Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3135362e3133382e302f32332d3234203d3e2030.roa
File: 3139342e3135362e3133382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: 9UdhYMJ91neXztPP+X7xDO/35OnVrtxH43Fa61hmXdM=
Subject key identifier: 18:11:E4:1B:17:ED:FD:BC:D5:EF:A2:1E:18:B0:14:FE:6E:FB:16:3A
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2943B5B540BD24A3D89202C91088E28A2691CF8A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3135362e3133382e302f32332d3234203d3e2030.roa
Signing time: Thu 27 Aug 2026 10:37:55 +0000
ROA not before: Thu 27 Aug 2026 10:32:55 +0000
ROA not after: Thu 26 Aug 2027 10:37:55 +0000
asID: 0
IP address blocks: 194.156.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:43:b5:b5:40:bd:24:a3:d8:92:02:c9:10:88:e2:8a:26:91:cf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Aug 27 10:32:55 2026 GMT
Not After : Aug 26 10:37:55 2027 GMT
Subject: CN=1811E41B17EDFDBCD5EFA21E18B014FE6EFB163A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:8c:ff:fa:75:07:73:a4:aa:94:6f:3e:f7:
fb:48:69:4c:b0:73:a9:a5:73:48:36:c5:cb:e2:12:
fb:06:e5:d5:b0:36:d2:b6:fb:02:89:53:64:ac:fa:
07:4b:49:3b:94:7d:e2:ef:5b:79:13:69:4c:52:9d:
24:9b:47:36:54:29:9d:89:92:ab:38:bd:71:27:e1:
da:42:39:d9:d5:ca:57:f4:70:72:77:9c:05:38:ea:
f4:17:48:9a:fa:7f:b0:ac:f9:6c:10:cb:e0:a3:8e:
a4:4f:70:86:5d:f4:93:9b:83:3e:aa:07:e6:cb:3d:
b4:79:17:7f:09:f3:77:95:27:65:b9:db:ff:49:a1:
a3:73:e8:74:67:d2:f9:7e:16:68:f8:6a:de:7d:b1:
38:f6:23:00:8c:eb:11:74:68:fe:6b:af:30:42:ac:
d3:54:e3:15:59:56:47:cd:aa:91:8d:1a:cf:71:47:
a1:85:66:bf:b6:6e:7b:ef:6a:67:0d:8b:62:35:4f:
f2:6a:3d:c1:fc:28:ee:ac:92:a1:58:eb:73:5a:1a:
91:ce:2e:6b:06:3e:4c:43:c4:fb:26:f9:f3:69:40:
aa:db:78:bf:11:a5:fa:6e:45:74:f3:c9:57:86:e2:
f8:c5:e1:f7:fa:31:9d:29:93:c0:88:5c:7b:6f:8e:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:11:E4:1B:17:ED:FD:BC:D5:EF:A2:1E:18:B0:14:FE:6E:FB:16:3A
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3135362e3133382e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.138.0/23
Signature Algorithm: sha256WithRSAEncryption
84:25:12:0f:aa:17:04:2d:96:8d:88:5e:af:45:23:d2:c6:12:
34:b4:a5:c3:4e:01:d0:ed:69:41:d8:d8:03:a8:d6:fd:30:2a:
64:1d:ff:32:a8:c1:16:1b:36:aa:1a:aa:f0:6a:cd:f6:3e:01:
a4:fd:49:01:ea:95:df:66:60:64:82:38:31:c4:c1:e8:22:70:
aa:20:d7:ff:3e:2a:8b:d6:78:78:ea:32:76:e4:78:84:79:d9:
30:d4:6b:1b:f7:e7:05:f6:12:62:49:4e:41:62:63:6d:0a:8e:
db:59:4d:01:55:33:75:e4:ea:a8:59:05:00:d8:04:28:87:52:
be:00:fa:d4:3f:8a:e0:f6:73:4d:fe:07:ef:2f:46:aa:c3:e9:
f6:59:6c:97:7f:95:15:3c:1d:56:16:e0:e6:e0:34:00:dd:da:
9e:e2:2b:a9:78:c2:e8:ef:bd:ed:c5:03:03:61:bc:71:85:28:
e0:a4:8a:6b:b3:59:46:6d:73:e9:ab:26:3f:4f:61:96:f0:1a:
15:ae:ca:ad:ac:de:1e:dd:ca:b4:81:1e:72:2e:b6:8a:08:fb:
4c:8f:4f:63:27:aa:8a:8c:aa:f6:c9:37:f3:42:3f:9d:23:c8:
c8:c3:46:32:4a:18:46:a7:53:d0:90:80:47:bc:02:2f:da:43:
c7:4e:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:34 2026 by rpki-client