Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20323138363132.roa
File: 3139342e33312e3134382e302f32342d3234203d3e20323138363132.roa (raw, json)
Hash identifier: b+EVjQD65myDNFBeWDdgPSLN+IZ8pu2idGNJzr5f6Nc=
Subject key identifier: 77:B1:D5:9F:05:77:79:8C:CE:E9:4F:EC:42:B3:C7:5E:F0:1C:9E:0A
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2E1A4700D2B949992986F903BBA6B9E3AF08879C
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20323138363132.roa
Signing time: Wed 30 Sep 2026 10:21:13 +0000
ROA not before: Wed 30 Sep 2026 10:16:13 +0000
ROA not after: Wed 29 Sep 2027 10:21:13 +0000
asID: 218612
IP address blocks: 194.31.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:1a:47:00:d2:b9:49:99:29:86:f9:03:bb:a6:b9:e3:af:08:87:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 30 10:16:13 2026 GMT
Not After : Sep 29 10:21:13 2027 GMT
Subject: CN=77B1D59F0577798CCEE94FEC42B3C75EF01C9E0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:59:05:8c:5a:dc:03:8d:dd:80:a9:b8:58:
72:66:7e:4d:08:0a:cc:41:b1:79:54:46:3a:85:b0:
05:cb:d7:0a:0e:7d:14:ce:d3:0e:7f:da:0e:ee:9b:
87:92:c0:31:47:ff:60:73:57:36:6a:fd:1a:8f:e4:
fd:11:64:a4:53:f2:15:98:9f:68:8a:e6:48:73:1e:
74:91:42:7a:48:55:3d:b4:94:a4:15:3c:ad:9d:f5:
54:03:38:5b:90:33:01:a1:46:33:76:dd:f8:31:2f:
86:67:1f:9a:9d:8a:e5:d9:e6:46:e0:2c:f0:7b:c9:
4f:6c:3f:94:01:e9:ac:6c:e9:ab:ce:52:d4:76:f3:
8f:3e:a9:b7:64:61:e6:6f:51:33:31:5d:0d:3a:a6:
b2:06:61:d2:f1:d0:4c:f6:f0:18:e3:26:11:f5:91:
5a:8f:d1:59:ac:0a:2b:75:4d:de:d8:39:a8:57:35:
be:84:84:cd:bd:25:93:1d:42:ab:1e:4b:bd:a9:b8:
30:bc:45:63:b6:0d:bf:b9:dd:a2:19:12:08:c4:82:
bc:13:78:ab:73:69:8a:7c:a3:33:cc:f9:40:18:1c:
99:1b:ba:a3:54:47:82:9f:70:77:6b:24:ea:52:19:
d4:dd:b8:05:44:6b:d3:d8:c3:87:98:4d:f7:de:e9:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B1:D5:9F:05:77:79:8C:CE:E9:4F:EC:42:B3:C7:5E:F0:1C:9E:0A
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20323138363132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2d:a7:be:29:dd:1e:cd:6f:3a:ab:cc:64:db:49:d4:86:67:
aa:c8:7c:8e:97:dd:0a:2a:b7:da:5d:57:ed:cb:90:27:42:86:
ee:bf:71:8b:e4:a7:44:d5:92:e1:0c:9b:59:3d:f2:21:47:d7:
30:0a:e9:f9:48:c0:55:40:43:53:6a:44:b4:1e:3b:47:5c:b5:
5c:f0:dc:3a:a8:69:37:49:99:dc:ce:46:2e:d5:3a:69:df:47:
9a:0e:ce:41:c7:24:82:82:ab:4c:8b:da:52:10:9b:fc:57:e8:
a1:b3:ee:4e:78:24:8e:fa:96:8a:bd:26:57:c8:2b:8d:78:2e:
f3:07:fe:90:a9:97:4d:c8:84:fc:a9:dc:e1:78:13:43:fb:5f:
0a:0b:26:d4:17:2d:41:74:cc:38:3d:89:88:8c:7e:21:d2:37:
9d:4b:c2:ba:69:96:6c:86:25:bf:27:16:7c:7e:64:17:6f:bf:
b2:61:34:3c:61:c3:40:61:13:d6:01:05:2d:d0:76:d3:20:42:
22:6b:f6:9f:20:28:5e:9e:22:f1:f7:ee:8d:4c:66:94:03:59:
3f:3d:5c:97:24:92:86:a3:5d:8a:7f:c7:59:73:cb:07:0f:99:
c0:67:ef:b7:39:f3:5d:48:22:38:5f:59:09:00:1f:3f:e2:8b:
66:b3:2e:ef
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIULhpHANK5SZkphvkDu6a5468Ih5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjA5MzAxMDE2MTNaFw0yNzA5MjkxMDIxMTNaMDMxMTAvBgNV
BAMTKDc3QjFENTlGMDU3Nzc5OENDRUU5NEZFQzQyQjNDNzVFRjAxQzlFMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzlkFjFrcA43dgKm4WHJmfk0I
CsxBsXlURjqFsAXL1woOfRTO0w5/2g7um4eSwDFH/2BzVzZq/RqP5P0RZKRT8hWY
n2iK5khzHnSRQnpIVT20lKQVPK2d9VQDOFuQMwGhRjN23fgxL4ZnH5qdiuXZ5kbg
LPB7yU9sP5QB6axs6avOUtR2848+qbdkYeZvUTMxXQ06prIGYdLx0Ez28BjjJhH1
kVqP0VmsCit1Td7YOahXNb6EhM29JZMdQqseS72puDC8RWO2Db+53aIZEgjEgrwT
eKtzaYp8ozPM+UAYHJkbuqNUR4KfcHdrJOpSGdTduAVEa9PYw4eYTffe6fzrAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUd7HVnwV3eYzO6U/sQrPHXvAcngowHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTM0MmUzMzMxMmUzMTM0
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzNjMxMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCH5QwDQYJKoZIhvcNAQELBQADggEBAHotp74p3R7NbzqrzGTbSdSGZ6rIfI6X
3Qoqt9pdV+3LkCdChu6/cYvkp0TVkuEMm1k98iFH1zAK6flIwFVAQ1NqRLQeO0dc
tVzw3DqoaTdJmdzORi7VOmnfR5oOzkHHJIKCq0yL2lIQm/xX6KGz7k54JI76loq9
JlfIK414LvMH/pCpl03IhPyp3OF4E0P7XwoLJtQXLUF0zDg9iYiMfiHSN51Lwrpp
lmyGJb8nFnx+ZBdvv7JhNDxhw0BhE9YBBS3QdtMgQiJr9p8gKF6eIvH37o1MZpQD
WT89XJckkoajXYp/x1lzywcPmcBn77c5811IIjhfWQkAHz/ii2azLu8=
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:23 2026 by rpki-client