Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3130332e302f32342d3234203d3e20313938373533.roa
File: 3139342e33312e3130332e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: GrTomTjMw1kTa2iZDg+mri2FOvObd+6nMrTZRGSJ9wA=
Subject key identifier: EA:C1:0C:2A:69:42:1E:98:14:C5:7F:4D:6B:E8:F6:24:E9:C2:6C:ED
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6BED3705881593A40F27A48190263DE3FBFB169D
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3130332e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:29 +0000
ROA not before: Fri 16 Oct 2026 18:49:29 +0000
ROA not after: Fri 15 Oct 2027 18:54:29 +0000
asID: 198753
IP address blocks: 194.31.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ed:37:05:88:15:93:a4:0f:27:a4:81:90:26:3d:e3:fb:fb:16:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:29 2026 GMT
Not After : Oct 15 18:54:29 2027 GMT
Subject: CN=EAC10C2A69421E9814C57F4D6BE8F624E9C26CED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:f4:ef:21:6c:36:9f:53:e8:42:c0:d2:21:
13:6b:49:2c:bb:c8:93:b7:77:5d:25:84:50:d4:e0:
7b:4b:d8:81:60:fa:88:cf:a2:a0:cc:75:e9:84:81:
8a:82:43:49:55:d7:08:9b:08:93:fa:58:a8:bd:47:
d9:2e:f2:4f:f5:8d:55:ea:c8:13:87:be:c3:c7:6e:
d3:89:78:50:18:3d:a3:4c:6e:ef:08:0e:f0:e4:ab:
9f:52:34:6f:e5:fe:48:f2:c9:47:77:65:e2:70:07:
63:56:3f:7e:7d:fc:c3:38:bf:4c:47:20:ef:c7:ed:
f8:74:eb:91:18:b9:ad:e0:8c:23:3a:b3:c4:15:db:
99:1e:b0:35:66:54:14:9e:48:51:50:91:9b:88:2d:
27:75:6a:16:6f:aa:e4:e7:50:01:2f:50:c8:5c:9f:
29:63:5d:c6:bd:47:a3:c1:08:5b:97:87:54:52:47:
a5:50:c2:bf:e4:10:04:0a:75:57:b4:21:9c:ee:b6:
fd:71:8c:ae:e1:4e:01:f9:c7:18:00:25:a7:05:1e:
af:ef:7e:ea:97:c4:22:34:b6:17:fa:83:1d:45:ef:
c0:b5:01:44:f4:c4:9b:12:32:d2:d6:f2:1d:6c:c0:
a2:ac:b9:d6:1a:06:d4:36:af:33:7a:12:c4:54:64:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C1:0C:2A:69:42:1E:98:14:C5:7F:4D:6B:E8:F6:24:E9:C2:6C:ED
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3130332e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.103.0/24
Signature Algorithm: sha256WithRSAEncryption
66:35:6d:3c:8f:8c:73:71:63:55:bc:e9:69:2d:62:21:3e:05:
fe:f3:f2:63:69:61:28:92:a7:52:51:61:dd:cd:66:6e:44:f1:
36:65:c0:4b:b3:0c:60:3a:7f:d3:48:aa:69:8d:57:a1:8f:1f:
e9:e6:1a:1c:25:d2:2e:32:ce:60:32:15:0b:6c:f0:cf:66:5f:
55:19:b8:0a:8a:a7:81:00:81:65:83:97:05:57:16:d9:a5:c6:
a5:1b:47:29:ff:56:e1:10:0b:bf:e3:97:d7:53:8d:2e:79:88:
cb:05:b3:36:85:db:31:d1:b4:60:98:31:66:7a:20:0d:4b:8d:
ff:14:9f:19:7c:c0:82:3b:c9:7f:2d:fe:0d:07:db:fb:68:c3:
8c:01:52:40:18:da:ad:76:de:4d:5c:0a:b3:fb:e7:0d:b3:53:
2d:20:1c:b5:7b:ca:9d:67:33:f3:39:8d:6b:22:79:4d:90:17:
06:7b:64:dd:a9:da:3b:cd:16:32:bf:47:e8:52:c1:69:d6:99:
00:c4:28:c6:b1:a8:22:6d:70:e1:d5:ad:29:8f:fc:23:b3:ce:
b7:58:2c:5b:d8:f8:5b:25:1d:b8:fe:df:e3:0d:22:d5:49:cf:
55:61:2d:da:0c:68:40:05:5f:70:43:05:18:d6:53:a7:6c:a6:
83:59:f6:2b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUa+03BYgVk6QPJ6SBkCY94/v7Fp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjEwMTYxODQ5MjlaFw0yNzEwMTUxODU0MjlaMDMxMTAvBgNV
BAMTKEVBQzEwQzJBNjk0MjFFOTgxNEM1N0Y0RDZCRThGNjI0RTlDMjZDRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QPTvIWw2n1PoQsDSIRNrSSy7
yJO3d10lhFDU4HtL2IFg+ojPoqDMdemEgYqCQ0lV1wibCJP6WKi9R9ku8k/1jVXq
yBOHvsPHbtOJeFAYPaNMbu8IDvDkq59SNG/l/kjyyUd3ZeJwB2NWP359/MM4v0xH
IO/H7fh065EYua3gjCM6s8QV25kesDVmVBSeSFFQkZuILSd1ahZvquTnUAEvUMhc
nyljXca9R6PBCFuXh1RSR6VQwr/kEAQKdVe0IZzutv1xjK7hTgH5xxgAJacFHq/v
fuqXxCI0thf6gx1F78C1AUT0xJsSMtLW8h1swKKsudYaBtQ2rzN6EsRUZF6PAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU6sEMKmlCHpgUxX9Na+j2JOnCbO0wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTM0MmUzMzMxMmUzMTMw
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzNzM1MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCH2cwDQYJKoZIhvcNAQELBQADggEBAGY1bTyPjHNxY1W86WktYiE+Bf7z8mNp
YSiSp1JRYd3NZm5E8TZlwEuzDGA6f9NIqmmNV6GPH+nmGhwl0i4yzmAyFQts8M9m
X1UZuAqKp4EAgWWDlwVXFtmlxqUbRyn/VuEQC7/jl9dTjS55iMsFszaF2zHRtGCY
MWZ6IA1Ljf8Unxl8wII7yX8t/g0H2/tow4wBUkAY2q123k1cCrP75w2zUy0gHLV7
yp1nM/M5jWsieU2QFwZ7ZN2p2jvNFjK/R+hSwWnWmQDEKMaxqCJtcOHVrSmP/COz
zrdYLFvY+FslHbj+3+MNItVJz1VhLdoMaEAFX3BDBRjWU6dspoNZ9is=
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:35:55 2026 by rpki-client