Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3130302e302f32342d3234203d3e20313938373533.roa
File: 3139342e33312e3130302e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: 0OgRjQD6NtRSgU9h44T6ZtZOPU0kiSIRNO2B+GUmbWk=
Subject key identifier: 87:2B:87:68:13:54:7C:C2:D0:F5:4A:B9:39:E9:3B:85:69:30:A2:1D
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 74F6984A412123B50B7C481EDE1C36DD4A14FD50
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3130302e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:24 +0000
ROA not before: Fri 16 Oct 2026 18:49:24 +0000
ROA not after: Fri 15 Oct 2027 18:54:24 +0000
asID: 198753
IP address blocks: 194.31.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f6:98:4a:41:21:23:b5:0b:7c:48:1e:de:1c:36:dd:4a:14:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:24 2026 GMT
Not After : Oct 15 18:54:24 2027 GMT
Subject: CN=872B876813547CC2D0F54AB939E93B856930A21D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:d6:2f:3a:0f:ef:1e:ba:9b:69:ec:d1:20:
a6:af:14:a4:78:d2:7e:2a:f2:c6:d5:4c:8d:04:be:
53:e3:cd:9a:32:f2:44:40:eb:14:61:00:20:6b:57:
2f:ce:69:f1:a6:c2:da:55:0b:ef:d2:84:1d:c3:10:
c2:f0:9c:6b:34:03:2a:04:44:51:ef:96:02:50:3e:
53:79:9c:ff:b7:10:32:77:b4:72:7f:2c:79:79:89:
0f:c8:e7:f4:7a:22:63:2c:39:1c:d7:f5:f8:42:dc:
f1:3e:48:42:4b:0c:4f:42:10:8d:80:31:34:f6:62:
48:62:9c:e0:e6:55:53:23:3a:b9:38:cd:70:0b:e9:
d6:18:3f:98:1b:17:3b:ac:ee:a9:80:3d:00:31:d1:
55:de:dd:ba:31:4d:fc:fd:dc:85:d6:90:86:a7:57:
3f:0b:82:12:31:5f:78:fd:63:e9:26:a2:6e:6c:1a:
60:43:99:7c:3f:07:43:7e:ab:47:cc:43:5e:36:3c:
7f:10:6f:3d:b9:d9:33:f9:d3:9b:5e:91:16:7c:73:
69:fb:ec:0c:d1:de:8d:70:8d:22:66:ec:b5:2c:a7:
e3:88:94:04:6b:94:25:60:ad:71:98:e4:75:23:34:
e3:75:55:75:b9:b8:29:80:5c:f6:02:1a:01:fd:fe:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2B:87:68:13:54:7C:C2:D0:F5:4A:B9:39:E9:3B:85:69:30:A2:1D
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3130302e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.100.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:86:36:5e:66:04:06:d7:cc:03:00:6c:85:00:3f:01:03:d9:
c0:2e:1d:90:43:17:7a:bc:b9:29:f9:cc:88:5b:a0:52:0b:02:
2a:61:bb:e2:1f:5f:73:07:52:91:d1:f1:f7:13:b2:6a:04:92:
23:8c:55:12:d8:94:8c:97:bd:a0:5c:ba:2e:a0:14:d8:b4:f3:
9c:b9:8c:a9:3a:2e:e2:f9:ae:c3:a0:88:b6:d8:1f:c5:52:41:
77:77:30:d3:71:bf:08:fd:44:37:52:1c:da:1e:7e:e5:2b:2c:
c9:1c:a8:ea:95:51:87:11:15:5f:0e:15:25:67:9b:34:5d:37:
c5:88:90:10:22:c5:97:a8:a9:e2:f0:e1:53:94:db:7e:f0:70:
f9:dd:6f:14:cf:b8:9c:2f:c2:d6:76:40:26:c1:bb:ad:73:24:
da:49:5c:e5:70:e2:49:b1:b0:93:41:73:6d:cd:1c:28:0e:a8:
28:33:83:e4:ec:67:a8:cb:60:4f:de:16:ae:7d:cf:80:a1:67:
ce:ea:7f:48:27:ed:96:4b:71:d2:64:a8:12:1d:98:78:20:a8:
ee:96:32:e9:32:3c:49:86:af:93:62:c0:cb:aa:a2:38:78:68:
61:6d:3e:2c:e9:cc:e5:e7:89:37:e6:01:67:62:1e:66:03:d1:
e3:21:cf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:35:47 2026 by rpki-client