Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3130322e302f32342d3234203d3e20313938373533.roa
File: 3139342e33312e3130322e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: QbgdcPkxtP0ip6kPPlaH+mPS9EfHoInrbVv5w418+5U=
Subject key identifier: 5B:35:5C:F7:6B:AA:37:23:F1:8F:4B:E7:11:4E:D5:DA:5D:C5:3E:1A
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3C98BB934B1DEED8C4DDB3C1CC9C7F29F4EBF752
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3130322e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:27 +0000
ROA not before: Fri 16 Oct 2026 18:49:27 +0000
ROA not after: Fri 15 Oct 2027 18:54:27 +0000
asID: 198753
IP address blocks: 194.31.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:98:bb:93:4b:1d:ee:d8:c4:dd:b3:c1:cc:9c:7f:29:f4:eb:f7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:27 2026 GMT
Not After : Oct 15 18:54:27 2027 GMT
Subject: CN=5B355CF76BAA3723F18F4BE7114ED5DA5DC53E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:ac:be:82:93:f3:40:dd:c9:ee:96:20:2b:
56:ee:56:08:8f:20:50:6f:a6:5c:bd:e9:a2:b9:f0:
6f:d9:f1:ae:ae:b8:cc:ac:a1:ba:29:1f:7c:d5:97:
c6:d1:9e:8a:82:d2:35:35:b2:87:49:9e:5f:6b:3d:
19:2b:44:26:40:5c:e7:90:26:90:6e:58:b4:5f:48:
1a:1d:0a:6b:c5:f8:64:56:7b:ff:22:96:e9:61:9c:
e3:3f:2c:f6:4c:2d:9f:b4:d6:2e:30:be:25:bf:51:
90:82:b3:a2:be:13:87:69:3a:41:43:a2:b9:9d:d6:
16:63:68:0e:27:20:bb:a4:22:88:64:eb:33:59:0a:
12:20:6b:c6:6f:4f:b9:aa:0b:2e:18:1a:2c:d2:04:
28:0b:a3:fb:22:23:03:e3:b1:2a:a7:ff:a0:3b:c5:
e8:57:e2:27:fc:07:ab:cc:4f:ae:57:b3:76:27:ce:
eb:24:a3:eb:34:1c:34:66:5a:96:0f:9d:4f:c9:aa:
26:0f:1c:8c:9b:ec:42:a9:cc:62:af:8c:d7:a5:ce:
35:6c:86:29:86:ab:7d:f6:0f:83:4d:79:95:04:20:
48:be:96:df:99:8f:4d:6b:d0:d6:98:91:f1:fb:bd:
16:90:77:7f:8e:12:66:1f:31:40:6e:13:ec:94:8d:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:35:5C:F7:6B:AA:37:23:F1:8F:4B:E7:11:4E:D5:DA:5D:C5:3E:1A
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3130322e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:07:78:30:ca:ac:d7:dd:46:27:9a:db:66:33:36:fc:d4:1c:
ad:4d:37:00:34:e6:96:04:28:2d:f1:32:30:af:d3:ad:3d:46:
13:9c:07:c1:bf:9a:56:e2:40:61:ab:2b:5b:74:1a:f0:9b:c1:
28:de:d0:1f:92:66:e8:82:2a:6c:c8:cc:25:54:b0:3d:88:b6:
dc:9e:d5:fd:e9:de:fe:d8:84:39:36:e0:bd:34:32:85:07:a8:
c4:88:67:4f:5b:16:97:ba:29:15:ae:80:d3:cc:24:c9:54:bd:
d1:f5:0e:d6:e7:e2:fe:f1:66:aa:b5:03:81:36:e5:31:85:df:
72:7b:de:9d:7d:dd:f4:07:24:ae:36:47:ef:c7:5c:af:19:6f:
6a:5e:86:6e:46:1c:0c:04:9b:d1:7b:8f:f4:ac:94:90:93:73:
2a:a7:30:15:72:58:df:c0:5d:9d:1d:47:64:e4:ea:a6:3b:ed:
99:04:52:9c:ce:3d:5b:9d:35:57:4c:e8:4d:7d:18:95:a2:7d:
fe:5b:cc:00:03:bd:0c:68:11:62:d8:a2:2a:dc:08:ef:3f:d8:
69:fe:70:30:3c:35:de:42:27:1e:8e:3a:67:cd:37:ed:be:a2:
bd:e5:32:58:7a:93:69:65:17:09:63:00:fd:a5:41:fa:e6:fc:
ff:47:bc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:55:10 2026 by rpki-client