33:8f:
54:14:94:44:b3:a2:c7:8a:82:f6:83:73:54:d4:1e:f0:00:93:
13:7d:dc:c3:30:ac:96:c9:b4:ce:48:49:48:26:49:cb:a8:35:
a2:79:63:fb:09:0b:94:84:09:55:79:7b:ee:bd:08:c8:48:c7:
52:8f:79:79:7f:b5:5c:55:da:cb:23:4c:12:33:46:18:f6:3d:
64:ce:81:f0:ef:3c:0a:ad:05:8b:51:10:46:23:0d:e7:34:8d:
8d:74:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:04:48 2026 by rpki-client