Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20383334.roa
File: 3139342e33312e3134382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: UlRJhX0+35CwiRuVyrmXM9owriSf/fNcXS1gh4lF02s=
Subject key identifier: 2F:11:8F:25:3B:DB:35:BA:6F:87:A7:68:DE:E0:E2:92:60:5D:E5:7A
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 33940C10685AF3AF665C983EA49C994B862BFC96
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20383334.roa
Signing time: Mon 24 Aug 2026 14:28:08 +0000
ROA not before: Mon 24 Aug 2026 14:23:08 +0000
ROA not after: Mon 23 Aug 2027 14:28:08 +0000
asID: 834
IP address blocks: 194.31.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:94:0c:10:68:5a:f3:af:66:5c:98:3e:a4:9c:99:4b:86:2b:fc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Aug 24 14:23:08 2026 GMT
Not After : Aug 23 14:28:08 2027 GMT
Subject: CN=2F118F253BDB35BA6F87A768DEE0E292605DE57A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:eb:fa:72:81:fc:7a:f3:7a:63:50:cb:e6:
ef:4c:74:9d:32:a2:d4:c3:20:56:21:11:8a:63:f9:
95:e4:46:2b:01:16:fa:05:20:86:ba:29:c4:2a:ee:
e3:22:ac:be:1d:12:a9:e9:dd:47:2c:7c:51:fe:19:
23:c2:ed:89:27:95:b8:2f:24:2e:50:ce:c3:d5:b7:
33:6f:4e:a1:49:df:b7:f9:d5:55:d8:00:83:df:5d:
28:0b:51:01:67:f5:62:32:b6:34:59:b8:ae:c0:e5:
eb:83:20:08:a8:0d:c9:fa:7c:e7:b0:40:6d:e1:4c:
3d:cd:28:95:1b:3f:79:07:43:a6:05:7f:8d:59:4f:
b2:d2:f4:54:30:23:cb:66:06:5e:d6:09:b4:1f:40:
91:2e:e1:14:03:bc:53:46:c6:29:b5:37:c7:c4:48:
3d:28:09:f7:6f:28:f8:bd:a5:62:c2:f5:3f:37:66:
10:8f:4a:27:32:28:27:f2:aa:bb:95:f2:3e:4a:bf:
c0:34:b5:eb:8c:76:d9:e9:0b:8e:94:13:e6:7b:dd:
94:c7:c8:c3:a5:2a:aa:6b:51:20:ad:58:29:10:c8:
1f:50:fc:61:84:e2:cf:f0:af:82:17:64:ba:ae:53:
d3:f0:96:4e:cd:5f:a3:b4:1e:fe:87:71:c1:a0:39:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:11:8F:25:3B:DB:35:BA:6F:87:A7:68:DE:E0:E2:92:60:5D:E5:7A
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3134382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.148.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b9:e0:36:f9:08:85:8b:57:2f:0a:3a:80:d9:a2:98:7c:38:
75:4e:88:25:53:b6:77:df:ba:56:6e:ab:1c:f4:ce:04:96:17:
af:37:c1:5b:d6:14:cf:d4:ef:79:cc:37:1d:b5:e9:7d:02:72:
eb:70:48:27:5a:d6:66:8b:ba:59:85:75:25:ab:96:8e:8d:31:
70:c4:35:b0:37:47:d8:bf:6b:a6:2d:6a:df:a0:b4:6e:c0:08:
b8:a7:ea:83:5f:d5:19:9a:43:2b:90:b7:08:da:0e:5f:0e:32:
3e:f1:5c:68:f1:d8:13:fc:f0:8e:75:00:19:95:91:30:39:37:
6e:df:71:a5:0a:ba:eb:2c:e1:a8:ac:21:7c:41:32:7a:bf:4a:
51:90:35:51:6e:d7:3a:ad:95:cb:e2:05:40:9f:ca:fa:f0:9d:
c0:48:f8:81:06:88:f4:13:f9:c6:7c:ff:52:e3:54:25:85:df:
95:76:2d:82:ef:35:e4:79:b9:b4:d8:da:ab:97:a9:73:11:1a:
c7:81:a5:de:dc:2a:7c:df:3c:90:c6:b2:4d:16:00:82:86:ae:
52:0e:7d:c5:21:7f:b6:eb:b8:9f:5b:fb:fb:b2:cb:9a:2b:db:
72:23:73:a6:f8:e7:95:31:8b:ce:70:e0:09:11:35:fc:6b:f6:
df:06:14:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:22:15 2026 by rpki-client