Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3130312e302f32342d3234203d3e20313938373533.roa
File: 3139342e33312e3130312e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: +ZqR4swy7B+xWZMSufFS/R6MER3DglVSrvnyILVmv3w=
Subject key identifier: 50:F2:7E:54:E5:C1:F6:CF:60:92:0A:1D:5B:9D:7B:A1:D0:81:A3:08
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 12D19709D8EDB81AB923A921444E890435C7C95E
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3130312e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:26 +0000
ROA not before: Fri 16 Oct 2026 18:49:26 +0000
ROA not after: Fri 15 Oct 2027 18:54:26 +0000
asID: 198753
IP address blocks: 194.31.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d1:97:09:d8:ed:b8:1a:b9:23:a9:21:44:4e:89:04:35:c7:c9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:26 2026 GMT
Not After : Oct 15 18:54:26 2027 GMT
Subject: CN=50F27E54E5C1F6CF60920A1D5B9D7BA1D081A308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:df:43:10:ae:d0:36:bf:48:a8:2f:d9:9b:
4c:f6:ad:91:91:89:76:ca:6b:cd:c7:0f:e6:d9:f8:
03:34:68:92:a4:8d:6f:75:70:e8:c4:f4:56:48:69:
d6:53:16:3f:4b:c5:fa:b8:b7:fd:39:c5:82:f5:e1:
eb:14:21:a5:7b:8b:c2:80:b0:06:68:f4:16:7a:c8:
5e:7e:50:8c:bf:f0:df:97:3c:7a:0b:66:46:7d:1c:
79:4c:d7:e7:79:7e:aa:7d:8b:c6:fc:ea:bf:6e:6a:
6d:28:c8:f7:2d:b2:79:39:11:41:d9:9c:e6:d1:a3:
25:be:02:ad:e1:9b:2e:a7:b2:3f:23:33:a0:13:da:
2d:d1:d1:89:ba:3e:1e:2f:d1:39:e4:1c:d9:1a:c5:
a1:42:cc:7e:39:09:8e:2a:8f:d4:c7:b7:bd:0b:25:
af:35:d9:66:7c:af:38:8b:21:84:95:4b:cb:f3:7d:
e2:c7:f5:58:c9:87:2d:da:b7:77:1c:39:11:c3:bb:
44:38:13:c6:e1:31:37:b9:b1:b5:fe:55:cd:90:bc:
cc:b8:b9:c7:f4:22:0e:d7:f6:15:87:74:ee:8c:4a:
ac:5e:39:ea:69:3b:b7:92:05:a1:d9:be:09:fd:21:
d9:53:3c:b9:17:5b:11:da:29:c5:87:41:0f:7a:00:
41:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:7E:54:E5:C1:F6:CF:60:92:0A:1D:5B:9D:7B:A1:D0:81:A3:08
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3130312e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.101.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:10:62:4b:94:3b:b1:48:2e:b4:a3:3c:ac:d2:a7:b4:30:0a:
80:c1:00:15:a5:72:ee:48:06:79:e8:b6:73:94:5c:7a:ae:9e:
ef:73:aa:ba:32:7b:36:d0:53:61:a8:b9:dc:6d:29:a2:1a:1b:
0f:07:7d:f0:61:2f:6a:c3:08:b6:e8:5d:81:f4:e7:1d:83:27:
97:f4:ab:40:e4:27:63:7d:86:4b:83:4a:49:22:56:c2:63:8b:
78:78:1d:9c:10:39:49:92:ea:27:10:e2:13:87:bb:c1:30:6a:
e1:45:59:2f:e9:2b:6e:fc:42:2c:b0:5f:67:27:7d:d4:43:8f:
89:8f:a7:de:9e:4e:ba:24:0e:41:38:fb:8d:d3:10:7d:a1:2b:
66:33:ae:e9:33:bf:ed:d5:f8:23:11:9d:14:2e:87:dd:bb:71:
28:f6:95:a4:5d:0c:3f:cd:46:17:97:61:13:84:c4:7c:b3:55:
34:98:48:15:d4:25:0f:67:23:af:09:d2:c6:44:c2:b5:3c:cb:
4a:6c:f0:b8:39:d3:12:b9:24:15:b0:48:c7:75:3a:4a:a7:3f:
f5:ce:db:7c:fc:93:95:75:88:b0:70:d0:54:9e:27:be:07:7e:
1e:f1:e6:ec:11:83:33:07:ca:54:11:7c:19:94:95:3b:35:05:
e1:54:13:a7
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEtGXCdjtuBq5I6khRE6JBDXHyV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjEwMTYxODQ5MjZaFw0yNzEwMTUxODU0MjZaMDMxMTAvBgNV
BAMTKDUwRjI3RTU0RTVDMUY2Q0Y2MDkyMEExRDVCOUQ3QkExRDA4MUEzMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi099DEK7QNr9IqC/Zm0z2rZGR
iXbKa83HD+bZ+AM0aJKkjW91cOjE9FZIadZTFj9Lxfq4t/05xYL14esUIaV7i8KA
sAZo9BZ6yF5+UIy/8N+XPHoLZkZ9HHlM1+d5fqp9i8b86r9uam0oyPctsnk5EUHZ
nObRoyW+Aq3hmy6nsj8jM6AT2i3R0Ym6Ph4v0TnkHNkaxaFCzH45CY4qj9THt70L
Ja812WZ8rziLIYSVS8vzfeLH9VjJhy3at3ccORHDu0Q4E8bhMTe5sbX+Vc2QvMy4
ucf0Ig7X9hWHdO6MSqxeOeppO7eSBaHZvgn9IdlTPLkXWxHaKcWHQQ96AEHRAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUUPJ+VOXB9s9gkgodW517odCBowgwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTM0MmUzMzMxMmUzMTMw
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzNzM1MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCH2UwDQYJKoZIhvcNAQELBQADggEBALIQYkuUO7FILrSjPKzSp7QwCoDBABWl
cu5IBnnotnOUXHqunu9zqroyezbQU2GoudxtKaIaGw8HffBhL2rDCLboXYH05x2D
J5f0q0DkJ2N9hkuDSkkiVsJji3h4HZwQOUmS6icQ4hOHu8EwauFFWS/pK278Qiyw
X2cnfdRDj4mPp96eTrokDkE4+43TEH2hK2Yzrukzv+3V+CMRnRQuh927cSj2laRd
DD/NRheXYROExHyzVTSYSBXUJQ9nI68J0sZEwrU8y0ps8Lg50xK5JBWwSMd1Okqn
P/XO23z8k5V1iLBw0FSeJ74Hfh7x5uwRgzMHylQRfBmUlTs1BeFUE6c=
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:49:45 2026 by rpki-client